EAGER: Collaborative Research: Towards Context-Aware Security and Privacy for RFID Systems

尽管RFID系统的部署越来越普遍，但它仍然受到各种安全和隐私威胁的困扰。这些威胁中的大量出现是因为标签S对任何读者请求的混杂响应。这使得敏感标签信息容易受到未经授权的读取。它还引发了不同形式的中继攻击，通过在合法标签和读取器之间传递信息，串通对可以成功地模拟合法标签而不实际拥有它。本研究通过利用下一代(无源)RFID标签上新配备的感知功能来探索新颖的上下文感知安全和隐私机制。其目标是在不破坏RFID系统提供的可用性和效率的情况下，提供针对未经授权的读取和中继攻击的改进保护。该项目还包括对拟议机制在经济和功率限制方面的可行性研究，以及对可能的(新的)以传感器为中心的攻击进行系统分析。整个拟议活动的范围从系统设计和分析到实施和业绩衡量。更广泛地说，这项探索性工作旨在更好地理解利用从物理世界获得的参数来解决网络系统的安全和隐私问题的可行性。在教育活动方面，将开发新的安全课程，重点放在资源受限的设备和轻型加密工具上。

Despite their increasingly ubiquitous deployment, RFID systems are plagued with a wide variety of security and privacy threats. A large number of these threats arise due to the tag?s promiscuous response to any reader requests. This renders sensitive tag information easily subject to unauthorized reading. It also incites different forms of relay attacks whereby a colluding pair, by relaying information between a legitimate tag and reader, can successfully impersonate the legitimate tag without actually possessing it.This research explores novel context-aware security and privacy mechanisms by leveraging the newly-equipped sensing capabilities on the next generation (passive) RFID tags. The goal is to provide improved protection against unauthorized reading and relay attacks without undermining the usability and efficiency offered by the RFID systems. The project also includes a feasibility study of the proposed mechanisms in terms of both economical and power constraints, and a systematic analysis of possible (new) sensor-centric attacks. The overall proposed activities range from system design and analysis to implementation and performance measurements. More broadly, this exploratory work intends to arrive at a better understanding of the feasibility of utilizing parameters derived from the physical world to solve security and privacy issues of the cyber systems. In terms of educational activities, new security courses focusing on resource-constrained devices and lightweight cryptographic tools will be developed.