The security challenges for mobile ubiquitous services

Abstract

It is envisaged that in future mobile ubiquitous environments, users will be able to seamlessly, search, access and consume a rich offering of services and content from an array of Service/Content Providers, whilst they are on the move, anytime, anywhere. Unfortunately, this new computing paradigm also brings along new and unique security challenges. Novel security solutions are therefore required. But, in order for appropriate security solutions to be devised, all possible security threats must first be thoroughly analysed, and the corresponding security requirements be identified. In this paper, we examine the security issues germane to a mobile ubiquitous environment. We then suggest some possible solutions which may be employed to address these security issues. Open research issues are also highlighted.

Introduction

The vision of mobile ubiquitous access/service is fast becoming a reality. This can be attributed to advances in various wireless networking access technologies (such as Bluetooth, WiFi, WiMAX, UWB), coupled with the increasing computation and communication capability of mobile devices. Apart from innovations in network technologies and mobile applications, good and sound security solutions are also crucial and critical for widespread adoption of such services.

In the Mobile VCE project on ubiquitous services, it is envisaged that users (via their mobile devices and some network access technologies) are able to seamlessly discover, and access a rich offering of services and content from a wide choice of service and content providers (as shown in Fig. 1).

As can be seen from Fig. 1, there are three key perspectives to a mobile ubiquitous environment, namely: User, Network and Service/Content Provider. This paper aims to address the ubiquitous services security issues arising from these three perspectives. We briefly introduce each of the perspectives in the following sub-sections.

From the User Perspective, the fundamental requirement is a user setup that ensures simplicity and consistent service access. The Internet today comprises widely of diverse heterogeneous networks, with very different and varying capabilities (bandwidth, interface speed, edge-to-edge latency and connection type). Also, the usage of laptops, palmtops and mobiles has increased and so has the variety of operating systems. This has lead to a large diversity in end system capabilities. This diversity, combined with the huge amounts of information and services available via these technologies, results in an undesirable level of complexity. Inevitably, in this new environment, users are more vulnerable to being exposed to a variety of security threats and various forms of attacks. It is therefore imperative that the security and privacy of users are protected and not compromised.

From the Network Perspective, the support for Security, Quality of Service (QoS) and Mobility in various participating networks is a key factor in providing an acceptable level of network performance. Heterogeneity has made the co-operation among “Security, QoS, Mobility Management” a complex issue. A common network framework is thus required to integrate Security, QoS and Mobility functions efficiently. The network components incorporating these functionalities, “Security, QoS, Mobility Management”, are also referred to as ‘enhanced nodes’. For example, in Hierarchical Mobile IPv6, the Mobility Anchor Points (MAPs) can act as enhanced nodes.

From the content and service provider perspective, multiple co-operative networks promise the possibility of a range of new ‘ubiquitous services’, including context-aware services. Particularly, the need for content and service providers to support multimedia applications over a range of eligible access network technologies (including ad hoc), each with its own capabilities represent a key challenge to service delivery. In this perspective, security is also important so as to protect the interests of the Service/Content Provider from malicious users and other adversaries.