Title
Decoupling data-at-rest encryption and smartphone locking with wearable devices.
Abstract
Smartphones store sensitive and confidential data, e.g., business related documents or emails. If a smartphone is stolen, such data are at risk of disclosure. To mitigate this risk, modern smartphones allow users to enable data encryption, which uses a locking password to protect the data encryption key. Unfortunately, users either do not lock their devices at all, due to usability issues, or use weak and easy to guess 4-digit PINs. This makes the current approach of protecting confidential data-at-rest ineffective against password guessing attackers. To address this problem we design, implement and evaluate the Sidekick system — a system that uses a wearable device to decouple data encryption and smartphone locking. Evaluation of the Sidekick system revealed that the proposal can run on an 8-bit System-on-Chip, uses only 4 Kb/20 Kb of RAM/ROM, allows data encryption key fetching in less than two seconds, while lasting for more than a year on a single coin-cell battery.
Year
DOI
Venue
2016
10.1016/j.pmcj.2016.06.016
Pervasive and Mobile Computing
Keywords
Field
DocType
Smartphone loss and theft,Data-at-rest encryption,Smartphone locking,Wearable devices,Encryption keys management
Client-side encryption,Password cracking,Disk encryption,Computer science,Computer security,Computer network,Disk encryption hardware,Encryption,Password,On-the-fly encryption,Key (cryptography)
Journal
Volume
ISSN
Citations 
32
1574-1192
2
PageRank 
References 
Authors
0.35
12
5
Name
Order
Citations
PageRank
Ildar Muslukhov141518.51
San-Tsai Sun220212.74
Primal Wijesekera3525.71
Yazan Boshmaf449122.39
Konstantin Beznosov51521105.47