Collaborative Research: Anonymous Protocols

合作研究：匿名协议

• 批准号: 0087639
• 负责人: Thomas Shields
• 金额: $ 14万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2001
• 资助国家: 美国
• 起止时间: 2001-10-01 至 2002-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0087639&HistoricalAwards=false
• 关键词: Collaborative; Research; Anonymous; Protocols

The purpose of this work is to support the understanding and development of protocolsthat can provide personal privacy over the Internet. While there have been some protocolsproposed and implemented that hide the IP address of network communicators, there has beenno systematic study of such protocols, nor have methods of analyzing the anonymity and securityof those protocols been developed. A thorough understanding of anonymity is important not onlyfor the development, analysis, and use of anonymous protocols for personal privacy, but also forunderstanding how network attackers can hide their location and for developing methods to trackthose attackers. Our eventual goal is to develop new techniques and protocols for anonymity,including a \logic of anonymity" similar to those developed for authentication protocols thatcan be used to describe and analyze anonymous protocols.This proposal considers a number of contributions on this research area. Our first contri-bution will be to take a more general view of anonymous communication than previous workby considering protocols and techniques for hiding the identity of a responder from all otherparties, and for providing completely anonymous communication in which both the initiator andresponder are anonymous to each other and all other parties. The former technique is usefulfor anonymous web sites (rather than just anonymous web browsing); the later technique isuseful for true two-party privacy over the Internet. Our second class of contributions will be toconsider generalized protocol construction. This extends our past work, which de-coupled theforward and reverse paths of anonymous communication, giving rise to a large family of anony-mous protocols. We will continue investigation of those protocols, and examine what networksupport is available for anonymous communication and what support might best be provided inthe future. Our third contribution will be to provide a formalism for anonymous protocols suchthat beliefs regarding entity identities can be reasoned by stating assumptions and deriving log-ical conclusions from following steps of defined protocols. Fourth, we will consider the networkperformance of anonymous routing protocols in an in-depth fashion, including not only latencyand traffic, but also requirements of streaming media applications and traditional TCP-basedbulk-data transfer applications. Finally, we will consider heretofore ignored security concernsof existing protocols, initially considering path analysis attacks and attacks that cause someparticipants to be unfairly accused by third parties. The formalism provided by our proposedlogic of anonymity will be a foundational component of our security analysis work.Collaboration between these our two institutions will allow us to leverage the existingstrength in networking at the University of Massachusetts and the existing strength in secu-rity at Purdue.1

这项工作的目的是支持理解和开发可以通过互联网提供个人隐私的协议。虽然已经提出并实施了一些隐藏网络通信者的IP地址的协议，但还没有对这些协议进行系统的研究，也没有开发出分析这些协议的匿名性和安全性的方法。对匿名的透彻理解不仅对于开发、分析和使用保护个人隐私的匿名协议很重要，而且对于了解网络攻击者如何隐藏其位置以及开发跟踪这些攻击者的方法也很重要。我们的最终目标是开发新的匿名技术和协议，包括类似于为身份验证协议开发的“匿名逻辑”，可用于描述和分析匿名协议。本提案考虑了该研究领域的许多贡献。我们的第一个贡献将是通过考虑向所有人隐藏响应者身份的协议和技术，比以前的工作对匿名通信有更普遍的看法 其他方，并提供完全匿名的通信，其中发起者和响应者对彼此和所有其他方都是匿名的。前一种技术对于匿名网站很有用（而不仅仅是匿名网页浏览）；后一种技术对于互联网上真正的两方隐私很有用。我们的第二类贡献将是考虑通用协议构建。这扩展了我们过去的工作，将前向和前向解耦 逆转匿名通信的路径，从而产生了一大群匿名协议。我们将继续研究这些协议，并检查哪些网络支持可用于匿名通信以及将来最好提供哪些支持。我们的第三个贡献是为匿名协议提供一种形式主义，以便可以通过陈述假设并从定义的协议的后续步骤中得出逻辑结论来推理有关实体身份的信念。四、 我们将深入考虑匿名路由协议的网络性能，不仅包括延迟和流量，还包括流媒体应用程序和传统的基于TCP的批量数据传输应用程序的要求。最后，我们将考虑迄今为止被忽视的现有协议的安全问题，首先考虑路径分析攻击和导致某些参与者受到第三方不公平指控的攻击。我们提出的逻辑提供的形式主义 匿名性将成为我们安全分析工作的基本组成部分。我们两个机构之间的合作将使我们能够利用马萨诸塞大学现有的网络优势和普渡大学现有的安全优势。1