Publications

@article{8246828,

title = {Seamless human-device interaction in the internet of things},

author = {E Rubio-Drosdov and D Díaz-Sánchez and F Almenárez and P Arias-Cabarcos and A Marín},

url = {/download/Seamless_Human-Device_Interaction_in_the_Internet_of_Things.pdf

https://ieeexplore.ieee.org/document/8246828},

doi = {10.1109/TCE.2017.015076},

issn = {1558-4127},

year  = {2017},

date = {2017-11-01},

urldate = {2017-11-01},

journal = {IEEE Transactions on Consumer Electronics},

volume = {63},

issue = {4},

pages = {490-498},

abstract = {The Internet of Things will bring a scenario in which interaction between humans and devices will be critical to allow people to use, monitor or configure Internet of Things devices. Interactions in such applications are based on traditional graphical interfaces. Devices that accept interaction based on Natural Language, e.g., through voice commands, can understand basic human orders or answering questions whenever user expressions fit into a known language pattern. Some devices can understand natural language voice commands but require sophisticated voice assistants located in the cloud, which raises significant privacy concerns. Others devices which handle voice-processing locally can perform a very limited local recognition system, requiring users to be familiar with words the system can process. The purpose of this work is to diminish the complexity of Natural Language processing in the context of IoT. The solution posited in this article allows Internet of Things devices to offload Natural Language processing to a system that improves the use of Natural Language and alleviates the need to learn or remember specific words or terms intended for triggering device actions. We have evaluated the feasibility of the design with a proof-of-concept implemented in a home environment and it was tested by real users.},

keywords = {Human-Device Interaction, inrisco, Internet of Things, Natural Language Processing},

pubstate = {published},

tppubtype = {article}

}

@article{8003467,

title = {Collaborative eHealth Meets Security: Privacy-Enhancing Patient Profile Management},

author = {Rosa Sánchez-Guerrero and Florina Almenárez-Mendoza and Daniel Díaz-Sánchez and Patricia Arias-Cabarcos and Andrés Marín-López},

url = {/download/Collaborative_eHealth_meets_Security_Privacy-Enhancing_Patient_Profile_Management.pdf

https://ieeexplore.ieee.org/document/8003467},

doi = {10.1109/JBHI.2017.2655419},

issn = {2168-2194 },

year  = {2017},

date = {2017-11-01},

urldate = {2017-11-01},

journal = {IEEE Journal of Biomedical and Health Informatics},

volume = {21},

issue = {6},

pages = {1741-1749},

abstract = {Collaborative healthcare environments offer potential benefits, including enhancing the healthcare quality delivered to patients and reducing costs. As a direct consequence, sharing of electronic health records (EHRs) among healthcare providers has experienced a noteworthy growth in the last years, since it enables physicians to remotely monitor patients' health and enables individuals to manage their own health data more easily. However, these scenarios face significant challenges regarding security and privacy of the extremely sensitive information contained in EHRs. Thus, a flexible, efficient, and standards-based solution is indispensable to guarantee selective identity information disclosure and preserve patient's privacy. We propose a privacy-aware profile management approach that empowers the patient role, enabling him to bring together various healthcare providers as well as user-generated claims into an unique credential. User profiles are represented through an adaptive Merkle Tree, for which we formalize the underlying mathematical model. Furthermore, performance of the proposed solution is empirically validated through simulation experiments.},

keywords = {EHR, emadrid2, Merkle Tree, Minimal Disclosure, privacy, Profile Management},

pubstate = {published},

tppubtype = {article}

}

@article{7838091,

title = {Secure store and forward proxy for dynamic IoT applications over M2M networks},

author = {Daniel Díaz-Sánchez and R. Simon-Sherratt and Florina Almenarez and Patricia Arias and Andrés Marín},

url = {https://ieeexplore.ieee.org/document/7838091

https://phpmyadmin.pervasive.it.uc3m.es/download/Secure__Store_and_Forward_Proxy_for_Dynamic_IoT_Applications_over_M2M_Networks.pdf},

doi = {10.1109/TCE.2016.7838091},

issn = {0098-3063},

year  = {2016},

date = {2016-11-01},

urldate = {2016-11-01},

journal = {IEEE Transactions on Consumer Electronics},

volume = {62},

issue = {4},

pages = {389-397},

abstract = {Internet of Things (IoT) applications are expected to generate a huge unforeseen amount of traffic flowing from Consumer Electronics devices to the network. In order to overcome existing interoperability problems, several standardization bodies have joined to bring a new generation of Machine to Machine (M2M) networks as a result of the evolution of wireless sensor/actor networks and mobile cellular networks to converged networks. M2M is expected to enable IoT paradigms and related concepts into a reality at a reasonable cost. As part of the convergence, several technologies preventing new IoT services to interfere with existing Internet services are flourishing. Responsive, message-driven, resilient and elastic architectures are becoming essential parts of the system. These architectures will control the entire data flow for an IoT system requiring sometimes to store, shape and forward data among nodes of a M2M network to improve network performance. However, IoT generated data have an important personal component since it is generated in personal devices or are the result of the observation of the physical world, so rises significant security concerns. This article proposes a novel opportunistic flexible secure store and forward proxy for M2M networks and its mapping to asynchronous protocols that guarantees data confidentiality.},

keywords = {encryption, Internet of Things, Machine to Machine, privacy},

pubstate = {published},

tppubtype = {article}

}

@article{HUI2017358,

title = {Major requirements for building Smart Homes in Smart Cities based on Internet of Things technologies},

author = {Terence K-L-Hui and Simon R-Sherratt and Daniel Díaz-Sánchez},

url = {http://www.sciencedirect.com/science/article/pii/S0167739X16304721

/download/Major_requirements_for_building_Smart_Homes_in_Smart_Cities_based.pdf},

doi = {https://doi.org/10.1016/j.future.2016.10.026},

issn = {0167-739X},

year  = {2016},

date = {2016-11-01},

urldate = {2016-11-01},

journal = {Future Generation Computer Systems},

volume = {76},

pages = {358 - 369},

abstract = {The recent boom in the Internet of Things (IoT) will turn Smart Cities and Smart Homes (SH) from hype to reality. SH is the major building block for Smart Cities and have long been a dream for decades, hobbyists in the late 1970s made Home Automation (HA) possible when personal computers started invading home spaces. While SH can share most of the IoT technologies, there are unique characteristics that make SH special. From the result of a recent research survey on SH and IoT technologies, this paper defines the major requirements for building SH. Seven unique requirement recommendations are defined and classified according to the specific quality of the SH building blocks.},

keywords = {Ambient intelligence, Home Automation, Internet of Things, Smart Cities, Smart Home requirements},

pubstate = {published},

tppubtype = {article}

}

@article{7579116,

title = {Comparing Password Management Software: Toward Usable and Secure Enterprise Authentication},

author = {Patricia Arias-Cabarcos and Andrés Marín and Diego Palacios and Florina Almenárez and Daniel Díaz-Sánchez},

url = {https://ieeexplore.ieee.org/document/7579116

https://doi.org/10.1109/MITP.2016.81

/download/ComparingPasswordManagementSoftware.pdf},

doi = {10.1109/MITP.2016.81},

issn = {1941-045X},

year  = {2016},

date = {2016-09-01},

urldate = {2016-09-01},

journal = {IT Professional},

volume = {18},

issue = {5},

pages = {34-40},

abstract = {In today's corporate IT systems, employees routinely repeat an undeniable pattern: accessing a huge number of password-protected services. In this regard, although deploying a strong enterprise password policy can increase security against online breaches and data leaks, it also imposes a significant usability burden on users. To alleviate this problem, password managers (PMs) are considered user-friendly tools that automate password generation and login processes. But how secure and usable are these tools? The authors analyze the four most popular PMs with free versions from both security and usability perspectives. The comparison leads to recommendations on enterprise PM selection, as well as to the identification of new lines of research and development on usable authentication.},

keywords = {cybersecurity, emadrid2, inrisco, password managers, Security, usability},

pubstate = {published},

tppubtype = {article}

}

@article{campos008,

title = {A Bandwidth-Efficient Dissemination Scheme of Non-Safety Information in Urban VANETs},

author = {Estrella García-Lozano and Celeste Campo-Vázquez and Carlos García-Rubio and Alicia Rodriguez-Carrion },

url = {http://hdl.handle.net/10016/27911},

doi = {https://doi.org/10.3390/s16070988},

issn = {1424-8220},

year  = {2016},

date = {2016-06-27},

urldate = {2016-06-27},

journal = {Sensors },

volume = {16},

issue = {7},

abstract = {The recent release of standards for vehicular communications will hasten the development of smart cities in the following years. Many applications for vehicular networks, such as blocked road warnings or advertising, will require multi-hop dissemination of information to all vehicles in a region of interest. However, these networks present special features and difficulties that may require special measures. The dissemination of information may cause broadcast storms. Urban scenarios are especially sensitive to broadcast storms because of the high density of vehicles in downtown areas. They also present numerous crossroads and signal blocking due to buildings, which make dissemination more difficult than in open, almost straight interurban roadways. In this article, we discuss several options to avoid the broadcast storm problem while trying to achieve the maximum coverage of the region of interest. Specifically, we evaluate through simulations different ways to detect and take advantage of intersections and a strategy based on store-carry-forward to overcome short disconnections between groups of vehicles. Our conclusions are varied, and we propose two different solutions, depending on the requirements of the application.},

keywords = {broadcast suppression scheme, dissemination, inrisco, store-carry-forward, urban scenarios, VANETs},

pubstate = {published},

tppubtype = {article}

}

@article{khaled001,

title = {Analysis of Secure TCP/IP Profile in 61850 Based Substation Automation System for Smart Grids},

author = {Omar Khaled and Andrés Marín and Florina Almenares and Patricia Arias and Daniel Díaz},

url = {https://journals.sagepub.com/doi/10.1155/2016/5793183},

doi = {https://doi.org/10.1155/2016/5793183},

issn = {1550-1477},

year  = {2016},

date = {2016-04-18},

urldate = {2016-04-18},

journal = {International Journal of Distributed Sensor Networks},

volume = {12},

issue = {4},

pages = {1-11},

abstract = {Smart grid is the term used to describe modern power grids. It aims at achieving efficient, sustainable, economic, and secure delivery of electricity supplies. In order to achieve these goals, communication between different components within the grid and control centers is required. In a rapidly growing world, the demands for substation automation are increasing. Recently, two trends have been changing Substation Automation Systems: IEC 61850 and the need for cybersecurity. IEC 61850 specifies very strict performance requirements for message transfer time. The security for the smart grid must be designed to satisfy both performance and reliability requirements. In this paper, we address a study about secure communication in the substation real-time environment, complying with the IEC 61850 specifications. We mainly focus on analyzing the proposed Secure TCP/IP profile for MMS, testing different cipher suite combinations and examining whether by applying TLS we can still achieve the strict performance requirements of IEC 61850 or not. As a result of the study, we propose a list of cipher suite combinations that should be used. The importance of this study lies mainly on future scenarios, because IEC 61850 is thought to support smart metering communications.},

keywords = {inrisco, smart grids},

pubstate = {published},

tppubtype = {article}

}

@article{almenarez005,

title = {PECEVA: An adaptable and energy-saving credential validation solution for pervasive networks},

author = {Florina Almenarez and M. Francisca Hinarejos and Andrés Marín and Josep Lluís Ferrer-Gomila and Daniel Díaz Sánchez},

url = {https://www.sciencedirect.com/science/article/abs/pii/S0020025516301578?via%3Dihub},

doi = {https://doi.org/10.1016/j.ins.2016.03.010},

issn = {0020-0255},

year  = {2016},

date = {2016-03-12},

urldate = {2016-03-12},

journal = {INFORMATION SCIENCES},

volume = {354},

pages = {41-59},

abstract = {Wireless, mobile, and context-awareness applications are considered to be the epitome of pervasive computing, but they bring with them the inherent security challenges of mobile ad-hoc networking. Mobile ad-hoc networks are mainly formed by mobile users, which can belong to different trust domains, in order to leverage the wealth of pervasive resources and available capabilities. The use of digital certificates is suitable for pervasive networking because of its decentralized and dynamic nature. Nevertheless, the validation of such certificates can become a more complex and costly process than it is in fixed-infrastructure networks. This is because pervasive networks face challenges such as environments that change with a certain degree of randomness, ad-hoc interactions with foreign devices, temporal disconnections that make it difficult to access updated and required information, and limited devices running costly processes. For these reasons, we propose a user-centric architecture that extends the validation of digital certificates in an adaptive way. The main contribution consists of a decision engine that takes advantage of the specific local and external resources in an opportunistic fashion. The solution preserves the security level required for each application and the resource consumption of the user device.



},

keywords = {Certificate validation efficiency, Decision engine, inrisco, Pervasive networks, PKIX, Trust management},

pubstate = {published},

tppubtype = {article}

}

@article{campo008,

title = {Cross-Layer Service Discovery Mechanism for OLSRv2 Mobile Ad Hoc Networks},

author = {Isabel Vara and Celeste Campo-Vázquez},

url = {http://hdl.handle.net/10016/28110},

doi = {https://doi.org/10.3390/s150717621},

issn = {1424-8220},

year  = {2015},

date = {2015-07-20},

urldate = {2015-07-20},

journal = {Sensors },

volume = {15},

issue = {7},

pages = {17621-17648},

abstract = {Service discovery plays an important role in mobile ad hoc networks (MANETs). The lack of central infrastructure, limited resources and high mobility make service discovery a challenging issue for this kind of network. This article proposes a new service discovery mechanism for discovering and advertising services integrated into the Optimized Link State Routing Protocol Version 2 (OLSRv2). In previous studies, we demonstrated the validity of a similar service discovery mechanism integrated into the previous version of OLSR (OLSRv1). In order to advertise services, we have added a new type-length-value structure (TLV) to the OLSRv2 protocol, called service discovery message (SDM), according to the Generalized MANET Packet/Message Format defined in Request For Comments (RFC) 5444. Each node in the ad hoc network only advertises its own services. The advertisement frequency is a user-configurable parameter, so that it can be modified depending on the user requirements. Each node maintains two service tables, one to store information about its own services and another one to store information about the services it discovers in the network. We present simulation results, that compare our service discovery integrated into OLSRv2 with the one defined for OLSRv1 and with the integration of service discovery in Ad hoc On-demand Distance Vector (AODV) protocol, in terms of service discovery ratio, service latency and network overhead.},

keywords = {inrisco, manet, olsrv2, service discovery},

pubstate = {published},

tppubtype = {article}

}

@article{campo009,

title = {Entropy-based privacy against profiling of user mobility},

author = {Alicia Rodriguez-Carrion and David Rebollo-Monedero and Jordi Forne and Celeste Campo-Vázquez and Carlos García-Rubio and Javier Parra-Arnau and Sajal Das},

url = {http://hdl.handle.net/10016/27924},

doi = {https://doi.org/10.3390/e17063913},

issn = {1099-4300},

year  = {2015},

date = {2015-06-10},

urldate = {2015-06-10},

journal = {Entropy},

volume = {17},

issue = {6},

pages = {3913-3946},

abstract = {Location-based services (LBSs) flood mobile phones nowadays, but their use poses an evident privacy risk. The locations accompanying the LBS queries can be exploited by the LBS provider to build the user profile of visited locations, which might disclose sensitive data, such as work or home locations. The classic concept of entropy is widely used to evaluate privacy in these scenarios, where the information is represented as a sequence of independent samples of categorized data. However, since the LBS queries might be sent very frequently, location profiles can be improved by adding temporal dependencies, thus becoming mobility profiles, where location samples are not independent anymore and might disclose the user's mobility patterns. Since the time dimension is factored in, the classic entropy concept falls short of evaluating the real privacy level, which depends also on the time component. Therefore, we propose to extend the entropy-based privacy metric to the use of the entropy rate to evaluate mobility profiles. Then, two perturbative mechanisms are considered to preserve locations and mobility profiles under gradual utility constraints. We further use the proposed privacy metric and compare it to classic ones to evaluate both synthetic and real mobility profiles when the perturbative methods proposed are applied. The results prove the usefulness of the proposed metric for mobility profiles and the need for tailoring the perturbative methods to the features of mobility profiles in order to improve privacy without completely loosing utility.},

keywords = {emrisco, entropy, location history, location-based services, perturbative methods, privacy},

pubstate = {published},

tppubtype = {article}

}

@article{ariascabarcos002,

title = {Blended Identity: Pervasive IdM for Continuous Authentication},

author = {Patricia Arias-Cabarcos and Florina Almenárez and Rubén Trapero and Daniel Díaz-Sánchez and Andrés Marín},

url = {https://ieeexplore.ieee.org/document/7118079},

doi = {https://doi.org/10.1109/MSP.2015.62},

issn = {1540-7993},

year  = {2015},

date = {2015-06-04},

urldate = {2015-06-04},

journal = {IEEE Xplore},

volume = {13},

issue = {3},

pages = {32-39},

abstract = {A proper identity management approach is necessary for pervasive computing to be invisible to users. Federated identity management is key to achieving efficient identity blending and natural integration in the physical and online layers where users, devices, and services are present.},

keywords = {blended identity, emrisco, identity management, IdM, Pervasive computing, Protocols, risk assessment, Security},

pubstate = {published},

tppubtype = {article}

}

@article{diazsanchez002,

title = {A distributed transcoding and content protection system: Enabling pay per quality using the cloud},

author = {Daniel Díaz-Sánchez and Rosa Sánchez-Guerrero and Patricia Arias and Florina Almenarez and Andrés Marín },

url = {https://link.springer.com/article/10.1007/s11235-014-9952-x},

doi = {https://doi.org/10.1007/s11235-014-9952-x},

issn = {1572-9451},

year  = {2015},

date = {2015-01-01},

urldate = {2015-01-01},

journal = {Telecommunication Systems},

volume = {61},

issue = {1},

pages = {59 - 76},

abstract = {Video coding is a process for adapting media content to the constraints of transmission networks delivery and terminal device visualization. Moreover, content protection is also necessary. Nowadays the heterogeneity of client devices is increasing leading to different resolutions, qualities and form factors. Due to this, transcoding and protection are essential processes to be conducted in modern video distribution networks to adapt video to devices and network constraints and to enable pay per quality schemas enforcing content licenses. Unfortunately, transcoding and protection can be no longer considered linear since every single content should be transcoded in several formats and sometimes protected, so it would require a long time to finish. Modern scalable coding techniques, as H264 SVC, can help to save processing power and bandwidth providing in a single stream several video versions. However, if the enhancements of a SVC encoded content are protected separately, it would possible to enable pay-per-quality providing an additional degree of freedom to content delivery industry. Unfortunatelly, transcoding and protection entail huge doses of processing power at provider side and should be distributed. Moreover, processing key streams to decrypt enhancements that were encrypted separately can increase the complexity at receiver side. Cloud computing emerges as a potential solution for coping with large population of users with heterogeneous visualization devices. The elastic nature of cloud computing can be an advantage given the difficulty to predict the computing resources video content would require to be distributed during the entire content life. This article describes a system that distributes and parallelizes the video transcoding process as well as the content encryption, following the SaaS approach in cloud computing. Moreover, the article describes an experimental approach for generating and processing a flexible key stream that would help to simplify key management at receiver side and would allow legacy receivers to consume SVC content with separate enhancement protection.},

keywords = {Cloud computing, content protection keyword, raudo2, transcoding},

pubstate = {published},

tppubtype = {article}

}

@article{garciarubio006,

title = {Service architecting and dynamic composition in pervasive smart ecosystems for the internet of things based on sensor network technology},

author = {Miguel Familiar and Jose Martínez and Carlos García-Rubio },

doi = {https://doi.org/10.3233/ais-140262},

isbn = {1876-1364},

year  = {2014},

date = {2014-05-05},

urldate = {2014-05-05},

journal = {Journal of Ambient Intelligence and Smart Environments },

volume = {6},

issue = {3},

pages = {331-333},

publisher = {Journal of Ambient Intelligence and Smart Environments},

abstract = {The present article summarizes the doctoral dissertation of Miguel S. Familiar.},

keywords = {IoT, pervasive smart ecosystems},

pubstate = {published},

tppubtype = {article}

}

@article{diazsanchez001,

title = {Media Gateway: bringing privacy to Private Multimedia Clouds connections},

author = {Daniel Díaz-Sánchez and Florina Almenarez and Andrés Marín and Rosa Sánchez-Guerrero and Patricia Arias },

url = {https://link.springer.com/article/10.1007/s11235-013-9783-1},

doi = {https://doi.org/10.1007/s11235-013-9783-1},

issn = {1572-9451},

year  = {2014},

date = {2014-02-01},

urldate = {2014-02-01},

journal = {Telecommunication Systems},

volume = {55},

issue = {2},

pages = {315-330},

abstract = {The growing interest in media sharing combined with the explosion of social applications have opened an opportunity window for cloud based applications for media management as Media Cloud, described in this article, that has brought the concept of Cloud Computing to home environments. Media Cloud provides a comprehensive and efficient solution for managing content among federated home environments. As part of the purpose of empowering the user role as well as to improve user experience, we placed significant efforts on interoperability and privacy protection when it comes to accessing cloud resources from other networks. This article describes a solution that enables limited devices to access contents located in private clouds, as Media Cloud, with the cooperation of network providers.},

keywords = {Cloud computing, multimedia, privacy, streaming},

pubstate = {published},

tppubtype = {article}

}

@article{almenarez010,

title = {To Federate or Not To Federate: A Reputation-Based Mechanism to Dynamize Cooperation in Identity Management },

author = {Patricia Arias-Cabarcos and Florina Almenares-Mendoza and Felix Gómez-Mármol and Andrés Marín- López },

doi = {https://doi.org/10.1007/s11277-013-1338-y},

issn = {0929-6212},

year  = {2013},

date = {2013-08-01},

urldate = {2013-08-01},

journal = {Wireless Personal Communications},

volume = {75},

issue = {3},

pages = {1769-1786},

abstract = {Identity Management systems cannot be centralized anymore. Nowadays, users have multiple accounts, profiles and personal data distributed throughout the web and hosted by different providers. However, the online world is currently divided into identity silos forcing users to deal with repetitive authentication and registration processes and hindering a faster development of large scale e-business. Federation has been proposed as a technology to bridge different trust domains, allowing user identity information to be shared in order to improve usability. But further research is required to shift from the current static model, where manual bilateral agreements must be pre-configured to enable cooperation between unknown parties, to a more dynamic one, where trust relationships are established on demand in a fully automated fashion. This paper presents IdMRep, the first completely decentralized reputation-based mechanism which makes dynamic federation a reality. Initial experiments demonstrate its accuracy as well as an assumable overhead in scenarios with and without malicious nodes.},

keywords = {cooperative systems, identity federation, identity management, trust and reputation management},

pubstate = {published},

tppubtype = {article}

}

@article{campo014,

title = {A Bandwidth-Efficient Service for Local Information Dissemination in Sparse to Dense Roadways},

author = {Estrella García-Lozano and Celeste Campo-Vázquez and Carlos García-Rubio and Alberto Cortés and Alicia Rodriguez-Carrion and Patricia Noriega-Vivas},

url = {http://hdl.handle.net/10016/27912},

doi = {https://doi.org/10.3390/s130708612},

issn = {1424-3210},

year  = {2013},

date = {2013-07-05},

urldate = {2013-07-05},

journal = {Sensors },

volume = {13},

issue = {7},

pages = {8612-8639},

abstract = {Thanks to the research on Vehicular Ad Hoc Networks (VANETs), we will be able to deploy applications on roadways that will contribute to energy efficiency through a better planning of long trips. With this goal in mind, we have designed a gas/charging station advertising system, which takes advantage of the broadcast nature of the network. We have found that reducing the number of total sent packets is important, as it allows for a better use of the available bandwidth. We have designed improvements for a distance-based flooding scheme, so that it can support the advertising application with good results in sparse to dense roadway scenarios.},

keywords = {bandwidth efficiency, multi-hop broadcast, service discovery, store-carry-forward, VANETs},

pubstate = {published},

tppubtype = {article}

}

@article{almenarez004,

title = {Overhead of using Secure Wireless Communications in Mobile Computing},

author = {Florina Almenares and Patricia Arias and Andrés Marín and Daniel Díaz-Sánchez and Rosa Sánchez

},

url = {https://ieeexplore.ieee.org/document/6531115

https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6531115},

doi = {https://doi.org/10.1109/TCE.2013.6531115},

issn = {0098-3063},

year  = {2013},

date = {2013-05-06},

urldate = {2013-05-06},

journal = {IEEE TRANSACTIONS ON CONSUMER ELECTRONICS},

volume = {59},

issue = {2},

pages = {335-342},

abstract = {Secure wireless communications are fundamental in any interaction in order to avoid security and privacy breaches, especially from mobile devices. The use of this kind of communications is far more frequent and the number of users increases day after day. This paper shows and analyzes the support, performance and consumption of cryptographic algorithms and cipher suites in terms of time and energy when secure communications (i.e., using SSL) are established according to different security levels. This study has been performed in distinct operating systems, and using different browsers and libraries.},

keywords = {Browsers, Ciphers, Energy and time performance, Energy consumption, Handheld devices, Secure wireless communications, servicioseguridad, SSL/TLS, Wireless communication},

pubstate = {published},

tppubtype = {article}

}

@article{ariascabarcos004,

title = {SuSSo: Seamless and Ubiquitous Single Sign-on for Cloud Service Continuity across devices},

author = {Patricia Arias-Cabarcos and Florina Almenárez-Mendoza and Rosa Sánchez-Guerrero and Andrés Marín-López and Daniel Díaz-Sánchez},

url = {https://ieeexplore.ieee.org/document/6415016

https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6415016},

doi = {https://doi.org/10.1109/TCE.2012.6415016},

issn = {0098-3063},

year  = {2012},

date = {2012-11-01},

urldate = {2012-11-01},

journal = {IEEE TRANSACTIONS ON CONSUMER ELECTRONICS},

volume = {58},

issue = {4},

pages = {1425-1433},

abstract = {The great variety of consumer electronic devices with support of wireless communications combined with the emerging Cloud Computing paradigm is paving the way to real anytime/anywhere computing. In this context, many services, such as music or video streaming, are delivered to the clients using Cloud-based providers. However, service continuity when moving across different terminals is still a major challenge. This paper proposes SuSSo, a novel middleware architecture that allows sessions initiated from one device to be seamlessly transferred to a second one, as might be desirable in the enjoyment of long running media.},

keywords = {Cloud computing, Computer architecture, context, middleware, Performance evaluation, personal multimedia devices, raudo2, Security, service continuity, sessionhandoff, xml},

pubstate = {published},

tppubtype = {article}

}

@article{ariascabarcos001,

title = {A Metric-Based Approach to Assess Risk for "On Cloud" Federated Identity Management},

author = {Patricia Arias-Cabarcos and Florina Almenárez-Mendoza and Andrés Marín-López and Daniel Díaz-Sánchez and Rosa Sánchez-Guerrero },

url = {https://link.springer.com/article/10.1007/s10922-012-9244-2},

doi = {https://doi.org/10.1007/s10922-012-9244-2},

issn = {1573-7705},

year  = {2012},

date = {2012-07-04},

urldate = {2012-07-04},

journal = {Journal of Network and Systems Management},

volume = {20},

issue = {4},

pages = {513-533},

abstract = {The cloud computing paradigm is set to become the next explosive revolution on the Internet, but its adoption is still hindered by security problems. One of the fundamental issues is the need for better access control and identity management systems. In this context, Federated Identity Management (FIM) is identified by researchers and experts as an important security enabler, since it will play a vital role in allowing the global scalability that is required for the successful implantation of cloud technologies. However, current FIM frameworks are limited by the complexity of the underlying trust models that need to be put in place before inter-domain cooperation. Thus, the establishment of dynamic federations between the different cloud actors is still a major research challenge that remains unsolved. Here we show that risk evaluation must be considered as a key enabler in evidence-based trust management to foster collaboration between cloud providers that belong to unknown administrative domains in a secure manner. In this paper, we analyze the Federated Identity Management process and propose a taxonomy that helps in the classification of the involved risks in order to mitigate vulnerabilities and threats when decisions about collaboration are made. Moreover, a set of new metrics is defined to allow a novel form of risk quantification in these environments. Other contributions of the paper include the definition of a generic hierarchical risk aggregation system, and a descriptive use-case where the risk computation framework is applied to enhance cloud-based service provisioning.

},

keywords = {Cloud computing, consequence, federation, risk assessment, SAML, servicioseguridad, Trust management},

pubstate = {published},

tppubtype = {article}

}

@article{campo009b,

title = {Study of LZ-Based Location Prediction and Its Application to Transportation Recommender Systems},

author = {Alicia Rodriguez-Carrion and Carlos García-Rubio and Celeste Campo-Vázquez and Alberto Cortés and Estrella García-Lozano },

url = {http://hdl.handle.net/10016/27902},

doi = {https://doi.org/10.3390/s120607496},

issn = {1424-8220},

year  = {2012},

date = {2012-06-04},

urldate = {2012-06-04},

journal = {Sensors },

volume = {12},

issue = {6},

pages = {7496-7517},

abstract = {Predicting users' next location allows to anticipate their future context, thus providing additional time to be ready for that context and react consequently. This work is focused on a set of LZ-based algorithms (LZ, LeZi Update and Active LeZi) capable of learning mobility patterns and estimating the next location with low resource needs, which makes it possible to execute them on mobile devices. The original algorithms have been divided into two phases, thus being possible to mix them and check which combination is the best one to obtain better prediction accuracy or lower resource consumption. To make such comparisons, a set of GSM-based mobility traces of 95 different users is considered. Finally, a prototype for mobile devices that integrates the predictors in a public transportation recommender system is described in order to show an example of how to take advantage of location prediction in an ubiquitous computing environment.},

keywords = {active lezi, Ambient intelligence, españavirtual, gsm-based location, lezi update, lz, prediction, recommender system, Ubiquitous computing},

pubstate = {published},

tppubtype = {article}

}

@article{sanchezguerrero001,

title = {An Event Driven Hybrid Identity Management Approach to Privacy Enhanced e-Health},

author = {Rosa Sánchez-Guerrero and Florina Almenárez and Daniel Díaz-Sánchez and Andrés Marín and Patricia Arias and Fabio Sanvido

},

url = {https://www.mdpi.com/1424-8220/12/5/6129

https://www.mdpi.com/1424-8220/12/5/6129/pdf?version=1403317529},

doi = {https://doi.org/10.3390/s120506129},

issn = {1424-8220},

year  = {2012},

date = {2012-05-10},

urldate = {2012-05-10},

journal = {Sensors },

volume = {12},

issue = {5},

pages = {6129-6154},

abstract = {Credential-based authorization offers interesting advantages for ubiquitous scenarios involving limited devices such as sensors and personal mobile equipment: the verification can be done locally; it offers a more reduced computational cost than its competitors for issuing, storing, and verification; and it naturally supports rights delegation. The main drawback is the revocation of rights. Revocation requires handling potentially large revocation lists, or using protocols to check the revocation status, bringing extra communication costs not acceptable for sensors and other limited devices. Moreover, the effective revocation consent—considered as a privacy rule in sensitive scenarios—has not been fully addressed. This paper proposes an event-based mechanism empowering a new concept, the sleepyhead credentials, which allows to substitute time constraints and explicit revocation by activating and deactivating authorization rights according to events. Our approach is to integrate this concept in IdM systems in a hybrid model supporting delegation, which can be an interesting alternative for scenarios where revocation of consent and user privacy are critical. The delegation includes a SAML compliant protocol, which we have validated through a proof-of-concept implementation. This article also explains the mathematical model describing the event-based model and offers estimations of the overhead introduced by the system. The paper focus on health care scenarios, where we show the flexibility of the proposed event-based user consent revocation mechanism.},

keywords = {delegation, event, federation, health care, identity management, privacy, revocation consent, servicioseguridad, theory queue, user-centric},

pubstate = {published},

tppubtype = {article}

}