EAGER: USBRCCR: HealthSense: Assessing and Protecting Privacy in Wireless Wearable Sensor-Generated Medical Data

医用和身体佩戴传感器将在未来十年加强人类健康监测和对危重疾病的诊断。随着这类设备越来越受欢迎，将会出现针对隐私侵犯的新的、多样化的攻击类型。在所有这些情况下，确保用户的生理数据仅由授权实体访问并秘密地传输给远程医疗专家是至关重要的。该项目将首先通过分析通过空中传输的传感器数据流量来调查可穿戴设备导致的攻击载体，例如推断私人健康信息。为了应对这种威胁，该项目将设计一种安全的方法，建立密钥并在身体传感器和外部设备之间进行通信，其中信号通过人体组织发送，以消除窃听。该项目的目标将在巴西无线安全专家的合作下实现，这还将导致联合出版、学生和教师交流以及联合课程开发。作为该项目进行的研究的一部分，PI将调查如何使用跨层和联合硬件-软件指纹技术来跟踪给定用户的时间和空间，然后高概率地识别哪些类型的医疗传感应用是活跃的。这将是第一次对特定于健康的身体传感器流量进行流量分析，并为可穿戴传感器建立一套全面的参考签名，这是为互联网应用开发的经典技术迄今尚未解决的问题。拟议的任务还将演示第一种使用非辐射人体通道的旁通道技术，用于在穿戴在身体上的传感器和移动电话等信息中继设备之间建立安全密钥、通信和多因素身份验证。在这些方法的基础上是一种被称为电流耦合的技术，在这种技术中，微弱的电流被数据信号调制，然后通过人体组织的高导电路径传输。该共享秘密既可以是加密密钥，也可以是消除RF嗅探的随机化流量整形种子，从而减轻上述类型的隐私入侵。

Medical and body-worn sensors will enhance human health monitoring and diagnosis of critical ailments in the next decade. As the popularity of such devices increases, there will be an emergence of new and varied types of attacks targeting privacy intrusions. In all such cases, ensuring that user's physiological data is only accessed by authorized entities and confidentially transmitted to the remote medical experts is of critical importance. The project will first investigate the attack vectors resulting from wearable devices such as inference of private health information by analyzing the sensor data traffic transmitted over-the-air. To address such threats, the project will involve the design of a secure method of key establishment and communications between a body sensor and an external device, where signals are sent through the human tissue to eliminate eavesdropping. The project goals will be accomplished with collaboration from wireless security experts in Brazil, which will also lead to joint publications, student and faculty exchanges, and joint coursework development.As part of the research undertaken in this project, the PIs will investigate how cross-layer and joint hardware-software fingerprinting techniques can be used to track a given user over time and space, and then identify with high probability, which types of medical sensing applications are active. This will be the first traffic analysis of health-specific body sensor traffic and building a comprehensive set of reference signatures for wearable sensors, which has so far not been addressed by classical techniques developed for Internet applications. The proposed tasks will also demonstrate a first-of-its-kind side-channel technique, using a non-radiating body channel, for secure key establishment, communications, and multi-factor authentication between body-worn sensors and the information-relaying device, such as a mobile phone. Underlying these methods is a technique called galvanic coupling, where weak electrical currents are modulated with the data signals, and then transmitted via highly conductive pathways of the human tissue. This shared secret can be both an encryption key as well as a randomized traffic shaping seed that eliminates RF sniffing, thereby mitigating the above types of privacy intrusions.