A prototype system for geo-based, cryptographically-enforced access control for miniature drones' video feeds

Abstract

In this thesis, we design and implement a robust proof-of-concept system for demonstrating the concept of usable, geo-based access control and agile, dynamic key management. The system utilizes a Parrot AR Drone 2.0 to stream an encrypted video feed to a number of Android-based tablets. The tablets are able to decrypt the video feed only if they are authorized to access it, based on the drone's location or a manual override by the drone's operator. As the individual tablets' access permissions change (either due to the drone's location changes or manual over-ride), the system enforces these permissions cryptographically through real-time, in-band rekeying of the authorized devices. This rekeying occurs virtually instantaneously, without any loss in the quality of service for the authorized participants. The proof-of-concept system achieves two goals. First, it serves as a compelling demonstration of the Lincoln Open Cryptographic Key Management Architecture (LOCKMA) library. It illustrates how usable and seamless cryptographic protections can be straightforwardly utilized in an application, such as our geo-based drone prototype, using LOCKMA's intuitive interface for cryptography, key management, and access controls. Second, the proof-of-concept system lays the foundation for developing the geo-based access control concept further for drones and, possibly, other types of mobile data distribution systems. The software produced in this thesis project can also be used as a base for such future explorations. This thesis document summarizes the project, the system architecture and its implementation, and lessons learned.