SUCAS: An Architecture for Secure User Centric Attestation in Location-based Services

This work proposes a Secure User Centric Attestation Service (SUCAS) protocol that incorporates user’s action information with spatial-temporal information rendered from the location-based service to create action-spatial-temporal evidence. This evidence can be used as proof to protect the owner’s right in times of need. The SUCAS protocol preserves user’s privacy by granting control to the user while protecting the integrity and authenticity of the generated evidences through the use of tamper-resistant device. The SUCAS protocol covers the process flow for evidence generation, evidence attestation, evidence sharing and evidence verification. A train delay certificate application has been developed to evaluate the SUCAS protocol. The evaluation results confirm that the evidences generated by SUCAS are trustable and adhere to user privacy. Attestation service has great potential in the information age as it provides a mechanism to certify the reliability of user generated information.