loCation pROof techniqueS for consumer mobile applicationS
| Directory | Description |
|---|---|
| CA | CROSS Certificate Authority |
| CROSSCityServer | CROSS City Server V2 (Java) |
| CROSSPlayback | CROSS Client used for Replaying Trip Dataset Files (Java) |
| MessageBroker | Message Broker Docker Compose (Kafka + Zookeeper) |
| Pipeline | CROSS Network Observations Integration Pipeline (Apache Beam) |
| Name | University | More info |
|---|---|---|
| Lucas Vicente | Instituto Superior Técnico |   |
| Rafael Figueiredo | Instituto Superior Técnico | |
| Ricardo Grade | Instituto Superior Técnico | |
Vicente, L. H.; Eisa, S. & Pardal, M. L.
LoCaaS: Location-Certification-as-a-Service
21st IEEE International Symposium on Network Computing and Applications (NCA), 2022
@InProceedings{Vicente_2022_NCA_LoCaaS,
author = {Lucas H. Vicente and Samih Eisa and Miguel L. Pardal},
booktitle = {21st IEEE International Symposium on Network Computing and Applications (NCA)},
title = {{LoCaaS: Location-Certification-as-a-Service}},
year = {2022},
month = dec,
abstract = {Millions of tourists each year use smartphone applications to discover points of interest. Despite relying heavily on location sensing, most of them are susceptible to location spoofing, but not all. CROSS City is a smart tourism application that rewards users for completing tourist itineraries and uses location certificates to prevent attacks. In this case, the location verification relies on the periodic collection of public Wi-Fi network observations by multiple users to make sure the travelers actually went to the points of interest.
In this paper, we introduce the Location-Certification-as-a-Service (LoCaaS) approach, supported by a cloud-native and improved location certification system, capable of producing and validating time-bound location proofs using network data collected by tourists’ mobile devices. We show that the system can efficiently compute the stable and transient networks for a given location that are used, respectively, to validate the location of a tourist and to prove the time-of-visit. The system was deployed to the Google Cloud Platform and was validated with performance experiments and a real-world deployment.},
keywords = {Location Spoofing, Location Certificate, Security, Cloud Computing},
}