EAGER: Collaborative Research: Towards Context-Aware Security and Privacy for RFID Systems

尽管RFID系统的部署越来越普遍，但它仍然受到各种安全和隐私威胁的困扰。大量的这些威胁出现由于标签？对任何读者请求的混杂响应。这使得敏感的标签信息容易受到未经授权的阅读。它还煽动不同形式的中继攻击，从而串通对，通过中继合法标签和阅读器之间的信息，可以成功地冒充合法的标签，而实际上并不拥有它。本研究探讨了新的上下文感知的安全和隐私机制，利用新装备的传感能力的下一代（无源）RFID标签。目标是提供针对未经授权的阅读和中继攻击的改进的保护，而不破坏RFID系统提供的可用性和效率。该项目还包括在经济和功率约束方面对拟议机制的可行性研究，以及对可能的（新的）以传感器为中心的攻击的系统分析。拟议的总体活动包括从系统设计和分析到执行和业绩衡量。更广泛地说，这项探索性工作旨在更好地理解利用物理世界的参数来解决网络系统的安全和隐私问题的可行性。在教育活动方面，将开发新的安全课程，重点是资源有限的设备和轻量级加密工具。

Despite their increasingly ubiquitous deployment, RFID systems are plagued with a wide variety of security and privacy threats. A large number of these threats arise due to the tag?s promiscuous response to any reader requests. This renders sensitive tag information easily subject to unauthorized reading. It also incites different forms of relay attacks whereby a colluding pair, by relaying information between a legitimate tag and reader, can successfully impersonate the legitimate tag without actually possessing it.This research explores novel context-aware security and privacy mechanisms by leveraging the newly-equipped sensing capabilities on the next generation (passive) RFID tags. The goal is to provide improved protection against unauthorized reading and relay attacks without undermining the usability and efficiency offered by the RFID systems. The project also includes a feasibility study of the proposed mechanisms in terms of both economical and power constraints, and a systematic analysis of possible (new) sensor-centric attacks. The overall proposed activities range from system design and analysis to implementation and performance measurements. More broadly, this exploratory work intends to arrive at a better understanding of the feasibility of utilizing parameters derived from the physical world to solve security and privacy issues of the cyber systems. In terms of educational activities, new security courses focusing on resource-constrained devices and lightweight cryptographic tools will be developed.