Mobile security enclaves

Abstract

There are currently no access control methods to permit personnel, such as military members, government agencies, or first-responders, access to restricted resources and applications that are only available when certain conditions are satisfied. Such conditions include user authentication, authorized geographic locations, and connections to specific base transceiver stations or base station controllers. This work defines mobile security enclaves, which are designed to provide this access control, are adaptable and compatible with mobile cellular infrastructures, and can operate without being connected to a dedicated back-end network. The goal of this proposed architecture is to permit users who satisfy specific pre-conditions access to resources and applications to which they otherwise normally would not be granted access. An example where this research is beneficial is during crisis response. Disasters require first responders the need to have immediate access to resources available in a specific location. Another example is agencies requiring mobile communication device use on classified networks or to access classified resources. These mobile security enclaves not only provide strict security by authenticating the user and device location, they also prevent access to networks or resources outside of authorized areas and restrict unauthorized users.