SaTC: CORE: Small: Toward Usable and Ubiquitous Trust Initialization and Secure Networking in Wireless Ad Hoc Networks

随着数十亿智能无线设备无处不在的部署，保护其网络免受网络攻击已成为一项挑战。不仅网络中部署的设备在可用的计算资源和接口方面可能是异构的，而且普通用户执行复杂安全配置的技术专长通常也有限。更重要的是，由于不同的供应商或分销渠道，设备之间往往缺乏信任。该项目解决了这些挑战，并提出了一套用于无线设备初始信任建立和安全网络的轻量级协议。大多数无线设备都可以使用无线信道的固有属性来最大限度地减少对用户参与、先前秘密或大多数智能设备中不常见的任何硬件的依赖。为了实现该项目的目标，提出了三个研究重点，其中考虑了具有有限加密功能的设备和根本没有加密功能的设备。第一个任务的目标是在不占用任何额外资源的情况下，最大限度地减少用户对信任初始化过程的参与，这是通过混淆带内消息身份验证协议实现的。第二项任务提出了一种无需用户明确参与的移动辅助认证密钥提取技术。第三项任务探索利用友好干扰的无钥匙无线安全；提出了一种基于几何的网络部署优化计算模型。该项目的成果将为设计极轻量和高度可用的安全信任初始化和网络协议奠定基础，这些协议与大多数商用现成的智能无线设备兼容。

With billions of smart wireless devices being ubiquitously deployed, safeguarding their networking from cyber attacks has become a challenge. Not only can the devices deployed in a network can be heterogeneous in terms of available computing resources and interfaces, but ordinary users typically have limited technical expertise to perform complicated security configurations. What's more, trust among the devices is often lacking because of the different vendors or distribution channels they have traversed. This project addresses these challenges and proposes a suite of lightweight protocols for initial trust establishment and secure networking of wireless devices. Intrinsic properties of wireless channels, which are available to most wireless devices, are utilized to minimize the dependence on user engagement, prior secrets or any hardware not commonly seen in most smart devices. Three research thrusts are proposed to achieve the project's objectives, which take into consideration devices with limited cryptographic capabilities and those with no cryptography at all. The first task aims at minimizing user involvement in the trust initialization process without assuming any extra resources, which is achieved with an obfuscated in-band message authentication protocol. The second task puts forward a mobility-aided authenticated secret key extraction technique without any explicit user involvement. The third task explores key-free wireless security utilizing friendly jamming; a geometry-based computational model is proposed for optimizing the network deployment. The results of this project will lay the foundation for designing extremely lightweight and highly usable secure trust initialization and networking protocols that are compatible with most commercial off-the-shelf smart wireless devices.