SaTC: CORE: Small: Toward Usable and Ubiquitous Trust Initialization and Secure Networking in Wireless Ad Hoc Networks

SaTC：核心：小型：在无线自组织网络中实现可用且无处不在的信任初始化和安全网络

• 批准号: 1717312
• 负责人: Shucheng Yu
• 金额: $ 50万
• 依托单位: University of Arkansas Little Rock
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-08-01 至 2017-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1717312&HistoricalAwards=false
• 关键词: SaTC; CORE; Small; Toward; Usable

With billions of smart wireless devices being ubiquitously deployed, safeguarding their networking from cyber attacks has become a challenge. Not only can the devices deployed in a network can be heterogeneous in terms of available computing resources and interfaces, but ordinary users typically have limited technical expertise to perform complicated security configurations. What's more, trust among the devices is often lacking because of the different vendors or distribution channels they have traversed. This project addresses these challenges and proposes a suite of lightweight protocols for initial trust establishment and secure networking of wireless devices. Intrinsic properties of wireless channels, which are available to most wireless devices, are utilized to minimize the dependence on user engagement, prior secrets or any hardware not commonly seen in most smart devices. Three research thrusts are proposed to achieve the project's objectives, which take into consideration devices with limited cryptographic capabilities and those with no cryptography at all. The first task aims at minimizing user involvement in the trust initialization process without assuming any extra resources, which is achieved with an obfuscated in-band message authentication protocol. The second task puts forward a mobility-aided authenticated secret key extraction technique without any explicit user involvement. The third task explores key-free wireless security utilizing friendly jamming; a geometry-based computational model is proposed for optimizing the network deployment. The results of this project will lay the foundation for designing extremely lightweight and highly usable secure trust initialization and networking protocols that are compatible with most commercial off-the-shelf smart wireless devices.

随着数十亿智能无线设备的无处不在的部署，保护它们的网络免受网络攻击已成为一项挑战。部署在网络中的设备不仅在可用的计算资源和接口方面可能是不同的，而且普通用户通常只有有限的技术专业知识来执行复杂的安全配置。更重要的是，这些设备之间往往缺乏信任，因为它们经历过不同的供应商或分销渠道。该项目解决了这些挑战，并提出了一套轻量级协议，用于无线设备的初始信任建立和安全联网。大多数无线设备可用的无线信道的固有属性被用来最大限度地减少对用户参与、先前秘密或大多数智能设备中不常见的任何硬件的依赖。为了实现该项目的目标，提出了三项研究推动力，其中考虑了加密能力有限的设备和根本没有加密功能的设备。第一个任务旨在最大限度地减少用户在信任初始化过程中的参与，而不需要承担任何额外资源，这是通过混淆的带内消息认证协议实现的。第二个任务提出了一种移动性辅助的认证密钥提取技术，不需要任何明确的用户参与。第三个任务探讨了利用友好干扰的无密钥无线安全；提出了一种基于几何的计算模型来优化网络部署。该项目的成果将为设计与大多数商用现成智能无线设备兼容的超轻量级和高可用的安全信任初始化和联网协议奠定基础。