@article {Rios2012a, title = {(Un)Suitability of Anonymous Communication Systems to WSN}, journal = {IEEE Systems Journal}, volume = {7}, number = {2}, year = {2013}, month = {Jun 2013}, pages = {298 - 310}, publisher = {IEEE Systems Council}, abstract = {

Anonymous communication systems have been extensively studied by the research community to prevent the disclosure of sensitive information from the analysis of individuals{\textquoteright} traffic patterns. Many remarkable solutions have been developed in this area, most of which have proven to be effective in the protection of user privacy against different types of attacks. Recently, the privacy preservation problem has also been considered in the realm of wireless sensor networks (WSNs) due to their imminent adoption in real-world scenarios. A special challenge that arises from the analysis of the flow of sensor nodes{\textquoteright} communications is the location privacy problem. In this work we concentrate on analyzing the suitability of traditional anonymous communication systems originally designed for the Internet to the original scenario of sensor networks. The results show that, in most cases, traditional solutions do not provide the adequate protection means for the particular problem of location privacy, while other solutions are too resource-consuming for the restricted capabilities of sensor nodes.

}, keywords = {Anonymous communication, Location Privacy, wireless sensor networks}, issn = {1932-8184}, doi = {10.1109/JSYST.2012.2221956}, author = {Ruben Rios and Javier Lopez} } @article {najerascn12, title = {User-centric secure integration of personal RFID tags and sensor networks}, journal = {Security and Communication Networks}, volume = {6}, year = {2013}, month = {Oct 2013}, pages = {1177{\textendash}1197}, publisher = {Wiley-Blackwell}, abstract = {

A personal network (PN) should enable the collaboration of user{\textquoteright}s devices and services in a flexible, self-organizing and friendly manner. For such purpose, the PN must securely accommodate heterogeneous technologies with uneven computational and communication resources. In particular, personal RFID tags can enable seamless recognition of user{\textquoteright}s context, provide user authentication and enable novel services enhancing the quality and quantity of data handled by the PN. However, the highly constrained features of common RFID tags and their passive role in the network highlights the need of an adequate secure communication model with personal tags which enables their participation as a member of the PN. In this paper, we present our concept of PN, with special emphasis on the role of RFID and sensor networks, and define a secure architecture for PNs including methods for the secure access to context-aware technologies from both local PN members and the Internet of Things. The PN architecture is designed to support differentiated security mechanisms to maximize the level of security for each type of personal device. Furthermore, we analyze which security solutions available in the literature can be adapted for our architecture, as well as the challenges and security mechanisms still necessary in the secure integration of personal tags.

}, issn = {1939-0114}, doi = {10.1002/sec.684}, url = {http://dx.doi.org/10.1002/sec.684}, author = {Pablo Najera and Rodrigo Roman and Javier Lopez} } @inproceedings {422, title = {Un protocolo para la firma de contratos en escenarios multi-two-party con atomicidad}, booktitle = {XII Reuni{\'o}n Espa{\~n}ola de Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n}, year = {2012}, month = {09/2012}, pages = {357-362}, abstract = {

Los avances tecnol{\'o}gicos que est{\'a} experimentando el mundo digital (Internet, comunicaciones, etc.) est{\'a}n acercando a consumidores y proveedores. Los proveedores pueden ofrecer sus productos directamente a los consumidores finales, y {\'e}stos son capaces de acceder a los proveedores desde cualquier lugar y en cualquier momento. A la hora de adquirir productos o
servicios, esta facilidad de acceso permite a los consumidores consultar distintas ofertas de diferentes proveedores. Pero en el caso de que el consumidor quiera m{\'u}ltiples productos, como los paquetes tur{\'\i}sticos, formados por vuelos, hoteles, excursiones, etc, los consumidores carecen de herramientas que les permitan realizar la contrataci{\'o}n multi-two-party de manera at{\'o}mica. En
este art{\'\i}culo presentamos un protocolo de firma de contratos multi-two-party con atomicidad que garantiza la equitatividad de todas las partes.

}, author = {Gerard Draper-Gil and Josep L. Ferrer-Gomilla and M.F. Hinarejos and Jose A. Onieva and Javier Lopez} } @article {1710, title = {Unleashing Public-Key Cryptography in Wireless Sensor Networks}, journal = {Journal of Computer Security}, volume = {14}, number = {5}, year = {2006}, pages = {469-482}, publisher = {IOS Press}, issn = {0926-227X}, author = {Javier Lopez} } @inproceedings {Dix04, title = {Using Temporal Logics of Knowledge in the Formal Verification of Security Protocols}, booktitle = {11th International Symposium on Temporal Representation and Reasoning (TIME{\textquoteright}04)}, year = {2004}, pages = {148-151}, publisher = {IEEE Computer Society}, organization = {IEEE Computer Society}, address = {Tatihou, Normandie, France}, abstract = {

Temporal logics of knowledge are useful for reasoning about situations where the knowledge of an agent or component is important, and where change in this knowledge may occur over time. Here we use temporal logics of knowledge to reason about security protocols. We show how to specify part of the Needham-Schroeder protocol using temporal logics of knowledge and prove various properties using a clausal resolution calculus for this logic.

}, keywords = {security protocols, temporal resolution, verification}, issn = {1530-1311}, doi = {http://doi.ieeecomputersociety.org/10.1109/TIME.2004.1314432}, author = {Clare Dixon and Carmen Fernandez-Gago and Michale Fisher and Wiebe van der Hoek} } @inproceedings {1737, title = {Una Soluci{\'o}n Flexible para Redes Privadas Virtuales}, booktitle = {VI Reuni{\'o}n Espa{\~n}ola de Criptolog{\'\i}a y Seguridad de la Informaci{\'o}n (VI RECSI)}, year = {2000}, month = {Sep 2000}, pages = {329-340}, address = {La Laguna}, isbn = {978-84789743-1-3}, author = {J. Davila and Javier Lopez and R. Peralta} } @inproceedings {JavierLopez1999b, title = {An User Authentication Infrastructure for Extranet Applications}, booktitle = {IEEE International Carnahan Conference on Security Technology}, year = {1999}, month = {October}, pages = {354-362}, publisher = {IEEE Press}, organization = {IEEE Press}, address = {Madrid, Spain}, abstract = {

An Extranet is used to connect businesses with their suppliers, customers or other businesses that share common goals in a way that automates their administrative interactions using Internet technology. The security of the communications over Internet is considered an essential feature. To guarantee secure operation the aid of some user authentication infrastructure is needed. This paper introduces a Public Key Infrastructure (PKI) and user identification scheme to be used in extranet applications. The flexibility of the system allows it to fit the usual hierarchical organization structure.

}, author = {Javier Lopez and Antonio Mana and Juan J. Ortega} } @article {JavierLopez1998, title = {Una Soluci{\'o}n Integral para la Autenticaci{\'o}n de Usuarios y la Administraci{\'o}n de Claves en Internet}, journal = {Nov{\'a}tica}, volume = {134}, year = {1998}, pages = {20-26}, abstract = {

La seguridad es uno de los aspectos m\ás conflictivos del uso de Internet. La falta de una pol\ítica de seguridad global est\á frenando el desarrollo de Internet en \áreas tan interesantes y prometedoras como el comercio electr\ónico o la interacci\ón con las administraciones p\úblicas. Las t\écnicas criptogr\áficas actuales proporcionan un alto grado de confidencialidad; no obstante, es dif\ícil garantizar la identificaci\ón segura de los usuarios y, adem\ás, la gesti\ón de las claves de los mismos es poco eficiente y presenta graves problemas de escalabilidad y seguridad. En este trabajo se describe una soluci\ón a ambos problemas basada en una Infraestructura de Clave P\ública que proporciona una administraci\ón simple y eficiente de las claves de los usuarios y posibilita la autenticaci\ón segura de los mismos. El sistema se ha probado con \éxito de forma local y, en breve, ser\á instalado para su prueba por parte de la comunidad de usuarios de RedIris.

}, issn = {0211-2124}, author = {Javier Lopez and Antonio Mana and Juan J. Ortega and Lucia Pino} }