EAGER: USBRCCR: HealthSense: Assessing and Protecting Privacy in Wireless Wearable Sensor-Generated Medical Data

未来十年，医疗和穿戴式传感器将加强对人类健康的监测和对重大疾病的诊断。随着这类设备的普及，将会出现各种针对隐私入侵的新型攻击。在所有这些情况下，确保只有经授权的实体才能访问用户的生理数据，并保密地传送给远程医疗专家，这一点至关重要。该项目将首先通过分析无线传输的传感器数据流量，调查可穿戴设备引发的私人健康信息推断等攻击向量。为了解决这些威胁，该项目将涉及设计一种安全的密钥建立方法，并在人体传感器和外部设备之间进行通信，其中信号通过人体组织发送以消除窃听。该项目的目标将在巴西无线安全专家的合作下实现，这也将导致联合出版物，学生和教师交流以及联合课程开发。作为本项目研究的一部分，pi将研究如何使用跨层和联合硬件软件指纹技术来跟踪给定用户的时间和空间，然后高概率地识别哪些类型的医学传感应用是活跃的。这将是首次对健康特定身体传感器流量进行流量分析，并为可穿戴传感器建立一套全面的参考签名，这是迄今为止为互联网应用开发的经典技术尚未解决的问题。提议的任务还将展示一种首创的侧信道技术，使用非辐射身体信道，用于安全密钥建立、通信和身体穿戴传感器与信息中继设备（如移动电话）之间的多因素认证。这些方法的基础是一种叫做电耦合的技术，在这种技术中，微弱的电流被数据信号调制，然后通过人体组织的高导电性路径传输。这个共享秘密既可以是加密密钥，也可以是消除射频嗅探的随机流量整形种子，从而减轻上述类型的隐私入侵。

Medical and body-worn sensors will enhance human health monitoring and diagnosis of critical ailments in the next decade. As the popularity of such devices increases, there will be an emergence of new and varied types of attacks targeting privacy intrusions. In all such cases, ensuring that user's physiological data is only accessed by authorized entities and confidentially transmitted to the remote medical experts is of critical importance. The project will first investigate the attack vectors resulting from wearable devices such as inference of private health information by analyzing the sensor data traffic transmitted over-the-air. To address such threats, the project will involve the design of a secure method of key establishment and communications between a body sensor and an external device, where signals are sent through the human tissue to eliminate eavesdropping. The project goals will be accomplished with collaboration from wireless security experts in Brazil, which will also lead to joint publications, student and faculty exchanges, and joint coursework development.As part of the research undertaken in this project, the PIs will investigate how cross-layer and joint hardware-software fingerprinting techniques can be used to track a given user over time and space, and then identify with high probability, which types of medical sensing applications are active. This will be the first traffic analysis of health-specific body sensor traffic and building a comprehensive set of reference signatures for wearable sensors, which has so far not been addressed by classical techniques developed for Internet applications. The proposed tasks will also demonstrate a first-of-its-kind side-channel technique, using a non-radiating body channel, for secure key establishment, communications, and multi-factor authentication between body-worn sensors and the information-relaying device, such as a mobile phone. Underlying these methods is a technique called galvanic coupling, where weak electrical currents are modulated with the data signals, and then transmitted via highly conductive pathways of the human tissue. This shared secret can be both an encryption key as well as a randomized traffic shaping seed that eliminates RF sniffing, thereby mitigating the above types of privacy intrusions.