Re: crypto delay (Notes from Non-meeting)

On Wed, 3 Apr 2002, Richard Shockey wrote:

> >Perhaps this is a mistake? I think that emergency calling is complex,
> >and I'm far more concerned about my non-emergency privacy.
>
> Until its you that has the heart attack.

If, due to weakened security/crypto/authentication, someone is able to
play games with the E911 system, the emergency services may be too busy
chasing their tail to attend to your heart attack. The BAT/911-A virus
attempted to do this in April 2000 on PCs, and the more complex and
capable mobile devices become, the greater risk that they could also
be infected with a virus. There is also the possibility of a deliberate
act of sabotage. (I'm not sure how much protection you would get against a
virus actually in the mobile device, but you may be able to protect
against spoofing from outside)

Realistically, the only thing that we can deliver in a few seconds is
information such as first aid advice, and that doesn't need location
information. However, I concede the point about call routing.

Moores Law will surely bring us mobile devices with enough power to
do whatever crypto is necessary, maybe even by the time the protocol is
ready. There is a limit to offering enhanced service on obsolete devices
- if the device is too old to have location capability, then you can't di
it at all. (I believe that as device speed rises, so does the
required key length for crypto to be considered secure, but that the
time to crack a key of length N rises exponentially in N while the time to
generate it rises with a power of N, so that to keep crack time out of
reach it necessary only to increase N with log(speed) - so Moore's law
wins (with current theory) and reliable crypto gets quicker and quicker)

The only way we would be able to deliver emergency services fast enough to
make a real difference - prefereably within 60 seconds - would be
to locate someone qualified who is already nearby, and call them. This
might actually be doable with the technology. It happens somewhat with the
Coast Guard - someone calls on VHF 16 to say they are on fire, or sinking,
the Coast Guard starts a dialogue with them to find out where they are
etc. then rebroadcasts a call for assistance to anyone in the area, given
that they themsleves would take at least 20 minutes to arrive.

All adults whould be trained for simple emergencies - CPR, first aid,
fire fighting, etc. - so that bystanders or family members are your best
bet until more qualified help can arrive.

-- 
Andrew Daviel
Vancouver Webpages
(aka security@triumf.ca)