A Framework for Ensuring Security in Ubiquitous Computing Environment Based on Security Engineering Approach

摘要

The goal of this paper is to provide a framework for ensuring security in ubiquitous computing environment based on security engineering approach. Security engineering is about building systems to remain dependable in the face of malice, error or mischance. In order to do this, we propose a framework which includes the concept of security state and security flow. The combinations of security state and security flow represent a unique viewpoint and a particular pattern for consideration of security services. We can analyze and identify security issues and threats from these combinations and patterns and provide suitable security services for concerns. For this purpose, we have applied our approach to RFID service network, which is one of the representative examples that are to practically realize ubiquitous computing environment.