Earthmouse: Mobile Guardian
-
Upload
earthmouse -
Category
Technology
-
view
397 -
download
0
description
Transcript of Earthmouse: Mobile Guardian
Earthmouse: Mobile GuardianSecure, Open-Source Smartphone built on Google Android
please visit http://earthmouse.org
AnonymousEncryptedInvisibleObfuscatedUbiquitous
Open sourcemodernpowerfulflexible
AndroidPhone
EarthmousePhone
+ =
+ GuardianFirmwareUpdate
GuardianSD Card
WindowsMobilePhone
AndroidPhone =
TemporaryGuardian
Phone
PermanentGuardian
Phone
HTC, Kogan, Lenova, Huawei, Motorola, LG, Samsung, Asus
http://www.androidonhtc.com
Guardian is Viral
GuardianPhone
GuardianSD Card
Phones canbe converted
through SD Card“Person to Person”
contact
New Communitiesof Mice!
Google Android
G
A movement is already underway to create custom versions of Android for a wide variety of phones and purposes.... we just need to tap into that!
Why Android?
• Dominant open-source smartphone OS
• Easy to convert commercially available handsets
• Linux-based with modern development tools
• Rich connectivity, location, and sensor features
• Backed by Google’s resources and finances
Android Features
• Dalvik virtual machine optimized for mobile devices
• Integrated browser based on the open source WebKit engine
• SQLite for structured data storage
• Media support for common audio, video, and still image formats (MPEG4, H.264, MP3, AAC, AMR, JPG, PNG, GIF)
• GSM Telephony (hardware dependent)
• Bluetooth, EDGE, 3G, and WiFi (hardware dependent)
• Camera, GPS, compass, and accelerometer (hardware dependent)
The State of Mobile Crypto
G
Existing products show promise, but are out of date, not good enough or too expensive
Existing Solutions
• Providers: CryptoPhone, SecureGSM, NanoPhone Suite
• Analog GSM solutions almost entirely for Windows Mobile Smartphones
• Corporate focus, poor quality audio, out of date OS and very expensive
• Products are not for covert use - they advertise their existence putting user at risk
Popular Smartphones...
iPhones and Blackberries are inherently compromised,closed-source and compromised by mobile carriers
A password safe for Android that protects your passwords with AES encryption. All encrypted information is stored in a database on the phone. No information is kept online. The only way to backup currently is through the export feature.
http://code.google.com/p/android-passwordsafe/
Early Efforts on Android Need Work!
Designing a Guardian
G
a.e.i.o.u.’s of Guardian
anonymous
encrypted
invisible
obfuscated
ubiquitous
Able to be used without revealing the user
All communication and data is secured and protected
Doesn’t reveal itself to be anything out of the ordinary
Hides itself within the noise and traffic of the network
Widely available, easy to use, cheap and open-source
User Requirements
• Be hidden and invisible from the casual observer
• Provide secure communication without complexity
• Don’t incriminate the user or owner
• Offer “emergency” features that are quick to active
• Open-source and able to run on cheap, common hardware
• Internationalized & Localized
The Android Operating System
2) Wrap or replace Application Framework, while adding new libraries and core security services
1) Enhance existing & develop new secure applications
3) ensure kernel, runtime and virtual machine are “snoop” proof
4) Secure or remove drivers to secure the hardware layer
Android O.S. + Guardian Security Layer
Build on Existing Projects• The Tor Project
Tor is a software project that helps you defend against traffic analysis, a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security
• Psiphonpsiphon is a human rights software project developed by the Citizen Lab at the Munk Centre for International Studies that allows citizens in uncensored countries to provide unfettered access to the Net through their home computers to friends and family members who live behind firewalls of states that censor.
• ZfoneZfoneTM is a new secure VoIP phone software product which lets you make encrypted phone calls over the Internet. Zfone uses a new protocol called ZRTP, which has a better architecture than the other approaches to secure VoIP.
Guardian Application Suite
•Anonymous Browser
•Media+Location Reporting Tool
•Encrypted Email
•Secure Voice Communications
•Encrypted Data Storage
•Remote Poison Pill
•“911” Alert Mechanism
•Secure Data Auto-Sync
open-source, geotaggingmedia capture report clienthttp://openideals.com/greporter
gReporter
gReporter
Records Location
Records Audio, Photo, Video
Transmits to Secure Server
Walkie Talkie / Push to Talk
Routing via Stenography
Route encrypted data exchange through common services (Gmail, YouTube, Amazon, etc), as to not stand out
authoritarian state
“Safe”Service
Gmail
YouTube
Amazon
Skype
Earthmouse: Mobile GuardianSecure, Open-Source Smartphone built on Google Android
please visit http://earthmouse.org