I-Corps: Commercialization Study of Context-aware Security and Privacy Techniques for RFID Applications

该项目专注于RFID系统的上下文感知安全和隐私，并产生了许多用于RFID系统的安全和隐私技术。这些技术包括：1)上下文感知选择性解锁技术，以防止恶意读取存储在RFID标签上的敏感信息；2)上下文感知交易验证，以确保基于NFC的移动支付系统中的身份验证；3)上下文感知恶意软件防护，以防止恶意使用智能手机上的NFC芯片和其他宝贵资源。研究团队已经在无线识别和传感平台以及智能手机上建立了原型。实验结果证明了这些技术的可行性，为进一步发展做好了准备。这个i-Corps项目的目标是进一步开发由研究团队开发的上下文软件安全和隐私技术。该项目的影响源于利用各种上下文信息为RFID系统提供增强的安全性和私密性的安全机制。这项技术是用户友好的，涉及的用户中断最少。它适用于广泛的RFID应用，包括电子身份证(电子护照、电子驾驶执照)、支付卡(信用卡)、电子收费系统、门禁卡和医疗植入物。对于公司和个人来说，它都有可能极大地减少因电子身份证(护照、驾驶执照)或支付卡被盗而导致的身份盗窃造成的经济损失。此外，这项技术的开发考虑到了易用性，因此对最终用户更具吸引力。

This project focuses on context-aware security and privacy for RFID systems and has yielded a number of security and privacy techniques for RFID systems. These techniques include: 1) Context-aware selective unlocking techniques to prevent malicious reading of sensitive information stored on RFID tags; 2) Context-aware transaction verification to secure authentication in NFC-based mobile payment system3) Context-aware malware protection to prevent malicious use of NFC chips and other valuable resources on smartphones. The research team has built prototypes on a wireless identification and sensing platform as well as a smartphone. Experiment results demonstrate the feasibility of these techniques which are ready for further development. The objective of this I-Corps project is to further develop contextaware security and privacy techniques developed by the research team. The impact of this project is derived from security mechanisms utilizing various contextual information to provide enhanced security and privacy for RFID systems. This technology is user-friendly, involving minimal user interruption. It applies to a wide range of RFID applications including e-identity cards (e-passport, e-driver license), payment cards (credit card), electronic toll collection systems, access cards, and medical implants. It has the potential, for both corporations and individuals, to drastically reduce financial loss from identity theft due to a compromised e-identity card (passport, driver license) or payment card. In addition the technology has been developed with ease of use in mind, and thus will be more attractive to end users.