Publications

@article{marin001,

title = {Pervasive authentication and authorization infrastructures for mobile users},

author = {Jordi Forné and Francisca Hinarejos and Andrés Marín and Florina Almenárez and Javier Lopez and Jose A. Montenegro and Marc Lacoste and Daniel Díaz},

url = {https://www.sciencedirect.com/science/article/pii/S0167404809000911?via%3Dihub},

doi = {https://doi.org/10.1016/j.cose.2009.09.001},

issn = {0167-4048},

year  = {2009},

date = {2009-09-25},

urldate = {2009-09-25},

journal = {COMPUTERS & SECURITY},

volume = {29},

issue = {4},

pages = {501-514},

abstract = {Network and device heterogeneity, nomadic mobility, intermittent connectivity and, more generally, extremely dynamic operating conditions, are major challenges in the design of security infrastructures for pervasive computing. Yet, in a ubiquitous computing environment, limitations of traditional solutions for authentication and authorization can be overcome with a pervasive public key infrastructure (pervasive-PKI). This choice allows the validation of credentials of users roaming between heterogeneous networks, even when global connectivity is lost and some services are temporarily unreachable. Proof-of-concept implementations and testbed validation results demonstrate that strong security can be achieved for users and applications through the combination of traditional PKI services with a number of enhancements like: (i) dynamic and collaborative trust model, (ii) use of attribute certificates for privilege management, and (iii) modular architecture enabling nomadic mobility and enhanced with reconfiguration capabilities.},

keywords = {authentication, Authorization, ITACA, security architecture, trust, Ubiquitous computing, Ubisec},

pubstate = {published},

tppubtype = {article}

}

@article{campo001,

title = {Secure Service Discovery based on Trust Management for ad-hoc Networks},

author = {Celeste Campo and Florina Almenárez and Daniel Díaz and Carlos García-Rubio and Andrés Marín-López},

url = {https://www.jucs.org/jucs_12_3/secure_service_discovery_based.html

https://lib.jucs.org/article/28594/},

doi = {http://dx.doi.org/10.3217/jucs-012-03-0340},

issn = {0948-695X},

year  = {2006},

date = {2006-03-28},

urldate = {2006-03-28},

journal = {Journal of Universal Computer Science},

volume = {12},

number = {3},

pages = {340-356},

abstract = {In ad-hoc networks, mobile devices communicate via wireless links without the aid of any fixed networking infrastructure. These devices must be able to

discover services dynamically and share them safely, taking into account ad-hoc networks requirements such as limited processing and communication power, decentralised

management, and dynamic network topology, among others. Legacy solutions fail in

addressing these requirements.

In this paper, we propose a service discovery protocol with security features, the Secure

Pervasive Discovery Protocol. SPDP is a fully distributed protocol in which services

offered by devices can be discovered by others, without a central server. It is based on an

anarchy trust model, which provides location of trusted services, as well as protection

of confidential information, secure communications, or access control.},

keywords = {ad-hoc networks, everyware, iteaeasywireless, Security, service discovery protocol, trust, Ubisec},

pubstate = {published},

tppubtype = {article}

}