Collaborative Research: Preserving User Privacy in Server-driven Dynamic Spectrum Access System

动态频谱接入 (DSA) 技术使称为次要用户 (SU) 的无线设备能够使用分配给许可的现有用户 (IU) 的频谱，只要它们不干扰 IU 的操作即可。 它已被广泛认为是缓解无线通信频谱稀缺问题的关键解决方案。作为 DSA 的一种关键形式，监管机构提议在频谱接入系统 (SAS) 数据库的保护下释放更多联邦频谱以与商业无线用户共享，以管理 IU 和 SU 之间的频谱共享。然而，这种共享的成功取决于如何管理隐私问题。在目前的SAS方案中，联邦IU和商业SU的运行数据都需要与SAS数据库共享，由SAS数据库决定是否允许共享。然而，联邦IU的运营数据通常是机密信息，SU的运营数据也可能是商业秘密。 由于 SAS 不一定由受信任的第三方运营，并且可能会被攻击者破坏，因此当前的这些方案威胁到 IU 和 SU 的隐私。为了解决这个隐私问题，本项目开发了一种隐私保护SAS（P2-SAS），确保SAS系统在不了解IU和SU的运行数据的情况下仍然可以准确地决定是否允许IU和SU之间的频谱共享。该项目是第一个能够在SAS中成功实现隐私保护频谱分配的项目。 它解决了监管机构对 DSA 隐私问题的担忧，从而极大地帮助了整个国家宽带网络的发展。该项目提供了如何将隐私保护机制集成到 DSA 之外的许多其他通信系统中的蓝图。该项目使用安全同态计算实现其隐私保护频谱分配。 在P2-SAS中，IU和SU仅与SAS服务器共享其操作数据的密文，然后SAS服务器直接对这些密文进行安全同态计算，因此IU/SU的操作数据不会暴露给任何窥探方，包括SAS本身。 该项目旨在将复杂的频谱分配计算和认证程序转换为高效 Paillier 密码系统提供的有限同态计算类型。利用频谱分配计算的独特特性，将探索各种细化技术，以显着降低P2-SAS的计算和通信开销，并防止对系统的潜在攻击。

Dynamic spectrum access (DSA) technique enables wireless devices, called secondary users (SUs), to use spectrum that are allocated to licensed incumbent users (IUs) as long as they do not interfere with IUs' operation. It has been widely accepted as a crucial solution to mitigate the spectrum scarcity problem for wireless communications. As a key form of DSA, regulators have proposed to release more Federal spectrum for sharing with commercial wireless users, under the umbrella of a spectrum access system (SAS) database to govern the spectrum sharing between IUs and SUs. However, the success of this sharing hinges upon how privacy issues are managed. In current SAS schemes, the operation data of both federal IUs and commercial SUs need to be shared with the SAS database for it to decide if sharing is permitted. Yet, operation data of federal IUs are often classified information and SU operation data may also be commercial secret. Since SAS is not necessarily operated by a trusted third party and can potentially be breached by attackers, these current schemes threaten the privacy of both IUs and SUs. To address this privacy issue, this project develops a privacy-preserving SAS (P2-SAS), which ensures that the SAS system can still accurately decide whether spectrum sharing among IUs and SUs are permitted while it learns nothing about the operation data of IUs and SUs. This project is the first to be able to successfully realize privacy-preserving spectrum allocation in SAS. It addresses regulators' concerns with DSA's privacy issue and hence greatly help the development of the entire nation's broadband networks. The project provides a blueprint on how privacy-preserving mechanisms can be integrated in many other communication systems beyond DSA. The project realizes its privacy preserving spectrum allocation using secure homomorphic computation. In P2-SAS, IUs and SUs share only ciphertexts of their operation data with the SAS Server, which then performs secure homomorphic computation directly over these ciphertexts, so that none of the IU/SU operation data would be exposed to any snooping party, including the SAS itself. The project aims to convert complex spectrum allocation computation and certification procedures into the limited homomorphic computation types provided by efficient Paillier cryptosystems. Leveraging the unique characteristics of spectrum allocation computation, various refining techniques will be explored to significantly reduce the computation and communication overhead of P2-SAS and prevent potential attacks on the system.