A prototype system for geo-based, cryptographically-enforced access control for miniature drones' video feeds

In this thesis, we design and implement a robust proof-of-concept system for demonstrating the concept of usable, geo-based access control and agile, dynamic key management. The system utilizes a Parrot AR Drone 2.0 to stream an encrypted video feed to a number of Android-based tablets. The tablets are able to decrypt the video feed only if they are authorized to access it, based on the drone's location or a manual override by the drone's operator. As the individual tablets' access permissions change (either due to the drone's location changes or manual over-ride), the system enforces these permissions cryptographically through real-time, in-band rekeying of the authorized devices. This rekeying occurs virtually instantaneously, without any loss in the quality of service for the authorized participants. The proof-of-concept system achieves two goals. First, it serves as a compelling demonstration of the Lincoln Open Cryptographic Key Management Architecture (LOCKMA) library. It illustrates how usable and seamless cryptographic protections can be straightforwardly utilized in an application, such as our geo-based drone prototype, using LOCKMA's intuitive interface for cryptography, key management, and access controls. Second, the proof-of-concept system lays the foundation for developing the geo-based access control concept further for drones and, possibly, other types of mobile data distribution systems. The software produced in this thesis project can also be used as a base for such future explorations. This thesis document summarizes the project, the system architecture and its implementation, and lessons learned.

Department dc:contributor.department

Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science.

Grantor dc:publisher

Massachusetts Institute of Technology

Year dc:date.issued

2014

Author dc:creator

• Arce, Nathaniel A

Advisor dc:contributor.advisor

• Roger I. Khazan and Daniil Utin.

• Electrical Engineering and Computer Science.

Statement dc:rights

• M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission.

Licence dc:rights.uri

• http://dspace.mit.edu/handle/1721.1/7582

Language dc:language.iso

eng

Handle dc:identifier.uri

http://hdl.handle.net/1721.1/100328

OAI identifier oai:identifier

oai:dspace.mit.edu:1721.1/100328