CT-T Collaborative Research: Security for Smart Tags

Adam Stubblefield约翰霍普金斯大学0627476小组：P060970 CT-T合作研究：智能标签的安全性摘要智能标签是一种廉价的无线设备，可以识别和验证物体和人-简而言之，必须安全地标记事物的设备。智能标签包括射频识别（RFID）标签、非接触式智能卡、以及低资源传感器--这类计算设备有望成为世界上数量最多的设备。智能标签的一个统一特征是它们不执行自主计算，并且通常缺乏内部电源。游牧标签自动响应读取器询问，因此具有高度分散的网络连接。将网络扩展到新的物理维度，智能标签有望成为下一代互联网的“指尖”。然而，这种网络边缘的增长在安全和隐私方面提出了新的挑战，这些挑战没有被标准方法解决，也没有被现有的威胁模型所捕获。本项目的研究目标有三个方面。首先，开发新的密码结构和协议，考虑到智能标签操作中固有的有限资源和独特的操作环境。此外，正在开发通过利用非安全特性来综合现有标签安全性的新方法。其次，由于智能标签的能力和局限性与标签和阅读器的底层硬件密切相关，因此正在开发和制造智能标签芯片原型。这允许验证的理论结果和侧信道攻击和防御智能标签的调查。最后，系统级的设计问题将通过构建用于公共交通的智能标签的隐私保护协议进行研究。

Adam StubblefieldJohns Hopkins University0627476Panel: P060970CT-T Collaborative Research: Security for Smart TagsAbstractSmartTags are inexpensive wireless devices that identify and authenticateobjects and people - in short, devices that must label things securely.SmartTags include Radio-Frequency Identification (RFID) tags, contactlesssmartcards, and low-resource sensors - a class of computing devices thatpromises to be the most numerous in the world. A unifying characteristic ofSmartTags is that they do not perform autonomous computation and often lackinternal power sources. Nomadic tags respond automatically to readerinterrogation, and thus have highly sporadic network connectivity. Extendingthe network to new physical dimensions, SmartTags promise to serve as the"fingertips" of the next-generation Internet. Yet this growth at the edge ofthe network presents new challenges in security and privacy unresolved bystandard approaches and not captured by existing threat models. The researchgoals of this project are threefold. First, to develop new cryptographicconstructs and protocols that take into account both the constrained resourcesand the unique operating environments inherent in SmartTag operation.Additionally, new methods to synthesize security for existing tags byleveraging non-security features are being developed. Second, because SmartTagcapabilities and limitations are closely tied to the underlying hardware ofboth the tag and the reader, a prototype SmartTag chip is being developed andfabricated. This allows for validation of theoretical results and aninvestigation of side channel attacks and defenses for SmartTags. Finally,system level design issues will be investigated by building privacy-preservingprotocols for SmartTags used in public transportation.