Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts

Thursday 29 January 2009

LTE Femtocells Killer App: Wireless HDD

Just read this article:

Security appears to be all washed up, as USB sticks with sensitive data are being left regularly in pockets when workers take their clothes to be cleaned at laundrettes.

According to a survey from Credant Technologies, who claims that 9,000 USB sticks have been forgotten and left in pockets of clothes taken to dry cleaners. These figures were obtained from phone interviews with 500 dry cleaners across the UK, who found an average of two USB keys per year. Extrapolating this to the 4,500 dry cleaners in the UK leads to the 9,000 figure.

Data sticks are most frequently found in city centres and commuter areas with one proprietor in the City of London finding 80 memory sticks in 2008 alone.

Back in the LTE world summit last year, one of the things I mentioned was, that once LTE Femtocells are available we may be able to create innovative and groundbreaking applications to run on it. I was aware of some people suggesting that the broadband providers may throttle the backhaul traffic on the Femto but I was assured by one person from Sweden (or Finland ... cant recall for sure) that in the Nordics there is already upto 100Mbps speeds available and most of the people use P2P networks thereby consistently loading the ISP's. He did not think that there will be a problem.

One of the applications I suggested was a wireless Hard Disk Drive (HDD) or maybe a better term would be mobile USB (MUSB). The following slides are extracted from my presentation as I am being a bit lazy (and busy) to put them here.




As always, I am happy to receive feedback, comments, criticisms, etc, etc.

Thursday 24 April 2008

Security Upgrade from Release 7

For those familiar with the 3G Security (Ciphering + Integrity) architecture will know this well that there is only one Integrity algorithm (UIA1) defined and it is mandatory. On the other hand there are two ciphering algorithms (UEA0 and UEA1) defined. UEA0 in reality means no Ciphering ;). UIA1 and UEA1 are both based on Kasumi algorithm. UEA1 is f8 and UIA1 is f9 algorithms of Kasumi. (Please feel free to correct my terminology if you think its wrong).

From Release 7 there are some additional provisions made for increasing the security.

First lets talk about GSM. Initially only a5_1 and a5_2 algorithms were defined for GSM. They have not been compromised till date and are still secure. Still some new algorithms have been defined to make sure there is a backup if they are ever compromised. a5_3, a5_5 and a5_8 have been defined for GSM/GPRS and GEA3 defined for EDGE.

For UMTS, UEA2 and UIA2 have been defined. They are based on 'Snow 3G' algorithm. Kasumi is a 'blockcipher' algorithm whereas Snow 3G is 'streamcipher'. The interesting thing as far as I understand is that even though this is defined and mandatory for UEs and N/w from Rel7, it wont be used but will only serve as backup. More on this topic can be learnt here.

More detailed information on UIA2 and UEA2 is available here.

There are some enhancements coming in the SIM as well. At present all the Keys are 128bits but there should be a provision that in future, 256 bits can be used.

There are some extensive overhauling of IMS security as well but I havent managed to get a good understanding of that yet.

All the reports from the 3rd ETSI Security Workshop held on Jan 15-16 2008 are available here.