Publications

@inproceedings{pa043,

title = {Building an Open Toolkit of Digital Certificate Validation for Mobile Web Services},

author = {Florina Almenarez and Andres Marín and Daniel Diaz and Alberto Cortes and Celeste Campo and Carlos García-Rubio},

url = {https://ieeexplore.ieee.org/document/4517456},

doi = {https://doi.org/10.1109/PERCOM.2008.97},

isbn = {978-0-7695-3113-7},

year  = {2008},

date = {2008-05-12},

urldate = {2008-05-12},

booktitle = {2008 Sixth Annual IEEE International Conference on Pervasive Computing and Communications (PerCom)},

publisher = {Institute of Electrical and Electronics Engineers (IEEE)},

abstract = {Mobile devices can both consume and provide services. They act indeed as a peer, according to the OMA mobile Web services specification. It is a move from simple data sharing to full deliver of application services down to mobile devices. The use of digital certificates to ensure the provision of services is suitable because devices can belong to different trust domains without having previously an established relationship. Besides, by interoperability issues, the use of PKI continues to grow and move into diverse environments. However, applications making use of such certificates are burdened with the overhead of constructing and validating the certification paths. These processes can become more complex and costly than fixed-infrastructure networks due to the wireless communications and restricted processing and power capabilities. The IETF PKIX WG has specified different mechanisms for delegating the certificate validation and making lighter the status information obtaining. However, these are not supported currently by mobile devices. For these reasons, we propose to develop an open toolkit for X.509 public key certificate validating based on OpenSSL. This toolkit is being developed and tested successfully in PDAs.},

keywords = {certificate validation, open toolkit, prototipomiddleware, X.509 certificates},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pa045,

title = {Access Control Agnostic Trust Negotiation Decision Engine},

author = {Daniel Diaz-Sanchez and Andres Marin and Florina Almenarez},

url = {https://ieeexplore.ieee.org/document/4394694},

doi = {https://doi.org/10.1109/PIMRC.2007.4394694},

issn = {2166-9570},

year  = {2007},

date = {2007-12-04},

urldate = {2007-12-04},

booktitle = {2007 IEEE 18th International Symposium on Personal, Indoor and Mobile Radio Communications},

publisher = {Institute of Electrical and Electronics Engineers (IEEE)},

abstract = {Dynamic open environments demand trust negotiation systems for unknown entities willing to communicate. A security context have to be negotiated gradually in a fair peer to peer basis. Trust negotiation engines are driven by decision engines that lack of flexibility: they depend on the implementation, policies languages or credentials types to be used. In this paper we present a trust negotiation engine agnostic regarding policies and rules. The engine is based on iterative weighted Multidimensional Scaling to assist a mobile device during a trust negotiation.},

keywords = {Access control, anotacionsemantica, data mining, engines, information security},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pa047,

title = {Device Independent User Interfaces for Smart Cards},

author = {Robbie Schaefer and Wolfgang Mueller and Andrés Marín-López and Daniel Díaz-Sánchez},

doi = {https://dl.acm.org/doi/10.1145/1378063.1378189},

isbn = {9781595938190},

year  = {2007},

date = {2007-09-28},

urldate = {2007-09-28},

booktitle = {Mobility '07: Proceedings of the 4th international conference on mobile technology, applications, and systems and the 1st international symposium on Computer human interaction in mobile technology},

pages = {743 - 750},

abstract = {Smart Cards are becoming a ubiquitous means for securing a wide range of interactive applications. However in many cases its use is limited for authentication purposes only. In

this paper we extend the use of smart cards for carrying abstract user interface descriptions which can be rendered on different and potentially remote clients that in addition can support different interaction modalities. This adds on the one hand to the security since a backend application cannot be used without the UI description, and on the other hand to the versatility of applications, since all devices with a respective renderer for certain modalities can be utilized.},

keywords = {abstract user interface, device independence, Security, smart cards},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{accn002,

title = {Mecanismo de selección de red sensible al contexto para entornos dinámicos},

author = {Daniel Díaz-Sánchez and Andrés Marín-López and Florina Alménarez-Mendoza},

year  = {2007},

date = {2007-09-28},

urldate = {2007-09-28},

pages = {1-5},

keywords = {MEDEA+ A12},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{accn003,

title = {Mejorando el control de acceso para dispositivos móviles con un motor de decisión agnóstico para negociación de confianza},

author = {Daniel Díaz-Sánchez and Andrés Marín and Florina Alménarez and Celeste Campo and Carlos García-Rubio},

isbn = {978-84-9732-605-6},

year  = {2007},

date = {2007-09-27},

pages = {1-8},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pa046,

title = {Using smart cards for secure and device independent user interfaces},

author = {Robbie Schaefer and Wolfgang Mueller and Andrés Marín-López and Daniel Díaz-Sánchez



 },

url = {https://dl.acm.org/doi/10.1145/1378063.1378189},

doi = {https://doi.org/10.1145/1378063.1378189},

isbn = {978-1-59593-819-0},

year  = {2007},

date = {2007-09-10},

urldate = {2007-09-10},

booktitle = {Mobility '07: Proceedings of the 4th international conference on mobile technology, applications, and systems and the 1st international symposium on Computer human interaction in mobile technology},

pages = {743 - 750},

abstract = {Smart Cards are becoming a ubiquitous means for securing a wide range of interactive applications. However in many cases its use is limited for authentication purposes only. In this paper we extend the use of smart cards for carrying abstract user interface descriptions which can be rendered on different and potentially remote clients that in addition can support varying interaction modalities. This adds on the one hand to the security since a backend application cannot be used without the UI description, and on the other hand to the versatility of applications, since all devices with a respective renderer for certain modalities can be utilized.},

keywords = {abstract user interface, device independence, MEDEA+ A306, Security, Smart Card},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pa048,

title = {Middleware for Secure Home Access and Control},

author = {Andrés Marín and Wolfgang Mueller and Robbie Schaefer and Florina Almenarez and Daniel Diaz and Max Ziegler},

url = {https://ieeexplore.ieee.org/document/4144884},

doi = {https://doi.org/10.1109/PERCOMW.2007.80},

isbn = {0-7695-2788-4},

year  = {2007},

date = {2007-04-02},

urldate = {2007-04-02},

booktitle = {Fifth Annual IEEE International Conference on Pervasive Computing and Communications Workshops (PerComW'07)},

publisher = {Institute of Electrical and Electronics Engineers (IEEE)},

abstract = {User adaptive systems in the context of pervasive computing can only unveil their power if based on a generic middleware managing private data and context information in combination with flexible device access and control. However, managing those data poses severe privacy problems both legally and from a trust perspective. Therefore we propose a home automation middleware for secure management of user and context data that gives access to services just for the authorized users and devices. The middleware has been successfully tested at the ambient computing (AC-LAB) at the University of Paderborn},

keywords = {adaptative systems, middleware, Pervasive computing},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{accn004,

title = {Securing interactions in emerging environments},

author = {Daniel Díaz-Sánchez and Andrés Marín-López and Florina Alménarez},

isbn = {84-6901744-6},

year  = {2006},

date = {2006-11-28},

urldate = {2006-11-28},

pages = {1-13},

keywords = {iteaeasywireless},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pa051,

title = {Interaction Distance determination with PervsIM},

author = {Daniel Díaz-Sánchez and Andrés Marín and Florina Almenarez and Carlos García-Rubio and Celeste Campo},

year  = {2006},

date = {2006-06-30},

urldate = {2006-06-30},

booktitle = {15th IST Mobile And Wireless Communication Summit},

pages = {1-8},

keywords = {Ubisec},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pa049,

title = {A Smart Card Solution for Access Control and Trust Management for Nomadic Users},

author = {Daniel Díaz-Sánchez and Andrés Marín-Lopez and Florina Almenárez-Mendoza },

url = {https://link.springer.com/chapter/10.1007/11733447_5},

doi = {https://doi.org/10.1007/11733447_5},

issn = {0302-9743},

year  = {2006},

date = {2006-04-28},

urldate = {2006-04-28},

booktitle = {Smart Card Research and Advanced Applications},

volume = {3928},

pages = {62 - 77},

abstract = {Increasing efforts are placed on security solutions for nomadic users. Solutions based on smart cards offer physical and logical portability, robustness, low cost, and high security. Nevertheless, such solutions concentrate only on offering the cryptographical capabilities of the smart card, together with key and user certificate storage. Advanced trust management and access control are not addressed. In this article, we propose a scheme to include trust management and attribute certificates for authorization in two widely used cryptographic APIs: Microsoft CryptoAPI and RSA labs PKCS#11.},

keywords = {Access control, cryptographic operation, MEDEA+ A306, physical store, Smart Card, Trust management},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pa052,

title = {Developing a model for trust management in pervasive devices},

author = {Florina Almenarez and Andrés Marin and Daniel Diaz and Juan Sanchez},

url = {https://ieeexplore.ieee.org/document/1598984},

doi = {https://doi.org/10.1109/PERCOMW.2006.41},

isbn = {0-7695-2520-2},

year  = {2006},

date = {2006-03-27},

urldate = {2006-03-27},

booktitle = {Fourth Annual IEEE International Conference on Pervasive Computing and Communications Workshops (PERCOMW'06)},

publisher = {Institute of Electrical and Electronics Engineers (IEEE)},

abstract = {Pervasive devices interacting in open and dynamic spaces with each others require a mechanism that allows them acting autonomously in a secure way and protecting their resources. Trust is fundamental to establish communication with other users, because the identity is often uncertain and on one's own does not provide trust information, for instance, could an unknown user be trustworthy? Nowadays, these devices have a so limited security support. So, we propose a simple trust management model to enhance such support, allowing them interact in ad hoc networks and peer-to-peer applications in a secure way. In this paper, our main contribution is a mathematical and a probabilistic model, as well as demonstrating the model feasibility, since it has been assessed through the prototype implementation, which has been tested in a Pocket PC},

keywords = {mathematical model, peer to peer computing, Pervasive computing, Protection, Ubisec},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{accn05,

title = {A framework for authorization and delegation in ubiquitous computing},

author = {Daniel Díaz-Sánchez and Andrés Marín and Florina Alménarez},

isbn = {84-9732-442-0},

year  = {2005},

date = {2005-09-16},

urldate = {2005-09-16},

booktitle = {UCAMI 2005: Ubiquitous Computing and Ambient Intelligence. Congreso Español De Informatica},

pages = {1-10},

keywords = {MEDEA+ A12},

pubstate = {published},

tppubtype = {inproceedings}

}