Research Initiation Award: Designing Efficient Access Control Schemes for Implantable Medical Devices

研究启动奖为传统黑人学院和大学的初级和中期职业教师提供支持，他们正在建立新的研究项目或重新指导和重建现有的研究项目。期望该奖项有助于提高教师的研究能力和效率，改善所在机构的研究和教学，并使本科生参与研究经验。费耶特维尔州立大学获得的奖项可能在许多领域产生更广泛的影响。本项目的目标是研究植入式医疗设备的访问控制方案；以及通过开发课程和让本科生参与这项研究来加强大学的教与学。该研究项目设计并实现了一种新的轻量级和通用的访问控制方案，可以有效地保护植入式医疗设备（imd）在常规和紧急情况下免受未经授权的访问。智能手机被用作代理，将复杂的加密计算委托给访问控制。此外，为了延长资源受限IMD的使用寿命，将使用一种改进的压缩感知技术来减少IMD与代理之间的通信开销和数据加密的计算开销。将采用基于密文策略属性的加密（CP-ABE）对IMD编程操作员（通常是医生）的资格提供细粒度的访问控制。所提出的访问控制方案是完全自动化的，不需要患者参与。目前，没有通用的安全标准或规范可供IMD产品遵循。该项目的结果将促使和指导IMD行业为商业IMD产品制定网络安全问题的标准和规范。该项目将与天普大学合作进行。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Research Initiation Awards provide support for junior and mid-career faculty at Historically Black Colleges and Universities who are building new research programs or redirecting and rebuilding existing research programs. It is expected that the award helps to further the faculty member's research capability and effectiveness, improves research and teaching at the home institution, and involves undergraduate students in research experiences. The award to Fayetteville State University has potential broader impacts in a number of areas. The goal of this project is to study access control schemes for implantable medical devices; as well as to enhance teaching and learning at the university by developing courses and involving undergraduate students in this research. This research project designs and implements novel lightweight and generalized access control schemes that can effectively secure implantable medical devices (IMDs) from unauthorized access in both regular and emergency situations. The smartphone is used as a proxy to delegate the complex cryptographic computations for access control. Additionally, to prolong the lifetime of the resource-constrained IMDs, a modified compressive sensing technique will be used to reduce both the communication overheads and the computational overheads for data encryption between the IMD and the proxy. The ciphertext-policy attribute-based encryption (CP-ABE) will be employed to provide fine-grained access control over the qualifications of IMD programmer operator, usually the physician. The proposed access control schemes are fully automated and no patient participation is required. Currently, there are no common security standards or specifications available for IMD products to follow. The results of this project will prompt and guide the IMD industry to develop standards and specifications on the cybersecurity issues for commercial IMD products. This project will be conducted in collaboration with Temple University.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.