Mobile Convention Brussels 2014 - Paul Skeldon

Nov 27, 20140 likes260 views

This document discusses privacy-friendly and secure access control via mobile devices. It proposes a framework that minimizes personal data disclosure through anonymous credentials, local profiles controlled by the user, and micro-incentives. This allows for customization and prevents abuse while rewarding loyalty. The framework separates concerns for software developers, service providers, technology providers and users to facilitate integration in a privacy-friendly manner. Two example applications (inShopnito and avisPoll) are evaluated using this framework.

Privacy-friendlybut secureaccess control via mobile devices
Bart De Decker
KU Leuven, iMinds-DistriNetCelestijnenlaan 200A, 3001 Heverlee
e-mail:Bart (DOT) DeDecker (AT) cs (DOT) kuleuven (DOT) be
URL:mobcom.org

Overview
•Context: MobCom project
•Data minimization
•Objections
•Framework
•Evaluation
•Conclusion

Context: Project goals
Privacy
Data minimization
Unlinkability
Assurance
Trustworthiness of data
Customization
Less personal data
Crime/abuse
Prevention / detection / punishment

Data minimization
•Minimize disclosure of personal data
•Avoid “traces”
–Difficult to erase
OfflineDigital/Online

Data minimization
•Authorized users Identified users
•Anonymous credentials
–“Prove” ownership
–Selective disclosure
–Unlinkable
•Examples:
–Idemix (IBM)
–U-Prove (MS)
Name
=
Birth date
= 1973/01/26
Subscription= 31/12/2014

Data minimization
Signed by XYZ
Birthdate before 27/11/1996
Subscription after 1/12/2014
User to mobileauthentication

Objections
•Customization?
•Abuse?
•L�ǲⲹ��ٲ�?

Objection I: Customization
•We need to know our customers
–Large profiles
•Protection
•Liabilities
–Data mining
–Monetizationof customer data

Solution I: Customization
•Local profiles
–Cover more
–User in control
–Avoid cold start
–If needed: Pseudonym

Objection II: Abuse
•Anonymity provokes abuse
–Abuse the infrastucture
–Money laundring
–...

Solution II: Anti-Abuse
•Prevention
•Pseudonymity
•Deanonymization

Solution III: uCentives
•= Micro-incentive
–Anonymous
–Bound to the user’s identity
–Redeem: Prove “ownership”
Value
Exp. date

Framework
•SW developers security/privacy experts
•Security/privacy often “afterthought”
•Framework
–Technology-agnostic
–Policy-driven
–[Context-aware]
–Separation of Concerns
•SW developer, Service provider, Technology provider, User

Evaluation
inShopnito
•Shopping assistant
avisPoll
•Anonymous but Verifiable, Internet Service POLL System

Invitation
•Hands-on session (PriMan Framework)
–When: Tue Dec 16, 13:30 –17:00
–Where: KU Leuven, Dept. Computer Science
–URL: mobcom.org/announcements/priman-workshop
•Closing workshop MobCom & SecureApps
–When: Wed Dec 17, 9:45 –17:30
–Where: Faculty Club, Leuven
–URL: mobcom.org/announcements/closing-workshop

This document discusses the fragmentation of the internet and online identity. It notes that popular internet services and apps increasingly limit access through closed platforms rather than open standards. This can impact the disclosure of personal identity and possibilities for participation online. The document examines perspectives for analyzing these issues, including considerations of technology and code, legal aspects, and the potential for surveillance and social control through closed platforms.

Using Digital Certificates To Secure Sensitive Communications At Uw MadisonNicholas Davis

��

Digital certificates can help secure communications at UW-Madison by verifying identities and preventing tampering. They function like an electronic passport and allow users to encrypt emails and digitally sign documents. DoIT manages the digital certificate program and issues certificates from Verisign to authenticate users and ensure only authorized individuals can view or modify encrypted emails and signed documents. Questions about digital certificates and their benefits for increasing security can be directed to Nicholas Davis.

Healthcare Information Security Secure Sensitive Communications Within The ...Nicholas Davis

��

The document discusses how digital certificates can be used to securely communicate sensitive information within the UW Medical School. It outlines how digital certificates can provide proof of document authorship, encrypt emails and attachments to protect them from being read or altered, and sign documents to prove their authenticity. The document provides examples of how digital certificates work and the benefits they provide for securing communications. It also addresses questions around the technology and its management by DoIT to increase trust and security.

Social Engineering | #ARMSec2015Hovhannes Aghajanyan

��

Harrisresume 19NickHarris84

��

This document provides a summary of Nick Harris's professional experience, education, and skills. It outlines his previous role as a Congressional Fellow in the Office of the House Committee on Homeland Security where he managed communications and provided research and analysis. It also lists that he holds a CompTIA Security+ certification and degrees from the University of Oklahoma and Rose State College in international security studies and cybersecurity, respectively. Finally, it details additional technical skills including Python scripting, cryptography, penetration testing, and familiarity with network security tools.

Internet of Everything & WebRTCIgor Zboran

��

WoT framework and use casesSoumya Kanti Datta

��

This document proposes a Web of Things (WoT) architecture to address challenges in connecting heterogeneous IoT devices. The architecture includes proxies to expose device functionality through RESTful APIs, uniform device descriptions, and a lightweight framework for device management. It also describes using semantic technologies to process sensor data from multiple domains and develop cross-domain applications. Examples of smart home and cross-domain use cases are provided to illustrate how the WoT architecture could work.

Pki Digital Id Itmc University WisconsinNicholas Davis

��

This document provides an overview of the University of Wisconsin System's digital ID service. It explains that a digital ID acts like an electronic passport to authenticate users' identity through something they have (a digital certificate). The overview describes how digital IDs can be used for authentication into systems like HRS, signing documents in Microsoft Office, and encrypting emails and attachments. It also covers the history and administration of the UW System's digital ID service, how to obtain a digital ID, technical support resources, and challenges of adoption.

Managing Your Digital Footprint - 2012 National BDPA Conference PresentationShauna_Cox

��

The document summarizes a presentation on managing your digital footprint. The presentation covers defining a digital footprint, understanding the risks of exposing sensitive information online, leveraging one's digital profile for personal branding, and developing strategies for managing an online reputation. It provides tips on building an optimal digital profile across social media platforms, separating business and personal online activities, and regularly monitoring one's online presence to minimize risks and curate an accurate digital identity.

InsurTech - How DataScience is transforming FinTech & InsurTech by Nele Coghe...FinTech Belgium

��

Invisible Architectures - Supporting Public-Facing TechnologiesJane Alexander

��

Technology has become a common aspect of the museum visitor experience. Kiosks, mobile apps, ticket sales, signage, etc. combine to create the integrated experience our visitors expect. In order to provide this experience, these systems can no longer be developed and maintained as separate parts. It is necessary for interactive systems to share data and media, point of sale systems to share visitor data, and signage systems to link to event scheduling. Supporting these systems has a significant impact on the museum’s technology infrastructure and systems. Networks have to support ubiquitous Wi-Fi for visitors, deliver streaming content to kiosks and apps, and support location based technologies. Collection Information and digital asset management systems have to be adapted to provide content to support interpretive projects in galleries and online. Multiple visitor information systems have to be integrated to provide the personal experience the visitor expects. All of this technology has to be kept running and updated. Panelists will discuss specific projects at their institutions and how they are addressing these challenges followed by a QA session. Jane Alexander; Chief Information Officer, The Cleveland Museum of Art will present “Beyond Beta - CMA’s iBeacon Technology is Live” which describes how iPad, iPhone and Android smart devices engage 270 Bluetooth iBeacons that triangulate visitor location within one meter offering a seamless and rich experience of each work assimilating art history and education with intuitive essential video, audio, text and still-image content. Jane will also discuss how CMA’s analysis of visitor engagement and changing tastes and trends in visitor experience, guide exhibit layout and support materials as well as shape next iterations of CMA’s app ware. Brian Dawson; Chief Digital Officer, Canada Science and Technology Museums Corporation will present ‘Digital Reboot: Building and Invisible Architecture from the ground up.” The Canada Science and Technology Museum is closed for major renovations until 2017, in which the museum experience is being completely rebuilt. The museum is undergoing a digital transformation, including a complete "reboot" of the digital experience. Brian will outline the approach taken by CSTM in rebooting the museum experience, highlighting lessons that should be broadly applicable to other institutions. Bill Weinstein; The John H. McFadden and Lisa D. Kabnick Director of Information and Interpretive Technologies, Philadelphia Museum of Art will present “0 to 60 in no time” which describes how the IT department has had to adapt and grow the infrastructure and back end systems to accommodate to the increased usage of technology in the galleries. Bill will discuss the development of hardware standards for interactives, installation of supporting infrastructure, development of databases to track usage and how these projects affect budging and fundraising.

MISA Cloud Workshop_ ipc privacy in the cloudMISA Ontario Cloud SIG

��

This document summarizes a presentation about privacy and cloud computing. It discusses the benefits and risks of cloud computing, as well as the importance of privacy by design and accountability. Key points include that while cloud services can be outsourced, accountability cannot. Organizations must conduct due diligence on cloud providers and ensure proper contractual provisions through a privacy by design approach.

Digital property rightsHimanshu Pathak

��

This document discusses digital property rights. It defines digital property as information about an individual or created by an individual that exists digitally, either online or on a storage device. Digital property rights refer to rights that grant access and control over digital information and data. Issues around digital property rights include plagiarism, which is using someone else's ideas as your own, and infringement, which involves unauthorized use of intellectual property. The document also discusses freedom of information and the digital divide.

Towards Privacy by Design. Key issues to unlock science.Marlon Domingus

��

This document discusses key issues related to privacy by design in open science. It outlines five main topics: attitude and trust, the researcher, maturity models as time machines, new roles and collaborations, and context and framing. Under each topic, the document provides further details on issues like soft vs hard law, the researcher's context and responsibilities, maturity models for legal research support, and new roles that can help ensure privacy by design. The overall aim is to help unlock science while addressing privacy through collaborative and contextual approaches.

Blockcircus Hackathon --> The Mesh Teamnazlitemu

��

Blockchain can be used to securely store and verify identity information for banks. A proposed solution would create private blockchain networks for each bank to securely store identity data like addresses, phone numbers, and card details using cryptography. Deep learning and face recognition could also be used to validate a person's identity and merge it with blockchain properties for secure transactions in real-time. This would avoid issues like incomplete transactions, attacks, and account compromise while providing benefits like security, transparency, and scalability.

Krishna kumar singhkrishnakumarkrishnak3

��

This document discusses several ethical issues related to information and communication technology (ICT). It addresses definitions of cyber ethics, issues like privacy, spoofing, piracy, and spamming in e-commerce. It also covers patient privacy in healthcare. The document outlines different approaches to ethics like deontology, consequentialism, and virtue ethics. It discusses the British Computer Society Code of Conduct and how ethics applies to ICT professionals, business, cloud computing, hacking, and online privacy in the age of social media and information sharing.

Managing Frequently Overlooked Risks & Threats (FORTS) in CorporationsDinesh O Bareja

��

information security importance and use.pptMuhammadAbdullah311866

��

Information security involves all measures taken to protect electronic data from unauthorized access, use, disclosure, alteration or destruction. It aims to provide confidentiality by concealing data, integrity by ensuring data is authentic and unmodified, and availability by maintaining efficient system function even with security provisions. While no single measure can ensure complete security, cryptographic systems can potentially provide high levels of security through confidentiality, integrity and availability. Public key cryptography uses separate keys for encryption and decryption, allowing secure communication for large networks, while digital signatures and certification authorities provide authentication. Comprehensive information security also requires prevention of attacks, detection of any security breaches, and timely response to contain damage and restore normal operations.

Lecture15.pptRamaNingaiah

��

Information security involves all measures taken to protect electronic data from unauthorized access, use, disclosure, alteration or destruction. It aims to provide confidentiality by concealing data, integrity by ensuring data is authentic and unmodified, and availability by maintaining efficient system function even with security provisions. While no single measure ensures complete security, cryptographic systems can potentially provide high levels of security through confidentiality, integrity and availability. Public key encryption uses separate keys for encryption and decryption, allowing secure communication for large networks, while digital signatures and certification authorities provide authentication. Prevention, detection and response work together to secure systems and minimize risks from security attacks.

formintroduction to ISF.ppt ination security fundamentalsarfatdell

��

Social Engineering BasicsLuke Rusten

��

MIS part 4_CH 11.pptEndAlk15

��

This document provides an overview of computer security, privacy, and ethics issues. It describes common computer security risks like viruses, unauthorized access, hardware theft, and system failure. It also discusses how to safeguard against these risks using measures like firewalls, access controls, and backups. The document then covers internet security risks such as denial of service attacks and email spoofing. Finally, it examines ethics issues involving information accuracy, privacy, and intellectual property rights.

Ethics, Professionalism and Other Emerging TechnologiesPrakhyath Rai

��

Seclud it polesc_sjuly7Sergio Loureiro

��

The document outlines the top threats to cloud computing, including shared technology vulnerabilities that could impact multiple customers if exploited; data loss and leakage due to improper access controls or weak encryption; and malicious insiders who may abuse privileges to access customer data. Other threats discussed are abuse of cloud computing for nefarious uses like password cracking or malware hosting; insecure APIs that may expose applications; account or service hijacking to steal credentials; and an unknown risk profile leaving customers exposed. Examples are provided for each threat.

DRC - Cybersecurity Concepts 2015 - 5 Basics you must know!Kevin Fisher

��

Openbar Leuven // Top 5 focus areas in cyber security linked to you digital t...Openbar

��

Privacy in Business Processes by User-Centric Identity ManagementSven Wohlgemuth

��

Privacy is not only a concern of customers. Service providers also fear privacy violations as a main hurdle for the acceptance of personalised services. Furthermore, the protection of privacy is an interest of service providers who take on customer relationship management activities of several service providers. They manage customers’ profiles, e.g. in loyalty programs and e-health scenarios with electronic patient records, and offer the service of aggregation. If it is possible to link profiles of a customer without the need of such service providers, latter would not benefit from their aggregation service. Case studies show privacy threats in business processes with personalised services. The objective of this FIDIS work package 14 is to identify privacy threats in business processes with personalised services, to suggest process models for modelling privacy-aware business processes and to derive security requirements for user-centric identity management in order to preserve privacy. The presented scenarios and use cases are recommended for non-technical audicence, whereas the analysis of user-centric identity management protocols and approaches for identity management extensions are recommended for technical audience.

Mobile application securitry risks ISACA Silicon Valley 2012Symosis Security (Previously C-Level Security)

��

Mobile Application SecurityLenin Aboagye

��

This document discusses security risks associated with mobile apps. It begins with an introduction to the presenters and an overview of the growth of mobile apps and associated security concerns. It then identifies the top 3 risks as side channel data leakage, insecure transport and server controls, and insecure data storage. Examples are provided for each. The document recommends countermeasures like secure programming practices, encryption of data, and secure design principles. It also discusses strategies for mobile security including mobile information management, mobile application management, and mobile device management and the challenges associated with each.

DRC -- Cybersecurity concepts2015T. J. Saotome

��

This document discusses basic cybersecurity concepts that everyone should be aware of. It outlines different types of threats like hackers, insiders, and human error. It also discusses common cybersecurity problems like a lack of awareness and complacency. The rest of the document delves into specific cybersecurity concepts like authentication, confidentiality, integrity, availability, and non-repudiation. It emphasizes adopting both security policies and technologies, as well as user education, to mitigate risks in a layered defense approach. While no system can be completely secure, a combination of measures can get close to eliminating risks.

More Related Content

What's hot (8)

Managing Your Digital Footprint - 2012 National BDPA Conference PresentationShauna_Cox

��

InsurTech - How DataScience is transforming FinTech & InsurTech by Nele Coghe...FinTech Belgium

��

Invisible Architectures - Supporting Public-Facing TechnologiesJane Alexander

��

MISA Cloud Workshop_ ipc privacy in the cloudMISA Ontario Cloud SIG

��

Digital property rightsHimanshu Pathak

��

Towards Privacy by Design. Key issues to unlock science.Marlon Domingus

��

Blockcircus Hackathon --> The Mesh Teamnazlitemu

��

Krishna kumar singhkrishnakumarkrishnak3

��

Managing Your Digital Footprint - 2012 National BDPA Conference PresentationShauna_Cox

��

InsurTech - How DataScience is transforming FinTech & InsurTech by Nele Coghe...FinTech Belgium

��

Invisible Architectures - Supporting Public-Facing TechnologiesJane Alexander

��

MISA Cloud Workshop_ ipc privacy in the cloudMISA Ontario Cloud SIG

��

Digital property rightsHimanshu Pathak

��

Towards Privacy by Design. Key issues to unlock science.Marlon Domingus

��

Blockcircus Hackathon --> The Mesh Teamnazlitemu

��

Krishna kumar singhkrishnakumarkrishnak3

��

Similar to Mobile Convention Brussels 2014 - Paul Skeldon (20)

Managing Frequently Overlooked Risks & Threats (FORTS) in CorporationsDinesh O Bareja

��

information security importance and use.pptMuhammadAbdullah311866

��

Lecture15.pptRamaNingaiah

��

Information security involves all measures taken to protect electronic data from unauthorized access, use, disclosure, alteration or destruction. It aims to provide confidentiality by concealing data, integrity by ensuring data is authentic and unmodified, and availability by maintaining efficient system function even with security provisions. While no single measure ensures complete security, cryptographic systems can potentially provide high levels of security through confidentiality, integrity and availability. Public key encryption uses separate keys for encryption and decryption, allowing secure communication for large networks, while digital signatures and certification authorities provide authentication. Prevention, detection and response work together to secure systems and minimize risks from security attacks.

formintroduction to ISF.ppt ination security fundamentalsarfatdell

��

Social Engineering BasicsLuke Rusten

��

MIS part 4_CH 11.pptEndAlk15

��

Ethics, Professionalism and Other Emerging TechnologiesPrakhyath Rai

��

Seclud it polesc_sjuly7Sergio Loureiro

��

DRC - Cybersecurity Concepts 2015 - 5 Basics you must know!Kevin Fisher

��

Openbar Leuven // Top 5 focus areas in cyber security linked to you digital t...Openbar

��

Privacy in Business Processes by User-Centric Identity ManagementSven Wohlgemuth

��

Mobile application securitry risks ISACA Silicon Valley 2012Symosis Security (Previously C-Level Security)

��

Mobile Application SecurityLenin Aboagye

��

DRC -- Cybersecurity concepts2015T. J. Saotome

��

Cyber securityDr. Kishor Nikam

��

This document provides an overview of cyber security topics including wireless networks, types of attacks, security goals, computer forensics, security threats, examples of cyber crimes, ransomware attacks, strong passwords, malicious code, programming bugs, cryptography, digital signatures, security procedures, guidelines, security laws, intellectual property rights, and security audits. It discusses key concepts such as confidentiality, integrity, and availability as goals for security and describes common cyber crimes like identity theft, hacking, and credit card fraud.

Security and ComplianceBankingdotcom

��

ISACA CACS 2012 - Mobile Device Security and PrivacyMichael Davis

��

This document discusses trends in social media and mobile security. It notes that mobility and use of personal devices for work is increasing rapidly, bringing new security challenges. Mobile devices face security risks at the network, hardware, operating system and application layers. The document outlines common types of malicious mobile applications and vulnerabilities they may exploit, including monitoring user activity and stealing private data. It emphasizes the importance of securing sensitive data through encryption and access controls on mobile devices and applications. The document recommends organizations form mobility councils to develop mobile security policies and consider mobile device management solutions to help address security risks from increased mobility.

Jonathan Cave, University of Warwick (Plenary): Agreeing to Disagree About Pr...i_scienceEU

��

The document discusses how markets can both protect and erode privacy. It notes that private data is increasingly valuable and can be traded on markets for personal data and information. However, not all valuable data needs property rights protection. The document also examines how privacy is a recent invention and new technologies challenge underlying privacy assumptions. It argues for avoiding easy answers and discusses how privacy, trust, security, and identity are interrelated concepts with no simple definitions.

Social engineering-Attack of the Human BehaviorJames Krusic

��

Social engineering exploits human behavior and trust to gain access to sensitive information. It includes technical attacks like phishing emails and pop-up windows, as well as non-technical attacks like dumpster diving. Common human behaviors exploited include curiosity, fear, and thoughtlessness. To help mitigate social engineering risks, organizations should educate employees, implement security policies, conduct audits, and use technical defenses like email filters and firewalls. Regular awareness training can help motivate employees to follow best practices.

Research on AI using Cyber Security and Forensicsprojob2412

��

Managing Frequently Overlooked Risks & Threats (FORTS) in CorporationsDinesh O Bareja

��

information security importance and use.pptMuhammadAbdullah311866

��

Lecture15.pptRamaNingaiah

��

formintroduction to ISF.ppt ination security fundamentalsarfatdell

��

Social Engineering BasicsLuke Rusten

��

MIS part 4_CH 11.pptEndAlk15

��

Ethics, Professionalism and Other Emerging TechnologiesPrakhyath Rai

��

Seclud it polesc_sjuly7Sergio Loureiro

��

DRC - Cybersecurity Concepts 2015 - 5 Basics you must know!Kevin Fisher

��

Openbar Leuven // Top 5 focus areas in cyber security linked to you digital t...Openbar

��

Privacy in Business Processes by User-Centric Identity ManagementSven Wohlgemuth

��

Mobile application securitry risks ISACA Silicon Valley 2012Symosis Security (Previously C-Level Security)

��

Mobile Application SecurityLenin Aboagye

��

DRC -- Cybersecurity concepts2015T. J. Saotome

��

Cyber securityDr. Kishor Nikam

��

Security and ComplianceBankingdotcom

��

ISACA CACS 2012 - Mobile Device Security and PrivacyMichael Davis

��

Jonathan Cave, University of Warwick (Plenary): Agreeing to Disagree About Pr...i_scienceEU

��

Social engineering-Attack of the Human BehaviorJames Krusic

��

Research on AI using Cyber Security and Forensicsprojob2412

��

More from Mobile Convention (20)

Mobile First Will Not Be Enough | Forrester at Mobile Convention ParisMobile Convention

��

The Future of Mobile Security | Kimo Quaintance at Mobile Convention ParisMobile Convention

��

F**ck the change | Stefanie Palomino at Mobile Convention London 2016Mobile Convention

��

Size Doesn't Matter | Twitter at Mobile Convention London 2016 Mobile Convention

��

Brand Side of Digital Disruption | Ramon Luijten - EMansion | Mobile Conventi...Mobile Convention

��

The document is about eMansion, a company that provides customer engagement solutions such as proximity-loyalty apps, live video streaming, 360 3D virtual reality, and creative storytelling to help customers activate, generate traffic, create experiences, and increase conversion and loyalty. It discusses how digital disruption is changing the customer experience and presents opportunities for companies to connect with customers, listen and adapt, provide surprises, and stay relevant through new technologies like virtual and augmented reality.

Mobility Past, Present & Future - A personal journey through time | Mobile Co...Mobile Convention

��

Wearables - Nothing new but it's time to build engaging experiences. | Mobile...Mobile Convention

��

Avoiding the pitfalls and harnessing the opportunities of Mobile today | Mobi...Mobile Convention

��

Make sure to listen to his interview at: https://youtu.be/1xdh4YyP4P4 This is the presentation of Mobile Marketing Expert David Skerrett at Mobile Convention Brussels. David was interviewed by Peggy Anne Salz (top 25 Mobile Marketing influencer). David Skerrett works with his ''next generation'' agency for many big companies like Jameson, BBC, Sky and many more. David won over 25 awards for his mobile campaigns. David Skerrett is interviewed by Peggy Anne Salz about his experience on mobile, to see the opportunities as a brand an how to avoid the common pitfalls when you go mobile.

Mobile Convention Brussels 2014 - InBeacon - Remco BronMobile Convention

��

Beacons use Bluetooth Low Energy technology to detect nearby smartphones and other devices, allowing businesses to send contextual messages and offers to customers within physical locations. Many large retailers and brands are experimenting with beacon implementations to improve customer service, drive purchases, and collect consumer behavior data through proximity marketing. Beacons have the potential to close the loop between the online and offline worlds by personalizing the customer experience across physical stores and digital channels.

Mobile Convention Brussels 2014 - Proximus - Eefje Vanhullebusch Mobile Convention

��

This document discusses advanced telco services including SMS solutions, smart ticketing, and the Internet of Things (IoT). It provides examples of how SMS can be used for applications like appointment reminders and reducing unpaid invoices. Smart ticketing solutions allow cities and companies to issue and collect payment for tickets digitally. The document also discusses how IoT connects everyday objects through sensors and gateways to create applications that can optimize costs, maximize efficiency, and drive innovation for businesses.

Mobile Convention Brussels 2014 - Paul SkeldonMobile Convention

��

Mobile commerce is growing rapidly, with mobile devices becoming central to the shopping experience. By 2018, nearly half of all e-commerce in Europe will be done on mobile devices, worth €142 billion. Mobile payments are also increasing significantly, expected to reach $507 billion globally by 2014. However, consumers want mobile commerce and payments to be simple and secure. Retailers need to focus on engaging customers through mobile, such as by using beacons, to improve the shopping experience and drive sales across channels. Many retailers still lag in implementing effective mobile strategies.

Mobile Convention Brussels 2014 - Maurice Jongerius - Bol.comMobile Convention

��

Mobile Convention Brussels 2014 - Filip Nuytemans UberMobile Convention

��

Presentation of Filip Nuytemans - Uber at Mobile Convention Brussels 2014. During Mobile Convention Brussels we had an interview with Filip: https://www.youtube.com/watch?v=SIKi5ORn8dI Mobile Convention is crossing borders. Make Sure to check out our following events: - Mobile Convention London, is holding on March 26th | www.mobileconventionlondon.uk - Mobile Convention Amsterdam, is holding on March 26th | www.mobileconventionamsterdam.com

Mobile Convention Brussels 2014 - Benjamin TysebaertMobile Convention

��

This document discusses the growth of mobile payments, providing statistics showing mobile payments surpassing desktop payments in Europe, Asia, North America, and Latin America. Examples are given of mobile payment solutions for donations using Twitter and adjusting the payment method based on device. Best practices for mobile app payments include seamless registration with one click, retaining user information, connecting payment methods to apps, focusing on small amounts, and selecting the most relevant payment method. The future of payments is predicted to include European banking licenses, growth of European payments and Instantpay, and more flexible subscriptions/donations.

Mobile Convention Brussels 2014 - Tom van den BroekMobile Convention

��

Mobile Convention in Brussels on November 27th will feature Tom van den Broek discussing mobile trends in news and sports. NOS mobile app and site usage has grown significantly. In 2014, major sports events drove 250k extra app downloads. Looking ahead, opportunities exist in wearables, mobile TV engagement, and using mobile to drive content discovery on the big screen, though linear TV likely still has a place. Attendees should contact Tom van den Broek for more information.

Mobile Convention Brussels 2014 - Filip GosseleMobile Convention

��

This document discusses mobile payments and analyzes Apple Pay. It provides background on early mobile payment solutions from 2000-2014 that failed to gain traction. It then summarizes how Apple Pay works, including using Touch ID for authentication and storing card details securely on devices. The document also discusses Apple Pay's potential business model of charging a 0.15% cut of transaction values and how it relies on existing payment networks and processors rather than creating a new ecosystem.

Mobile Convention Brussels 2014 - Kimo QuaintanceMobile Convention

��

Presentation of Kimo Quaintance about mobile privacy en mobile security at Mobile Convention Brussels 2014. During Mobile Convention Brussels we had an interview with Kimo. Watch it here: https://www.youtube.com/watch?v=syRKq8bC1ks Watch the full session here: https://www.youtube.com/watch?v=um0Ga72xTJc Mobile Convention is crossing borders, make sure to check our following events: - Mobile Convention London: March 26th - www.mobileconventionlondon.uk - Mobille Convention Amsterdam | June 4th 2015 | http://www.mobileconventionamsterdam.nl/

Mobile Convention Brussels 2014 - Stéphane CorubleMobile Convention

��

Connect is an interactive TV system developed by RTL Belgium that allows viewers to engage with content and ads on a second screen like a smartphone or tablet. It uses watermarking and time-syncing to link the TV programming and second screens. This increases viewer engagement, especially for ads. Over 1 million RTL apps have been downloaded, with 41% of downloads for the TV channel apps that have Connect features. Connect ads have seen a 19% increase in unaided recall, 58% higher ad relevance, and 83% higher persuasion value. RTL aims to continue expanding Connect to more channels and features like coupons, e-commerce, and collecting customer data.

Mobile Convention Brussels 2014 - Chris HeilmannMobile Convention

��

The document summarizes trends in mobile app development based on a talk by Chris Heilmann. It notes that iOS dominates the high-end market while Android has most other areas. Windows Phone is gaining developer interest but not users. It discusses Android fragmentation, the dominance of HTML5 for cross-platform development, and how a majority of developers struggle to earn over $500 per month from their apps despite games dominating app store revenues. It also covers the usage of third party tools, differences between platforms, and emerging areas like wearables and the Internet of Things.

Mobile Convention Brussels 2014 - Jeroen LemaireMobile Convention

��

The document discusses trends in mobile app and web usage. It notes that time spent in mobile apps is increasing, with over 80% of mobile time now spent in apps rather than mobile websites. It also discusses the growing popularity of Android devices and how mobile usage is shifting to apps on smartphones and tablets. Emerging technologies like smartwatches, connected home devices, and beacons may further influence mobile trends.

Mobile First Will Not Be Enough | Forrester at Mobile Convention ParisMobile Convention

��

The Future of Mobile Security | Kimo Quaintance at Mobile Convention ParisMobile Convention

��

F**ck the change | Stefanie Palomino at Mobile Convention London 2016Mobile Convention

��

Size Doesn't Matter | Twitter at Mobile Convention London 2016 Mobile Convention

��

Brand Side of Digital Disruption | Ramon Luijten - EMansion | Mobile Conventi...Mobile Convention

��

Mobility Past, Present & Future - A personal journey through time | Mobile Co...Mobile Convention

��

Wearables - Nothing new but it's time to build engaging experiences. | Mobile...Mobile Convention

��

Avoiding the pitfalls and harnessing the opportunities of Mobile today | Mobi...Mobile Convention

��

Mobile Convention Brussels 2014 - InBeacon - Remco BronMobile Convention

��

Mobile Convention Brussels 2014 - Proximus - Eefje Vanhullebusch Mobile Convention

��

Mobile Convention Brussels 2014 - Paul SkeldonMobile Convention

��

Mobile Convention Brussels 2014 - Maurice Jongerius - Bol.comMobile Convention

��

Mobile Convention Brussels 2014 - Filip Nuytemans UberMobile Convention

��

Mobile Convention Brussels 2014 - Benjamin TysebaertMobile Convention

��

Mobile Convention Brussels 2014 - Tom van den BroekMobile Convention

��

Mobile Convention Brussels 2014 - Filip GosseleMobile Convention

��

Mobile Convention Brussels 2014 - Kimo QuaintanceMobile Convention

��

Mobile Convention Brussels 2014 - Stéphane CorubleMobile Convention

��

Mobile Convention Brussels 2014 - Chris HeilmannMobile Convention

��

Mobile Convention Brussels 2014 - Jeroen LemaireMobile Convention

��

Mobile Convention Brussels 2014 - Paul Skeldon

1. Privacy-friendlybut secureaccess control via mobile devices Bart De Decker KU Leuven, iMinds-DistriNetCelestijnenlaan 200A, 3001 Heverlee e-mail:Bart (DOT) DeDecker (AT) cs (DOT) kuleuven (DOT) be URL:mobcom.org

2. Overview •Context: MobCom project •Data minimization •Objections •Framework •Evaluation •Conclusion

3. Context

4. Context: Project goals Privacy Data minimization Unlinkability Assurance Trustworthiness of data Customization Less personal data Crime/abuse Prevention / detection / punishment

5. Data minimization •Minimize disclosure of personal data •Avoid “traces” –Difficult to erase OfflineDigital/Online

6. Data minimization •Authorized users Identified users •Anonymous credentials –“Prove” ownership –Selective disclosure –Unlinkable •Examples: –Idemix (IBM) –U-Prove (MS) Name = Birth date = 1973/01/26 Subscription= 31/12/2014

7. Data minimization Signed by XYZ Birthdate before 27/11/1996 Subscription after 1/12/2014 User to mobileauthentication

8. Objections •Customization? •Abuse? •L�ǲⲹ��ٲ�?

9. Objection I: Customization •We need to know our customers –Large profiles •Protection •Liabilities –Data mining –Monetizationof customer data

10. Solution I: Customization •Local profiles –Cover more –User in control –Avoid cold start –If needed: Pseudonym

11. Objection II: Abuse •Anonymity provokes abuse –Abuse the infrastucture –Money laundring –...

12. Solution II: Anti-Abuse •Prevention •Pseudonymity •Deanonymization

13. Objection III: Loyalty •Reward recurrent behaviour ?

14. Solution III: uCentives •= Micro-incentive –Anonymous –Bound to the user’s identity –Redeem: Prove “ownership” Value Exp. date

15. Framework •SW developers security/privacy experts •Security/privacy often “afterthought” •Framework –Technology-agnostic –Policy-driven –[Context-aware] –Separation of Concerns •SW developer, Service provider, Technology provider, User

16. Framework

17. Evaluation inShopnito •Shopping assistant avisPoll •Anonymous but Verifiable, Internet Service POLL System

18. Invitation •Hands-on session (PriMan Framework) –When: Tue Dec 16, 13:30 –17:00 –Where: KU Leuven, Dept. Computer Science –URL: mobcom.org/announcements/priman-workshop •Closing workshop MobCom & SecureApps –When: Wed Dec 17, 9:45 –17:30 –Where: Faculty Club, Leuven –URL: mobcom.org/announcements/closing-workshop

19. Conclusion •Mobile privacy-friendly AC is feasible –Local profiles customization –Combat Abuse –Loyalty rewarded “anonymously” •Framework allows for easy integration –Separation of concerns •Efficient

20. Q&A

�ݺ�ߣ

Mobile Convention Brussels 2014 - Paul Skeldon

Recommended

More Related Content

What's hot (8)

Similar to Mobile Convention Brussels 2014 - Paul Skeldon (20)

More from Mobile Convention (20)

Mobile Convention Brussels 2014 - Paul Skeldon