CT-M: Implementable Privacy and Security for Resource-Constrained Devices

各种新兴的微电子应用以便携式系统为目标，这些便携式系统对功率、形状因子和寿命的相关度量具有严格的约束。对于这些应用中的许多应用，系统中的电子设备的能量消耗受到严格的限制。特别是，无源RFID标签依赖于从读取器接收的功率，因此需要低功耗才能实现远程读取。尽管如此，这些设备已经广泛用于具有严格安全和隐私要求的应用，例如钥匙卡，公共交通令牌和植入式医疗设备。目前的设计方法和标准的密码原语不能满足这些系统的需求。因此，目前的实现要么诉诸于“通过模糊的安全性”和ad hoc解决方案，无法提供足够的安全性，并在实践中经常被打破。本项目正在开发一种综合方法，用于分析，设计和实现严重资源受限的设备（如广泛部署的RFID系统）的安全性和隐私性。目标是使设计人员能够创建安全，成本效益，通过将来自具有已知属性的库的原语和协议相结合来实现大规模RFID部署，并以有原则和有效的方式实现这些设计。该研究遵循跨学科的方法，汇集了低能耗集成电路设计，设计自动化和嵌入式系统，系统和网络安全以及密码学方面的专家。 除了研究，该项目还包括一个模块化的RFID安全实验室课程和教学推广课程，使用密码学和RFID系统激发中学生追求科学和工程。

A variety of emerging microelectronics applications target portable systems with tight constraints on the related metrics of power, form factor, and longevity. For many of these applications, there are severe constraints on the energy consumption for the electronics in the system. In particular, passive RFID tags rely on power received from readers so low power consumption is necessary to enable long-range reads. Nevertheless, these devices are already widely used for applications with serious security and privacy requirements such as key cards, public transportation tokens, and implantable medical devices. Current design approaches and standard cryptographic primitives fail to satisfy the needs for these systems. As a result, current implementations either resort to "security-by-obscurity" and ad hoc solutions that fail to provide adequate security and are frequently broken in practice.This project is developing a comprehensive approach to analyzing, designing, and implementing security and privacy for severely resource-constrained devices such as widely deployed RFID systems.The goal is to enable designers to create secure, cost-effective, large-scale RFID-deployments by combining primitives and protocols from a library with known properties and to implement those designs in a principled and efficient manner. The research follows an interdisciplinary approach by bringing together experts in low-energy integrated circuit design, design automation and embedded systems, system and network security, and cryptography. In addition to the research, the project includes a modular RFID security lab course and teaching outreach courses using cryptography and RFID systems to excite middle school students about pursuing science and engineering.