CT-T Collaborative Research: Security for Smart Tags

麻省理工学院Kevin Fug，Amherst0627529小组：P060970CT-T协作研究：智能标签的安全性摘要智能标签是廉价的无线设备，用于识别和验证对象和人员-简而言之，必须安全地标记物品的设备。智能标签包括射频识别(RFID)标签、非接触式智能卡和低资源传感器-这是一类有望成为世界上数量最多的计算设备。智能标签的一个统一特点是它们不执行自主计算，而且往往缺乏内部电源。游牧标签自动响应读取器询问，因此具有高度零星的网络连接。智能标签将网络扩展到新的物理维度，承诺成为下一代互联网的“指尖”。然而，网络边缘的这种增长在安全和隐私方面提出了新的挑战，标准方法无法解决，现有威胁模型也无法捕捉到。该项目的研究目标有三个方面。首先，开发新的密码结构和协议，同时考虑到SmartTag操作中有限的资源和独特的操作环境。此外，正在开发通过利用非安全特征来合成现有标签的安全性的新方法。其次，由于SmartTag的能力和限制与标签和读取器的底层硬件密切相关，因此正在开发和制造一款SmartTag芯片原型。这使得对理论结果的验证和对智能标签的侧通道攻击和防御的调查成为可能。最后，将通过为公共交通中使用的智能标签建立隐私保护协议来研究系统级设计问题。

Kevin FuUniversity of Massachusetts, Amherst0627529Panel: P060970CT-T Collaborative Research: Security for Smart TagsAbstractSmartTags are inexpensive wireless devices that identify and authenticateobjects and people - in short, devices that must label things securely.SmartTags include Radio-Frequency Identification (RFID) tags, contactlesssmartcards, and low-resource sensors - a class of computing devices thatpromises to be the most numerous in the world. A unifying characteristic ofSmartTags is that they do not perform autonomous computation and often lackinternal power sources. Nomadic tags respond automatically to readerinterrogation, and thus have highly sporadic network connectivity. Extendingthe network to new physical dimensions, SmartTags promise to serve as the"fingertips" of the next-generation Internet. Yet this growth at the edge ofthe network presents new challenges in security and privacy unresolved bystandard approaches and not captured by existing threat models. The researchgoals of this project are threefold. First, to develop new cryptographicconstructs and protocols that take into account both the constrained resourcesand the unique operating environments inherent in SmartTag operation.Additionally, new methods to synthesize security for existing tags byleveraging non-security features are being developed. Second, because SmartTagcapabilities and limitations are closely tied to the underlying hardware ofboth the tag and the reader, a prototype SmartTag chip is being developed andfabricated. This allows for validation of theoretical results and aninvestigation of side channel attacks and defenses for SmartTags. Finally,system level design issues will be investigated by building privacy-preservingprotocols for SmartTags used in public transportation.