Research Interests

I am primarily interested in all aspects of security in distributed systems. I have been working on applying cryptographic techniques in building secure protocols to solve various problems in distributed systems.

Recent talks

On-board Credentials with Open Provisioning

Invited keynote at WISTP 2008, Seville, Spain, May 2008. [slides]

Initializing Security Associations for Personal Devices

Tutorial at the ZISC workshop on wireless security, ETH Zürich, Switzerland, September 2007. [slides]

Phishing and Mobile Phones

Presentation in the panel on the "Future of Phishing", Usable Security Workshop, Scarborough, Tobago, February 2007. [slides]

List of publications

Disclaimer

The documents distributed from this page have been provided as a means to ensure timely dissemination of scholarly and technical work on a noncommercial basis. Copyright and all rights therein are maintained by the authors or by other copyright holders, notwithstanding that they have offered their works here electronically. It is understood that all persons copying this information will adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without the explicit permission of the copyright holder.

Using Salience Differentials to Making Visual Cues Noticeable (with Andreas Heiner)

Short paper at the Usability, Psychology, and Security Workshop (UPSEC '08), 2008.

Secure Roaming with Identity Metasystems (with Long Nguyen Hoang and Pekka Laitinen)

Paper in the Proceedings of the Symposium on Identity and Trust on the Internet, 2008

A Platform for OnBoard Credentials (with Jan-Erik Ekberg)

Poster (to appear) in the Proceedings of Financial Crypto '08, 2008 (Springerlink)

Beyond Secure Channels (with Yacine Gasmi, Ahmad-Reza Sadeghi, Patrick Stewin and Martin Unger)

The Second ACM Workshop on Scalable Trusted Computing (ACM-STC '07), 2007. (DOI Bookmark)

Enabling Fairer Digital Rights Management with Trusted Computing (with Ahmad-Reza Sadeghi, Christian Stüble, Marko Wolf and Jan-Erik Ekberg)

Horst Görtz Institute for IT Security technical report HGI-TR-2007-002, July 2007
In Proceedings of the Tenth Information Security Conference (ISC '07), October 2007, Valparaiso, Chile. (Springerlink)

Applicability of identity-based Cryptography in Disruption-tolerant Networking (with Kari Kostiainen, Philip Ginzboorg, Joerg Ott, and Cheng Luo)

Secure software installation in a mobile environment (with Andreas Heiner)

Poster in the Proceedings of the 3rd symposium on Usable privacy and security, July 2007. (DOI Bookmark)

Security Associations in Personal Networks: A Comparative Analysis (with Jani Suomalainen and Jukka Valkonen)

In the Proceedings of the Fourth European Workshop on Security and Privacy in Ad hoc and Sensor Networks, Cambridge, UK, July 2007. Volume 4572 of Lecture Notes in Computer Science, Springer. (Springerlink)
Nokia Research Center, Technical Report NRC-TR-2007-004, January 2007.

Usability Analysis of Secure Pairing Methods (with Ersin Uzun and Kristiina Karvonen)

Nokia Research Center, Technical Report NRC-TR-2007-002, January 2007.
In the Usable Security (USEC '07) workshop, Scarborough, Trinidad/Tobago, February 2007 (Pre-proceedings version). (Springerlink)

Ad Hoc Security Associations for Groups (with Jukka Valkonen and Kaisa Nyberg)

In the Proceedings of the Third European Workshop on Security and Privacy in Ad hoc and Sensor Networks, Hamburg, Germany, September 2006. Volume 4357 of Lecture Notes in Computer Science, Springer. (available in Springerlink.)

Secure Device Pairing based on a Visual Channel (with Nitesh Saxena, Jan-Erik Ekberg and Kari Kostiainen)

Research report at the IACR ePrint archive
(extended abstract) Proceedings of the IEEE Symposium on Security and Privacy, 2006. (Available at IEEE Explore)

Efficient Mutual Data Authentication Using Manually Authenticated Strings (with Sven Laur and Kaisa Nyberg)

Research Report in the IACR ePrint archive

Remote storage for mobile devices (with Jarkko Tolvanen, Jaakko Lipasti and Tapio Suihko)

Proceedings of the International conference on Communication System Software and Middleware (COMSWARE 2006), New Delhi, India, January 2006.

Visitor management in Personal wireless networks (with Seamus Moloney, Philip Ginzboorg, and Kari Kostiainen)

Proceedings of the IEEE International Symposium on Multimedia (ISM2005) (Multisec '05 Workshop), December 2005. Available at IEEExplore

Extending Cellular Authentication as a Service (with Pekka Laitinen et al.)

The First IEE International Conference on Commercialisting Technology and Innovation, London, UK, September 2005.

Issues in Initializing Security

(Invited) Proceedings of the IEEE Symposium on Signal Processing and Information Technology (ISSPIT), Athens, Greece, 2005. Available at IEEExplore

On the usefulness of proof-of-possession (with Valtteri Niemi and Pekka Laitinen)

Proceedings of the 2nd Annual PKI Research Workshop, April 2003.

Man-in-the-middle in tunneled authentication protocols (with Kaisa Nyberg and Valtteri Niemi)

Research report in the IACR ePrint archives, September 2002.
Extended abstract at the 2003 Security Protocols workshop
- Pre-proceedings version, April 2003
- Final version, June 2003 (LNCS 3364, pages 28-41)

Defining authorization domains using virtual deviecs (with Sampo Sovio and Kaisa Nyberg)

In the Proceedings of the 2003 Symposium on Applications and the Internet Workshops (SAINT'03 Workshops), 2003. Available at IEEExplore

Securing ad hoc routing protocols (with Manel Guerrero Zapata)

In Proceedings of the ACM workshop on Wireless security, WiSE 2002 , Atlanta, GA, pages 1-10 .

Secure Vickrey Auctions without Threshold Trust. (with Helger Lipmaa and Valtteri Niemi).

In Financial Cryptography 2002, Lecture Notes in Computer Science, Volume 2357, pages 87-101, 2002. Springer-Verlag.

Authentication and key generation for mobile IP using GSM authentication and roaming (with Henry Haverinen and Tuomas Määttänen)

In Proceedings of the 2001 IEEE International Conference on Communications (ICC 2001), Helsinki, Finland. Pages 2453-2457, vol. 8. Available at IEEExplore

SEMPER - Secure Electronic Marketplace for Europe (edited by Gerard Lacoste et al), Springer, Lecture Notes in Computer Science 1854, 2000

Architecture -- Chapter 6 (with Birgit Baum-Waidner et al)
The Payment Framework -- Chapter 11 (with Michael Steiner)

Key Agreement in Ad-hoc Networks (with Philip Ginzboorg)

in Computer Communications Review, 23(17):1627-1637, November 2000.
A preliminary version was presented at the Nordsec '99 workshop in Nov. 1999. But there is no formal proceedings.

Authenticating Public Terminals (with Michael Steiner, Hervé Debar, and Michael Waidner)

Computer Networks and ISDN Systems, 31(8):861-870, May 1999.

Towards a Framework for Handling Disputes in Payment Systems (with Michael Steiner and Els van Herreweghen)

IBM Research Report RZ 2996, Mar. 1998.
A shorter version appeared in the Proceedings of the Third USENIX Workshop on Electronic Commerce, pp. 187-202, Boston, Mass., September 1998.

Protecting the Computation Results of Free-roaming Agents (with Ceki Gülcü and Günter Karjoth)

Proceedings of the Second International Workshop on Mobile Agents (MA '98), LNCS 1477, pp. 195-207, Sep. 1998.
Personal Technologies, 2(2):92-99, Dec. 1998. (abstract)

Fairness in Electronic Commerce

Doctoral dissertation [pdf][gzipped postscript], University of Waterloo.
IBM Research Report RZ 3027, May 1998.

More on Optimistic Fair Exchange (with Victor Shoup and Michael Waidner)

A detailed report, Optimistic Fair Exchange of Digital Signatures, describing the use of verifiable encryption in fair exchange protocols is available as IBM Research Report RZ 2973, Nov. 1997. An extended abstract with the same title appears in the proceedings of Eurocrypt '98. LNCS 1403, pp. 591-606.
A detailed report, Asynchronous Protocols for Optimistic Fair Exchange, describing an improved fair exchange protocol is available as IBM Research Report RZ 2976, Nov. 1997. An extended abstract with the same title appears in the Proceedings of the 1998 IEEE Symposium on Security and Privacy, pp. 86-99.
The jounal version appeared in in the IEEE Journal on Selected Areas in Communications, 18(4):593-610, April 2000. The pre-print version is here.

Design of a Generic Payment Service (with Jose Abad-Peiro, Michael Steiner, and Michael Waidner)

IBM Research Report RZ 2891, Dec. 1996.
IBM Systems Journal, 37(1), pp 72-88, Jan. 1998.

Electronic Payment Systems (with Phil Janson, Michael Steiner, and Michael Waidner)

IBM Research Report RZ 2890, Dec. 1996.
An edited version appeared in the IEEE Computer Magazine, Sep. 1997, 30(9):28-35.
A Japanese translation appeared in Nikkei Computer, pp. 195-201, issue of March 30, 1998.
An updated version appeared as a chapter in volume 53 of the series Advances in Computers published in 2000. (this is the final version submitted for publication.)

Optimistic Protocols for Fair Exchange (with Matthias Schunter and Michael Waidner)

IBM Research Report RZ 2858, Sep. 1996.
A shorter version in the Proceedings of the 4th ACM Conference on Computer and Communications Security, Zürich, pp 6-17, Apr. 1997.
We have now extended the basic two-party protocol to the multi-party case. It is available as IBM Research Report RZ 2892, Dec. 1996.

Server-Supported Signatures (with Gene Tsudik and Michael Waidner)

Proceedings of the Fourth European Symposium on Research in Computer Security (ESORICS), LNCS 1146, pp. 131-143. Springer-Verlag, Sep. 1996.
A slightly extended version appeared in the Journal of Computer Security, 5(1), pp 91-108, 1997.

Untraceability in Mobile Networks (with Didier Samfat and Refik Molva)

Proceedings of the First ACM International Conference on Mobile Computing and Networking, pages 26-36, Berkeley, Nov. 1995.
An improved version is also available.

Security Issues in Mobile Computing

CS 690B - Research Proposal, April 1995.

Anonymity in a Mobile Computing Environment

Proceedings of the Workshop on Mobile Computing Systems and Applications, Santa Cruz, Dec. 1994.

In a previous life...

Parallel Algorithms for Constructing the Convex Hull in 2-Dimensions.

Term Paper for the Computational Geometry course, Summer 1990 (for Prof. Anna Lubiw).

A Neural Network Simulator for the Connection Machine. (with Ravi Shankar et al)

Term Paper for the Research Topics in Parallel Computing course, Fall 1989 (for Profs. Sanjay Ranka, C. Mohan and Kishan Mehrotra).
Syracuse University Technical Report SU-CIS-90-10.
Proceedings of the Fifth International Symposium on Intelligent Control, Page(s): 518 -523 vol.1, September 1990.

A Parallel Free-text Search System with Indexing. (with Ophir Frieder and Sanjay Ranka)

A Parallel Implementation of the Hough Transform Method. (with Ravi Shankar)

Term Paper for the Parallel Programming course, Fall 1988 (for Prof. E. E. Sibert).
Proceedings of the 32nd Midwest Symposium on Circuits and Systems, Page(s): 321 -324 vol.1, Urbana-Champaign, August 1989. Available at IEEExplore

Last modified: Sun Dec 23 20:14:17 EET 2007