CAREER: Protecting User Data on Lost, Stolen and Damaged Mobile Phones

职业：保护丢失、被盗和损坏手机上的用户数据

• 批准号: 0952959
• 负责人: Patrick Traynor
• 金额: $ 40万
• 依托单位: Georgia Tech Research Corporation
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-09-01 至 2015-04-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0952959&HistoricalAwards=false
• 关键词: CAREER; Protecting; User; Data; Lost

As mobile phones become capable of performing increasingly complex and sensitive tasks, the loss, theft or destruction of such devices represents one of the most significant classes of security problems. This research improves the security of data stored on and generated by these devices by breaking the mandatory binding between mobile phones and hardware. In particular, this work limits the damage associated with this class of vulnerabilities not to the value of the data they transport but to the cost of the device itself. In this system, mobile phone users can seamlessly migrate software images of their phone to any device at their disposal, while data present on previously used devices is automatically encrypted or securely deleted. Phone images themselves are efficiently pushed into and pulled from the cloud, which also supports patching and the upgrade of phone images to occur both over the air and within the cloud itself, increasing the speed with which software vulnerabilities can be mitigated. In so doing, this approach allows network providers and users to adopt highly dynamic responses to security incidents.

随着移动的电话变得能够执行越来越复杂和敏感的任务，这种设备的丢失、被盗或毁坏代表了最重要的一类安全问题。这项研究通过打破移动的手机和硬件之间的强制绑定，提高了这些设备上存储和生成的数据的安全性。特别是，这项工作将与此类漏洞相关的损害限制在设备本身的成本上，而不是限制在它们传输的数据的价值上。在该系统中，移动的电话用户可以将其电话的软件映像无缝地迁移到他们所处置的任何设备，而存在于先前使用的设备上的数据被自动加密或安全地删除。电话映像本身可以有效地推入云中和从云中提取，这也支持通过空中和云本身进行电话映像的修补和升级，从而提高了减轻软件漏洞的速度。这样，这种方法允许网络提供商和用户对安全事件采取高度动态的响应。