Privacy-aware Messaging on Smartphone Mesh Network
Manuel João Sampaio Martins · Open Repository of the University of Porto (University of Porto) · 2013
Wireless Mesh Networks are presented as a low cost cooperative solution for wireless connectivity, having numerous applications in areas as businesses, homes, disaster, emergency or transport. In order to provide connectivity, routing has been studied extensively, however security has been neglected by research, leaving vulnerabilities that can be exploited by malicious users. Consequently arming users with security mechanisms resistant to common types of wireless networks attack is critical. Aiming to provide anonymity in discovery and privacy in communication, systems security solutions were researched trying to find the best of each to combine into securing a chat application. Intending to create and implement a fully distributed security protocol for wireless mesh applications, where mobile nodes are able to safely communicate, without a server certification, through serverless XMPP protocol. From an inspired combination of analysed solutions and the inclusion of some innovation a mutual authentication security scheme was designed that makes use of the phone number as the key pre-shared information. To identify and secure users, password security using stretch and salt are combined into a authentication scheme that filters the known users in the network and establishes secure communications with them. At the same time users remain anonymous with the use of a pseudonym linkable to their identity. Using open source android there was developed a chat application for WMN based on serverless XMPP and implementing decentralized security procedures that enable users to communicate safely with very good performance. This excellent user experience is provided through careful design of the functions that at the same time prevent attempts on user privacy.