Cross-device access control with Trusted Capsules
department or school: Science, Faculty of
department or school: Computer Science, Department of
data provider: DSpace
degree campus: UBCV
creator: Mehrotra, Puneet
issued: 2019-10-18T17:10:02Z
issued: 2019
related degree: Master of Science - MSc
degree grantor: University of British Columbia
description: Users desire control over their data even as they share them across device boundaries. At the moment, they rely on ad-hoc solutions such as sending self destructible data with ephemeral messaging apps such as SnapChat. We present Trusted Capsules, a general cross-device access control abstraction for files. It bundles sensitive files with the policies that govern their accesses into units we call capsules. Capsules appear as regular files in the system. When an app opens one, its policy is executed in ARM TrustZone, a hardware-based trusted execution environment, to determine if access should be allowed or denied. As Trusted Capsules is based on a pragmatic threat model, it works with unmodified apps that users have come to rely on, unlike existing work. We show that policies in Trusted Capsules are expressible and that the slowdowns in our approach are limited to the opening and closing of capsules. Once an app opens a capsule, its read throughput of the file is identical to regular non-capsule files.
aggregated CHO: https://circle.library.ubc.ca/rest/handle/2429/71952
note: Cross-device Access Control with Trusted CapsulesbyPuneet MehrotraB. Engineering, Birla Institue of Technology and Science, 2013M. Science, Birla Institute of Technology and Science, 2013A THESIS SUBMITTED IN PARTIAL FULFILLMENTOF THE REQUIREMENTS FOR THE DEGREE OFMaster of ScienceinTHE FACULTY OF GRADUATE AND POSTDOCTORALSTUDIES(Computer Science)The University of British Columbia(Vancouver)October 2019c© Puneet Mehrotra, 2019The following individuals certify that they have read, and recommend to the Fac-ulty of Graduate and Postdoctoral Studies for acceptance, the thesis entitled:Cross-device Access Control with Trusted Capsulessubmitted by Puneet Mehrotra in partial fulfillment of the requirements for thedegree of Master of Sciencein Computer Science.Examining Committee:Ivan Beschastnikh, Computer ScienceSupervisorMargo Seltzer, Computer ScienceSupervisory Committee MemberiiAbstractUsers desire control over their data even as they share them across deviceboundaries. At the moment, they rely on ad-hoc solutions such as sending self-destructible data with ephemeral messaging apps such as SnapChat. We presentTrusted Capsules, a general cross-device access control abstraction for files. Itbundles sensitive files with the policies that govern their accesses into units we callcapsules. Capsules appear as regular files in the system. When an app opens one,its policy is executed in ARM TrustZone, a hardware-based trusted execution envi-ronment, to determine if access should be allowed or denied. As Trusted Capsulesis based on a pragmatic threat model, it works with unmodified apps that users havecome to rely on, unlike existing work. We show that policies in Trusted Capsulesare expressible and that the slowdowns in our approach are limited to the openingand closing of capsules. Once an app opens a capsule, its read throughput of thefile is identical to regular non-capsule files.iiiLay SummaryPeople are increasingly using mobile devices to share digital content with eachot…
has type: Thesis/Dissertation
date issued: 2019-11
is shown at: 10.14288/1.0384608
language: eng
degree discipline: Computer Science
provider: Vancouver : University of British Columbia Library
publisher: University of British Columbia
rights: Attribution-NonCommercial-NoDerivatives 4.0 International
rights URI: http://creativecommons.org/licenses/by-nc-nd/4.0/
scholar level: Graduate
type: Text
identifier URI: http://hdl.handle.net/2429/71952