Secure Session Migration Using Key-Insulated Public-Key Cryptosystems

The rapid advances in networks and mobile device technologies bring the needs to retain access to services across different devices and networks. A user may use any kind of public and/or private devices to access her subscribed service through any network. In this service mobility scenario, careful consideration has to be given to security since we cannot trust public and/or private devices. It is possible for the devices to eavesdrop, masquerade, or modify the data. From this point of view, we show an approach to realize secure session migration between devices by introducing key-insulated public-key cryptosystems. We show that key-insulated cryptosystems are tolerant to session key exposures.