SaTC: CORE: Small: Mining Strong Security from Weak RFID Tags

SaTC：核心：小型：从弱 RFID 标签中挖掘强大的安全性

• 批准号: 2055751
• 负责人: Yanchao Zhang
• 金额: $ 48.46万
• 依托单位: Arizona State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-03-01 至 2025-02-28
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2055751&HistoricalAwards=false
• 关键词: SaTC; CORE; Small; Mining; Strong

Radio Frequency Identification (RFID) has played and will continue playing critical roles in the era of the Internet of Things (IoT). Passive ultra-high frequency (UHF) RFID tags are most popular in the market, but most commercial off-the-shelf products do not support cryptographic operations and are particularly vulnerable to spoofing and cloning. Such security concerns severely hinder the application of off-the-shelf passive UHF RFID tags to security-sensitive contexts. This project also offers an integrated education platform for curriculum development, graduate student training, undergraduate research engagement, broadening participation of female and underrepresented students in computing, and outreach activities in the IoT and cybersecurity domains. This project aims to boost the applicability of off-the-shelf passive UHF RFID systems to security-sensitive applications such as user authentication, access control to protected physical or electronic resources, and critical asset tracking. The proposed research comprises five integrated thrusts. Thrust 1 is to develop a novel system to fingerprint RFID tags based on their unique frequency-dependent backscatter-power profiles over a wide frequency band. Thrust 2 is to develop a novel two-factor RFID authentication system based on the user's rhythmic taps on the RFID tag. Thrust 3 is to develop a smartwatch-aided two-factor RFID authentication system based on the anticipated strong correlation between the smartwatch and RFID data. Thrust 4 is to develop a smartwatch-aided continuous authentication system to verify a user's continuous physical presence in a protected area. Thrust 5 is to prototype all the proposed techniques and evaluate their security and usability through IRB-approved user experiments.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

射频识别(RFID)在物联网(IoT)时代已经并将继续发挥关键作用。无源超高频(UHF)RFID标签在市场上最受欢迎，但大多数商用现成产品不支持加密操作，特别容易受到欺骗和克隆的攻击。这种安全问题严重阻碍了现成的无源UHF RFID标签在安全敏感环境中的应用。该项目还为课程开发、研究生培训、本科生研究参与、扩大女性和代表性不足的学生在计算机领域的参与以及物联网和网络安全领域的外联活动提供了一个综合教育平台。该项目旨在提高现成的无源UHF RFID系统在安全敏感应用中的适用性，例如用户身份验证、对受保护的物理或电子资源的访问控制以及关键资产跟踪。拟议的研究包括五个综合推动力。第一个推力是开发一种新的系统，基于RFID标签在宽频带上独特的依赖于频率的反向散射功率分布来对其进行指纹识别。推力2是开发一种新型的双因素RFID认证系统，该系统基于用户在RFID标签上有节奏的敲击。推力3是基于智能手表和RFID数据之间预期的强相关性，开发一种智能手表辅助的双因素RFID身份验证系统。推力4是开发一种智能手表辅助的持续身份验证系统，以验证用户在保护区内的持续物理存在。主旨5是通过IRB批准的用户实验来制作所有建议技术的原型，并评估它们的安全性和可用性。这一奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

PhyAuth: Physical-Layer Message Authentication for ZigBee Networks

• 发表时间: 2023
• 作者: Ang Li;Jiawei Li;Dianqi Han;Yan Zhang;Tao Li;Tingru Zhu

Secure UHF RFID Authentication With Smart Devices

• DOI: 10.1109/twc.2022.3226753
• 发表时间: 2023-07
• 期刊: IEEE Transactions on Wireless Communications
• 影响因子: 10.4
• 作者: Ang Li;Jiawei Li;Yan Zhang;Dianqi Han;Tao Li;Yanchao Zhang

WearRF-CLA: Continuous Location Authentication with Wrist Wearables and UHF RFID

• DOI: 10.1145/3488932.3517426
• 发表时间: 2022-05
• 期刊: Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security
• 作者: Ang Li;Jiawei Li;Dianqi Han;Yan Zhang;Tao Li;Yanchao Zhang

RCID: Fingerprinting Passive RFID Tags via Wideband Backscatter

• DOI: 10.1109/infocom48880.2022.9796663
• 发表时间: 2022-05
• 期刊: IEEE INFOCOM 2022 - IEEE Conference on Computer Communications
• 作者: Jiawei Li;Ang Li;Dianqi Han;Yan Zhang;Tao Li;Yanchao Zhang