LOCATION DATA SIGNING – PROTECTING THE INTEGRITY AND AUTHENTICITY OF POSITIONING SYSTEM DATA

摘要

Ensuring the integrity and authenticity of location data is becoming increasingly important asbusinesses and governments use Global Navigation Satellite System data in many new domainssuch as pay-as-you-drive insurance, variable transportation taxes, logistics auditing, fleettracking, and IntelliDrive applications. Location data signing is the technique of producing adigital signature for data obtained from a positioning system, such as the U.S. NAVSTARGlobal Positioning System (GPS), in order to prove a mobile device was at a particular locationat a given date and time. This paper describes the design and implementation of location datasigning within a software system and investigates the overhead, trade-offs, and challengesencountered in a proof-of-concept mobile application for GPS-enabled cell phones. Resultsfrom experiments demonstrate that recent advances in mobile device technology now allow forcomputationally-intensive cryptographic algorithms to execute in a reasonable amount of timeand with little noticeable overhead to the user. The feasiblity of location data signing onmobile devices therefore paves the way for secure uses of GPS data in the transportationdomain.