European Commission logo
français français
CORDIS - Résultats de la recherche de l’UE
CORDIS
Contenu archivé le 2024-06-16

Mobility, Ubiquity and Security for small Devices

Objectif

Through their global, uniform provision of services, and their distributed nature, global computers have the potential to profoundly enhance our daily life. However, they will not realize their full potential, unless the necessary levels of trust and security can be guaranteed. We aim to develop the technology for establishing trust and security for the next generation of global computers, using the Proof Carrying Code (PCC) paradigm.

The essential features of the \mobius security architecture will be:
- innovative trust management, dispensing with centralized trust entities, and allowing individual components to gain trust by providing verifiable certificates of their innocuousness; and
- static enforcement mechanisms, sufficiently flexible to cover the wide range of security concerns arising in global computing, and sufficiently resource-aware and configurable to be applicable to the wide range of devices in global computers; and
- support for system component downloading, for compatibility with the view of a global computer as an evolving network of autonomous, heterogeneous and extensible devices.

The PCC paradigm is known for decentralized trust management, but has generally been restricted to simple safety properties, and to monolithic, non-distributed applications. We shall pioneer the first PCC framework applicable to global computers, and the first to allow enforcement of functional properties as well as advanced security properties. We shall extend the two technologies that enable PCC- type systems and program logics-to allow enforcement of more advanced security properties, and combine them in hybrid certificates to be checked through type checking together with proof checking. To maximize the impact of our work, we will focus on Java-enabled global computers. This will also allow us to implement our security architecture and evaluate it on case studies from a range of application domains.

Thème(s)

Data not available

Appel à propositions

Data not available

Régime de financement

IP - Integrated Project

Coordinateur

INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET EN AUTOMATIQUE
Contribution de l’UE
Aucune donnée
Adresse
DOMAINE DE VOLUCEAU
78153 LE CHESNAY
France

Voir sur la carte

Coût total
Aucune donnée

Participants (19)