CT-M: Implementable Privacy and Security for Resource-Constrained Devices

CT-M：资源受限设备的可实现隐私和安全

• 批准号: 0831426
• 负责人: David Evans
• 金额: $ 100万
• 依托单位: University of Virginia Main Campus
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2013-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0831426&HistoricalAwards=false
• 关键词: CT; Implementable; Privacy; Security; Resource

A variety of emerging microelectronics applications target portable systems with tight constraints on the related metrics of power, form factor, and longevity. For many of these applications, there are severe constraints on the energy consumption for the electronics in the system. In particular, passive RFID tags rely on power received from readers so low power consumption is necessary to enable long-range reads. Nevertheless, these devices are already widely used for applications with serious security and privacy requirements such as key cards, public transportation tokens, and implantable medical devices. Current design approaches and standard cryptographic primitives fail to satisfy the needs for these systems. As a result, current implementations either resort to "security-by-obscurity" and ad hoc solutions that fail to provide adequate security and are frequently broken in practice.This project is developing a comprehensive approach to analyzing, designing, and implementing security and privacy for severely resource-constrained devices such as widely deployed RFID systems.The goal is to enable designers to create secure, cost-effective, large-scale RFID-deployments by combining primitives and protocols from a library with known properties and to implement those designs in a principled and efficient manner. The research follows an interdisciplinary approach by bringing together experts in low-energy integrated circuit design, design automation and embedded systems, system and network security, and cryptography. In addition to the research, the project includes a modular RFID security lab course and teaching outreach courses using cryptography and RFID systems to excite middle school students about pursuing science and engineering.

各种新兴的微电子应用的目标是便携式系统，在功率、外形因素和寿命等相关指标上有严格的限制。对于这些应用中的许多应用，系统中电子器件的能耗有严格的限制。特别是，无源RFID标签依赖于从读取器接收的功率，因此需要低功耗才能实现远程读取。尽管如此，这些设备已经广泛用于具有严格安全和隐私要求的应用，如钥匙卡、公共交通令牌和植入式医疗设备。目前的设计方法和标准密码原语无法满足这些系统的需求。因此，当前的实现要么诉诸于“模糊安全”，要么诉诸于无法提供足够安全性的特殊解决方案，并且在实践中经常被破坏。该项目正在开发一种全面的方法来分析、设计和实现严重资源受限设备（如广泛部署的RFID系统）的安全性和隐私性。其目标是使设计人员能够通过结合库中具有已知属性的原语和协议来创建安全、经济、大规模的rfid部署，并以有原则和有效的方式实现这些设计。该研究采用跨学科方法，汇集了低能耗集成电路设计、设计自动化和嵌入式系统、系统和网络安全以及密码学方面的专家。除了研究之外，该项目还包括一个模块化的RFID安全实验室课程和使用密码学和RFID系统的教学外展课程，以激发中学生对科学和工程的兴趣。