Abstract

The superior reconfigurability of software defined radio mobile devices has made it the most promising technology on the wireless network and in the communication industry. Despite several advantages, there are still a lot to discuss regarding security, for instance, the radio configuration data download, storage and installation, user's privacy, and cloning. The objective of this paper is to present a fraud-prevention framework for software defined radio mobile devices that enhances overall security through the use of new pieces of hardware, modules, and protocols. The framework offers security monitoring against malicious attacks and viruses, protects sensitive information, creates and protects an identity for the system, employs a secure protocol for radio configuration download, and finally, establishes an anticloning scheme, which besides guaranteeing that no units can be cloned over the air, also elevates the level of difficulty clone units if the attacker has physical access to the mobile device. Even if cloned units exist, the anticloning scheme is able to identify and deny services to those units. Preliminary experiments and proofs that analyze the correctness of the fraud-prevention framework are also presented.

Highlights

  • Software defined radio [1] allows multiple radio standards to operate on common radio frequency hardware, thereby ensuring compatibility among legacy, current, and evolving wireless communication technologies.A software defined radio mobile device (SDR-MD) is capable of having its operation changed by dynamically loading radio reconfiguration data (R-CFG files) over the air

  • The proposed framework offers security monitoring against malicious attacks and viruses that may affect the configuration data, protects sensitive information through the use of protected storage, creates and protects an identity for the system, employs a secure protocol for R-CFG download, and establishes an anticloning scheme which guarantees that no units can be cloned over the air, and elevates the level of difficulty to clone units if the attacker has physical access to the SDR-MD

  • The fraud-prevention framework is composed of new pieces of hardware, new modules, and new protocols

Read more

Summary

INTRODUCTION

Software defined radio [1] allows multiple radio standards to operate on common radio frequency hardware, thereby ensuring compatibility among legacy, current, and evolving wireless communication technologies. A software defined radio mobile device (SDR-MD) is capable of having its operation changed by dynamically loading radio reconfiguration data (R-CFG files) over the air. The concerns are the R-CFG download, storage, and installation; user’s privacy, that is, protection of the user’s identity, location, and communication with other devices; and SDR-MD cloning, that is, illegally using services that are billed to someone else’s device. The proposed framework offers security monitoring against malicious attacks and viruses that may affect the configuration data, protects sensitive information through the use of protected storage, creates and protects an identity for the system, employs a secure protocol for R-CFG download, and establishes an anticloning scheme which guarantees that no units can be cloned over the air, and elevates the level of difficulty to clone units if the attacker has physical access to the SDR-MD. Preliminary practical experiments using java 2 microedition (J2ME) [3] and proofs that analyze the correctness of the fraud-prevention framework are presented

BACKGROUND
User’s privacy
SDR-MD cloning
Trusted computing group
THE FRAUD-PREVENTION FRAMEWORK SPECIFICATION
Basic definitions
The tamper-protected hardware package
The secure SDR R-CFG download protocol
The anticloning scheme
Entering a valid state
A Fraud-Prevention Framework for SDR Mobile Devices
Cloning-aware procedure
Anticloning scheme
CORRECTNESS PROOFS
CONCLUSION
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call