Title
An Extensible Framework for Efficient Secure SMS
Abstract
Nowadays, Short Message Service (SMS) still represents the most used mobile messaging service. SMS messages are used in many different application fields, even in cases where security features, such as authentication and confidentiality between the communicators, must be ensured. Unfortunately, the SMS technology does not provide a built-in support for any security feature. This work presents SEESMS (Secure Extensible and Efficient SMS), a software framework written in Java which allows two peers to exchange encrypted and digitally signed SMS messages. The communication between peers is secured by using public-key cryptography. The key-exchange process is implemented by using a novel and simple security protocol which minimizes the number of SMS messages to use. SEESMS supports the encryption of a communication channel through the ECIES and the RSA algorithms. The identity validation of the contacts involved in the communication is implemented through the RSA, DSA and ECDSA signature schemes. SEESMS is able to certify the phone number of the peers using the framework. Additional cryptosystems can be coded and added to SEESMS as plug-ins. Special attention has been devoted to the implementation of an efficient framework in terms of energy consumption and execution time. This efficiency is obtained in two steps. First, all the cryptosystems available in the framework are implemented using mature and fully optimized cryptographic libraries. Second, an experimental analysis was conducted to determine which combination of cryptosystems and security parameters were able to provide a better trade-off in terms of speed/security and energy consumption. This experimental analysis has also been useful to expose some serious performance issues affecting the cryptographic libraries which are commonly used to implement security features on mobile devices.
Year
DOI
Venue
2010
10.1109/CISIS.2010.81
Complex, Intelligent and Software Intensive Systems
Keywords
Field
DocType
software framework,sms technology,sms message,energy consumption,efficient sms,efficient secure sms,efficient framework,experimental analysis,simple security protocol,security feature,security parameter,extensible framework,elliptic curve cryptography,short message service,cryptosystems,mobile communication,protocols,servers,gsm,key exchange,public key cryptography,communication channel,communication channels,java,security protocol,mobile device,secure communication
Short Message Service,Authentication,Cryptographic protocol,Cryptography,Computer security,Computer science,Computer network,Encryption,Cryptosystem,Digital signature,Public-key cryptography
Conference
ISBN
Citations 
PageRank 
978-1-4244-5917-9
22
1.26
References 
Authors
11
6
Name
Order
Citations
PageRank
Alfredo De Santis14049501.27
Aniello Castiglione2120693.97
Giuseppe Cattaneo343639.39
Maurizio Cembalo4543.81
Fabio Petagna5844.56
Umberto Ferraro Petrillo619824.16