GECKO: Securing Digital Assets Through(out) the Physical World (Extended Technical Report)

TL;DR

GECKO introduces a geographical PKI system that securely links digital assets with their physical locations, enabling verification and reducing fraud related to physical and digital asset mismatches.

Contribution

The paper presents GECKO, a novel geo-enabled cryptographic system that enhances trust between physical spaces and digital assets through efficient location-based verification.

Findings

Supports millions of assets with 11 ms query response time

Handles over 19,000 location queries per second on a single server

Enables bidirectional verification between physical locations and digital claims

Abstract

Although our lives are increasingly transitioning into the digital world, many digital assets still relate to objects or places in the physical world, e.g., websites of stores or restaurants, digital documents claiming property ownership, or digital identifiers encoded in QR codes for mobile payments in shops. Currently, users cannot securely associate digital assets with their related physical space, leading to problems such as fake brand stores, property fraud, and mobile payment scams. In many cases, the necessary information to protect digital assets exists, e.g., via contractual relationships and cadaster entries, but there is currently no uniform way of retrieving and verifying these documents. In this work, we propose the Geo-Enabled Cryptographic Key Oracle (GECKO), a geographical PKI that provides a global view of digital assets based on their geo-location and occupied space. GECKO allows for the bidirectional translation of trust between the physical and digital world. Users can verify which assets are supposed to exist at their location, as well as verify which physical space is claimed by a digital entity. GECKO supplements current PKI systems and can be used in addition to current systems when its properties are of value. We show the feasibility of efficiently storing millions of assets and serving cryptographic material based on precise location queries within 11 ms at a rate of more than 19000 queries per second on a single server.