CSR: Small: Collaborative Research: Sensorprint: Hardware-Enforced Information Authentication for Mobile Systems

CSR：小型：协作研究：Sensorprint：移动系统的硬件强制信息认证

• 批准号: 1526494
• 负责人: Bogdan Carbunar
• 金额: $ 24.97万
• 依托单位: Florida International University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1526494&HistoricalAwards=false
• 关键词: CSR; Small; Collaborative; Research; Sensorprint

Today's societies are intrinsically and inextricably fused through a vast set of technology-driven networks, mostly mobile-based. Individuals equipped with feature-rich mobile devices effectively become the real-time eyes of the rest of the world, providing invaluable insights into remote, hard to access sites and events. However, in critical socially charged settings it is difficult to ascertain and assert an acceptable level of trust, especially as current technologies allow easy forging, manipulation and fabrication of data. The goal of this project is to design and build technology that will endow mobile data with increased authenticity and integrity assurances. Of primary importance is the data "liveness" assurance, or proof that the data has been captured live on the actual mobile device, and has not been fabricated. This project will identify and exploit the insight that mobile data and the device sensor streams simultaneously captured, necessarily bear certain relations. This research plays a fundamental role in establishing the credibility of mobile and social media, acting as the required witness to the authenticity of reported data. Applications with important social impact include citizen journalism, smart city management and prototype verification.The project will investigate, develop and evaluate a framework for secure and efficient sensor-based mobile data verification mechanisms. In a first thrust, the team will leverage TrustZone to build a trusted mobile device platform, to bootstrap trust into sensor readings captured on the device, and provide secure storage and a secure execution environment for sensitive functions. In a second thrust, the team will devise solutions to securely and efficiently capture, authenticate, communicate, archive, search and access mobile device sensor snapshots ("sensorprints"). Finally, the team will develop mechanisms to verify the consistency between mobile data and simultaneously captured sensor streams. In addition, the developed solutions will be evaluated on newly introduced sensor-centric data plagiarism attacks and mobility based data categories.

今天的社会通过大量技术驱动的网络（主要是基于移动的网络）内在地、不可分割地融合在一起。配备了功能丰富的移动的设备的个人有效地成为世界其他地方的实时眼睛，提供对远程，难以访问的网站和事件的宝贵见解。然而，在关键的社会环境中，很难确定和维护可接受的信任水平，特别是因为目前的技术允许容易伪造，操纵和捏造数据。该项目的目标是设计和构建技术，使移动的数据具有更高的真实性和完整性保证。 最重要的是数据“活性”保证，或者证明数据是在实际移动终端上实时捕获的，并且不是伪造的。该项目将确定和利用的见解，移动的数据和设备传感器流同时捕获，必然承担一定的关系。 这项研究在建立移动的和社交媒体的可信度方面发挥着重要作用，是所报告数据真实性的必要见证人。 具有重要社会影响力的应用包括公民新闻、智慧城市管理和原型验证。该项目将调查、开发和评估安全高效的基于传感器的移动的数据验证机制框架。首先，该团队将利用TrustZone构建一个可信的移动终端平台，将信任引导到设备上捕获的传感器读数中，并为敏感功能提供安全存储和安全执行环境。在第二个目标中，该团队将设计解决方案，以安全有效地捕获、认证、通信、存档、搜索和访问移动终端传感器快照（“传感器指纹”）。最后，该团队将开发机制来验证移动的数据和同时捕获的传感器流之间的一致性。此外，开发的解决方案将在新引入的以传感器为中心的数据剽窃攻击和基于移动性的数据类别上进行评估。