Research Initiation Award: Designing Efficient Access Control Schemes for Implantable Medical Devices

研究启动奖为历史悠久的黑人学院和大学的初级和职业生涯中期教师提供支持，这些教师正在建立新的研究计划或重新定向和重建现有的研究计划。预计该奖项有助于进一步提高教师的研究能力和有效性，改善所在机构的研究和教学，并让本科生参与研究经验。授予费耶特维尔州立大学的奖项可能在许多领域产生更广泛的影响。该项目的目标是研究植入式医疗设备的访问控制方案，并通过开发课程和让本科生参与这项研究来加强大学的教与学。该研究项目设计并实现了新颖的轻量级和通用的访问控制方案，可以有效地保护植入式医疗设备(IMD)在常规和紧急情况下免受未经授权的访问。智能手机被用作代理，委托复杂的密码计算进行访问控制。此外，为了延长资源受限的IMD的寿命，将使用改进的压缩感知技术来减少IMD和代理之间的数据加密的通信开销和计算开销。密文策略基于属性的加密(CP-ABE)将被用于对IMD程序员操作员(通常是医生)的资格提供细粒度的访问控制。拟议的出入控制方案是完全自动化的，不需要病人参与。目前，IMD产品还没有通用的安全标准或规范可供遵循。该项目的成果将促使和指导IMD行业为商业IMD产品制定网络安全问题的标准和规范。该项目将与天普大学合作进行。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Research Initiation Awards provide support for junior and mid-career faculty at Historically Black Colleges and Universities who are building new research programs or redirecting and rebuilding existing research programs. It is expected that the award helps to further the faculty member's research capability and effectiveness, improves research and teaching at the home institution, and involves undergraduate students in research experiences. The award to Fayetteville State University has potential broader impacts in a number of areas. The goal of this project is to study access control schemes for implantable medical devices; as well as to enhance teaching and learning at the university by developing courses and involving undergraduate students in this research. This research project designs and implements novel lightweight and generalized access control schemes that can effectively secure implantable medical devices (IMDs) from unauthorized access in both regular and emergency situations. The smartphone is used as a proxy to delegate the complex cryptographic computations for access control. Additionally, to prolong the lifetime of the resource-constrained IMDs, a modified compressive sensing technique will be used to reduce both the communication overheads and the computational overheads for data encryption between the IMD and the proxy. The ciphertext-policy attribute-based encryption (CP-ABE) will be employed to provide fine-grained access control over the qualifications of IMD programmer operator, usually the physician. The proposed access control schemes are fully automated and no patient participation is required. Currently, there are no common security standards or specifications available for IMD products to follow. The results of this project will prompt and guide the IMD industry to develop standards and specifications on the cybersecurity issues for commercial IMD products. This project will be conducted in collaboration with Temple University.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.