Contribution to Proof-of-Location Systems

Akand, Md Mamunur Rashid

Contribution to Proof-of-Location Systems

dc.contributor.advisor	Safavi-Naeini, Reyhaneh Alsadat
dc.contributor.author	Akand, Md Mamunur Rashid
dc.contributor.committeemember	Fong, Philip Wai Leung
dc.contributor.committeemember	Reardon, Joel Christopher
dc.contributor.committeemember	Yanushkevich, Svetlana
dc.contributor.committeemember	Clark, Jeremy
dc.date	2023-06
dc.date.accessioned	2023-05-05T20:02:25Z
dc.date.available	2023-05-05T20:02:25Z
dc.date.issued	2023-05-03
dc.description.abstract	Proof-of-Location (POL) is a type of credential system that allows a user to obtain proof-of-location tokens (pol), attesting their visit to some location at some time, that they can later present to another party for receiving services. POL is gaining popularity due to its numerous applications, including location-based rewards, multi-factor authentication, and access control. POLs require a secure technique to verify the user’s location or proximity to a trusted infrastructure node as a prerequisite for issuing a pol token. Distance bounding protocols satisfy the required security properties that securely put an upper bound between two entities in real-time, and are thus considered an essential building block in designing proof-of-location systems. In this thesis, a number of shortcomings in POL systems and in distance bounding protocols are identified and addressed. The thesis is divided into two parts – the first part focuses on the modeling and designing of POL systems, physical attack on infrastructure nodes of POL systems, composability of POL with other protocols, user-controlled access of pol tokens, and verifying a sequence of pol tokens that are stored on an untrusted user’s device. The second part concentrates on the building block of POL systems – the distance bounding protocols, which offer cryptographic security to verify the proximity between two entities. The research aims to address the challenges of existing distance bounding protocols, such as high implementation costs and vulnerability to attacks using directional antennas and collusion of multiple users. Consequently, the contributions of this thesis are presented in five sections, each covering one or more research problems, including providing a solid foundation for the design and analysis of POL systems and designing provably secure POL schemes that protect user anonymity against pol issuer and verifier, protecting against location tampering attacks on infrastructure nodes, ensuring user-controlled pol accessibility when the user is offline, preserving security guarantees when POL is composed with other protocols, proving a subsequence of POL tokens while ensuring efficient storage and user anonymity, designing distance bounding protocols that do not require multiple rounds in the fast-exchange phase, and protecting distance bounding protocols from novel attacks while ensuring user anonymity.
dc.identifier.citation	Akand, M. M. R. (2023). Contribution to Proof-of-Location systems (Doctoral thesis, University of Calgary, Calgary, Canada). Retrieved from https://prism.ucalgary.ca.
dc.identifier.uri	http://hdl.handle.net/1880/116173
dc.identifier.uri	https://dx.doi.org/10.11575/PRISM/dspace/41018
dc.language.iso	en
dc.publisher.faculty	Graduate Studies
dc.publisher.institution	University of Calgary
dc.rights	University of Calgary graduate students retain copyright ownership and moral rights for their thesis. You may use this material in any way that is permitted by the Copyright Act or through licensing that has been assigned to the document. For uses that are not allowable under copyright legislation or licensing, you are required to seek permission.
dc.subject	proof-of-location
dc.subject	distance bounding protocol
dc.subject	location information security
dc.subject	location information privacy
dc.subject	location-based services
dc.subject.classification	Computer Science
dc.title	Contribution to Proof-of-Location Systems
dc.type	doctoral thesis
thesis.degree.discipline	Computer Science
thesis.degree.grantor	University of Calgary
thesis.degree.name	Doctor of Philosophy (PhD)
ucalgary.thesis.accesssetbystudent	I do not require a thesis withhold – my thesis will have open access and can be viewed and downloaded publicly as soon as possible.