Real-time Security Extensions for EPCglobal Networks

This book reviews the design of real-time security extensions for EPCglobal networks based on in-memory technology, presents authentication protocols for devices with low computational resources and outlines steps for implementing history-based access control.

The transformation towards EPCglobal networks requires technical equipment for capturing event data and IT systems to store and exchange them with supply chain participants. For the very first time, supply chain participants thus need to face the automatic exchange of event data with business partners. Data protection of sensitive business secrets is therefore the major aspect that needs to be clarified before companies will start to adopt EPCglobal networks.

This book contributes to this proposition as follows: it defines the design of transparent real-time security extensions for EPCglobal networks based on in-memory technology. For that, it defines authentication protocols for devices with low computational resources, such as passive RFID tags, and evaluates their applicability. Furthermore, it outlines all steps for implementing history-based access control for EPCglobal software components, which enables a continuous control of access based on the real-time analysis of the complete query history and a fine-grained filtering of event data. The applicability of these innovative data protection mechanisms is underlined by their exemplary integration in the FOSSTRAK architecture.

Introduces into the design and implementation of the history-based access control Helps to understand security risks and countermeasures in EPCglobal networks Provides inspiration and guidance to develop real-time business applications with in-memory technology Includes supplementary material: sn.pub/extras

Autorentext
Matthieu-P. Schapranow received the BS and MS degrees in software engineering from the Hasso Plattner Institute, Potsdam, Germany in 2006 and 2008, respectively, and successfully defended his PhD thesis in September 2012. Since June 2012 he is principal investigator of in-memory technology for life sciences at the chair of Professor Plattner at the Hasso Plattner Institute. Currently, he is a visiting scientist at the Charité - Universitätsmedizin Berlin at the institute of pathology.

Inhalt
Introduction.- Related Work.- Security in EPCglobal Networks.- Device-level Extensions.- Business-level Extensions for Event Repositories.- Qualitative and Quantitative Discussion.- Evaluation.- Conclusion.- Appendices.