I-Corps: A device for defensive charging to augment the security of mobile devices

这个I-Corps项目更广泛的影响/商业潜力是开发智能手机充电技术，保护在公共充电中心充电的用户的隐私。由于是公开的，这样的集线器是恶意行为者篡改的主要目标，恶意行为者可以嵌入执行功率分析的非法仪表，以收集关于键入的密钥、访问的网站、消费的多媒体内容、所提出的系统减轻了这些攻击，并且对于经常旅行的人来说可能具有重要价值，因为他们经常发现自己不得不在管辖范围内的集线器为他们的电话充电。可能不值得信任的实体。 除了个人频繁旅行者之外，拟议中的技术也可能对那些寻求减轻使用手机连接到公司网络的员工所构成的安全威胁的公司有价值。随着智能电话日益成为诸如通信、银行业务、敏感数据存储等活动的中心，所提出的技术具有显著增强最终用户安全的潜力。该I-Corps项目基于防御性充电方案的开发，该方案旨在减轻充电过程中的功率侧信道攻击。所提出的技术的硬件形式是充电器或充电器附加装置，其在充电期间改变由手机汲取的功率。它由一个微控制器和金属氧化物半导体场效应晶体管（MOSFET）组成，当手机充电时，MOSFET可以打开和关闭随机组合的电阻器。电阻的变化反过来又产生了混淆手机功率消耗的真实足迹所需的效果。该解决方案的软件形式使用虚假操作（例如，随机图像旋转）。这些操作会导致计算机处理单元（CPU）和内存负载中断，从而混淆手机的真实功耗。该系统的设计旨在最大限度地减少对充电时间以及软件方法使用的CPU和内存的影响。由于在手机外部，硬件选项不会消耗手机上的CPU/内存。作为一种软件解决方案，该技术可以提供便利，因为它在充电过程中自动运行，并且可以很容易地随着威胁和防御机制的发展而更新。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估而被认为值得支持。

The broader impact/commercial potential of this I-Corps project is the development of a smart phone charging technology that protects the privacy of users who charge their phones at public charging hubs. By virtue of being public, such hubs are a prime target for tampering by malicious actors who could embed illicit meters that perform power analytics to glean information about keys typed, websites visited, multimedia content consumed, etc. The proposed system mitigates these attacks and may be of significant value to frequent travelers given that they often find themselves having to charge their phones at hubs that are within the jurisdiction of entities that might not be trustworthy. Beyond individual frequent travelers, the proposed technology also may be of value to companies seeking to mitigate the security threat posed by employees who connect to the company network using their phones. As smart phones increasingly become central to activities such as communication, banking, storage of sensitive data, etc., the proposed technology has the potential to significantly augment end-user security.This I-Corps project is based on the development of a defensive charging scheme designed to mitigate power side-channel attacks during the charging process. The hardware form of the proposed technology is a charger or charger add-on that morphs the power drawn by the phone during charging. It consists of a micro-controller and metal–oxide–semiconductor field-effect transistors (MOSFETs) that switch on and off random combinations of resistors while the phone is being charged. The variation in resistance, in turn, produces the effect needed to obfuscate the true footprint of the phone’s power draw. The software form of the solution uses bogus operations (e.g., random image rotations) in the background while the phone is being charged. These operations cause disruptions in computer processing unit (CPU) and memory load needed to obfuscate the phone’s true power draw. The system has been designed to minimize the impact on charging time and the CPU and memory used by the software approach. By virtue of being external to the phone, the hardware option does not consume CPU/memory on the phone. As a software solution, this technology may offer convenience given that it runs automatically during charging and could easily be updated as threats and the defense mechanism evolve.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.