SaTC: CORE: Small: Toward Usable and Ubiquitous Trust Initialization and Secure Networking in Wireless Ad Hoc Networks

随着数十亿智能无线设备的无处不在，保护其网络免受网络攻击已成为一项挑战。部署在网络中的设备不仅在可用计算资源和接口方面可以是异构的，而且普通用户通常具有有限的技术专长来执行复杂的安全配置。更重要的是，设备之间的信任往往是缺乏的，因为不同的供应商或分销渠道，他们已经走过。该项目解决了这些挑战，并提出了一套轻量级的协议初始信任建立和安全的无线设备联网。无线信道的固有属性（其对大多数无线设备可用）被用于最小化对用户参与、先前秘密或在大多数智能设备中不常见的任何硬件的依赖。提出了三个研究方向来实现该项目的目标，其中考虑到加密能力有限的设备和根本没有加密的设备。第一个任务旨在最大限度地减少用户参与的信任初始化过程中，而不承担任何额外的资源，这是实现了一个混淆带内消息认证协议。第二个任务提出了一种移动性辅助的认证密钥提取技术，没有任何显式的用户参与。第三个任务是探索利用友好干扰的无密钥无线安全，提出了一个基于几何的计算模型，用于优化网络部署。该项目的结果将为设计与大多数商用现成智能无线设备兼容的极其轻量级和高度可用的安全信任初始化和网络协议奠定基础。

With billions of smart wireless devices being ubiquitously deployed, safeguarding their networking from cyber attacks has become a challenge. Not only can the devices deployed in a network can be heterogeneous in terms of available computing resources and interfaces, but ordinary users typically have limited technical expertise to perform complicated security configurations. What's more, trust among the devices is often lacking because of the different vendors or distribution channels they have traversed. This project addresses these challenges and proposes a suite of lightweight protocols for initial trust establishment and secure networking of wireless devices. Intrinsic properties of wireless channels, which are available to most wireless devices, are utilized to minimize the dependence on user engagement, prior secrets or any hardware not commonly seen in most smart devices. Three research thrusts are proposed to achieve the project's objectives, which take into consideration devices with limited cryptographic capabilities and those with no cryptography at all. The first task aims at minimizing user involvement in the trust initialization process without assuming any extra resources, which is achieved with an obfuscated in-band message authentication protocol. The second task puts forward a mobility-aided authenticated secret key extraction technique without any explicit user involvement. The third task explores key-free wireless security utilizing friendly jamming; a geometry-based computational model is proposed for optimizing the network deployment. The results of this project will lay the foundation for designing extremely lightweight and highly usable secure trust initialization and networking protocols that are compatible with most commercial off-the-shelf smart wireless devices.