SaTC: CORE: Small: Mining Strong Security from Weak RFID Tags

射频识别（RFID）已经并将继续在物联网（IoT）时代发挥关键作用。无源超高频（UHF）RFID标签在市场上最受欢迎，但大多数商业现成产品不支持加密操作，特别容易受到欺骗和克隆。这样的安全问题严重阻碍了现成的无源UHF RFID标签的应用程序的安全敏感的上下文。该项目还提供了一个综合教育平台，用于课程开发，研究生培训，本科生研究参与，扩大女性和代表性不足的学生在计算方面的参与，以及物联网和网络安全领域的推广活动。该项目旨在提高现有无源UHF RFID系统在安全敏感应用中的适用性，例如用户身份验证、受保护物理或电子资源的访问控制以及关键资产跟踪。拟议的研究包括五个综合重点。推力1是开发一种新的系统，以指纹RFID标签的基础上，他们独特的频率相关的后向散射功率分布在一个很宽的频带。目标二是开发一种基于用户敲击RFID标签的双因素RFID认证系统。推力3是基于智能手表和RFID数据之间预期的强相关性开发智能手表辅助的双因素RFID认证系统。第四个目标是开发一种智能手表辅助的持续身份验证系统，以验证用户在受保护区域内的持续物理存在。推力5是原型的所有建议的技术和评估其安全性和可用性通过IRB批准的用户实验。该奖项反映了NSF的法定使命，并已被认为是值得通过使用基金会的智力价值和更广泛的影响审查标准进行评估的支持。

Radio Frequency Identification (RFID) has played and will continue playing critical roles in the era of the Internet of Things (IoT). Passive ultra-high frequency (UHF) RFID tags are most popular in the market, but most commercial off-the-shelf products do not support cryptographic operations and are particularly vulnerable to spoofing and cloning. Such security concerns severely hinder the application of off-the-shelf passive UHF RFID tags to security-sensitive contexts. This project also offers an integrated education platform for curriculum development, graduate student training, undergraduate research engagement, broadening participation of female and underrepresented students in computing, and outreach activities in the IoT and cybersecurity domains. This project aims to boost the applicability of off-the-shelf passive UHF RFID systems to security-sensitive applications such as user authentication, access control to protected physical or electronic resources, and critical asset tracking. The proposed research comprises five integrated thrusts. Thrust 1 is to develop a novel system to fingerprint RFID tags based on their unique frequency-dependent backscatter-power profiles over a wide frequency band. Thrust 2 is to develop a novel two-factor RFID authentication system based on the user's rhythmic taps on the RFID tag. Thrust 3 is to develop a smartwatch-aided two-factor RFID authentication system based on the anticipated strong correlation between the smartwatch and RFID data. Thrust 4 is to develop a smartwatch-aided continuous authentication system to verify a user's continuous physical presence in a protected area. Thrust 5 is to prototype all the proposed techniques and evaluate their security and usability through IRB-approved user experiments.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.