I-Corps: Commercialization Study of Context-aware Security and Privacy Techniques for RFID Applications

该项目的重点是RFID系统的上下文感知安全和隐私，并产生了一些RFID系统的安全和隐私技术。这些技术包括：1）上下文感知的选择性解锁技术，以防止恶意阅读存储在RFID标签上的敏感信息; 2）上下文感知的交易验证，以确保基于NFC的移动的支付系统中的身份验证安全; 3）上下文感知的恶意软件保护，以防止恶意使用NFC芯片和智能手机上的其他宝贵资源。研究团队已经在无线识别和传感平台以及智能手机上构建了原型。实验结果证明了这些技术的可行性，并为进一步的发展做好了准备。 这个I-Corps项目的目标是进一步发展研究小组开发的情境软件安全和隐私技术。该项目的影响来自于利用各种上下文信息的安全机制，为RFID系统提供增强的安全性和隐私性。这项技术是用户友好的，涉及最小的用户中断。它适用于广泛的RFID应用，包括电子身份证（电子护照，电子驾驶执照），支付卡（信用卡），电子收费系统，门禁卡和医疗植入物。对于公司和个人来说，它有可能大大减少由于电子身份证（护照，驾驶执照）或支付卡被盗用而导致的身份盗窃的财务损失。此外，该技术的开发考虑到了易用性，因此对最终用户更具吸引力。

This project focuses on context-aware security and privacy for RFID systems and has yielded a number of security and privacy techniques for RFID systems. These techniques include: 1) Context-aware selective unlocking techniques to prevent malicious reading of sensitive information stored on RFID tags; 2) Context-aware transaction verification to secure authentication in NFC-based mobile payment system3) Context-aware malware protection to prevent malicious use of NFC chips and other valuable resources on smartphones. The research team has built prototypes on a wireless identification and sensing platform as well as a smartphone. Experiment results demonstrate the feasibility of these techniques which are ready for further development. The objective of this I-Corps project is to further develop contextaware security and privacy techniques developed by the research team. The impact of this project is derived from security mechanisms utilizing various contextual information to provide enhanced security and privacy for RFID systems. This technology is user-friendly, involving minimal user interruption. It applies to a wide range of RFID applications including e-identity cards (e-passport, e-driver license), payment cards (credit card), electronic toll collection systems, access cards, and medical implants. It has the potential, for both corporations and individuals, to drastically reduce financial loss from identity theft due to a compromised e-identity card (passport, driver license) or payment card. In addition the technology has been developed with ease of use in mind, and thus will be more attractive to end users.