NSF Convergence Accelerator Track G: Privacy-preserving Intrusion-resilient Secure Multiparty-computation-based Overlay (PISMO) for Secure and Resilient Communication Through 5G

该项目开发了隐私保护、入侵防御安全多方计算覆盖(PISMO)系统，通过现有的非合作5G基础设施进行安全和私人通信。Pismo通过创作工具(如Microsoft Office、电子邮件和Web浏览)透明地集成到几个广泛使用的商业最终用户应用程序中，例如消息传递和内容共享。由于多个军事、政府和关键基础设施运营依赖于此类最终用户应用程序，PISMO可增强它们抵御威胁的能力。被考虑的威胁包括从无意窃听到破坏网络攻击。这是在使用现有的负担得起的5G通信基础设施的同时实现的，而不信任或与5G运营商合作。PISMO系统的部署和商业化有助于实现更大的国家安全和通信隐私保护，无论在哪里进行此类操作，但始终以安全、弹性、高功能和可维护的方式运行。PISMO覆盖包括在5G终端设备上配置的客户端软件和部署在互联网云中的服务器软件，以形成PISMO的主干；客户端将通过5G无线网络连接到后端服务器。该项目的重点是以使用为中心的设计和可用性，以将开发的软件组件融合到一个易于使用、可部署并最终可过渡的系统中，该系统利用现代密码学(例如，安全多方计算、私人信息检索和基于身份的加密)以及用于分布式系统和网络的高级弹性和可靠性技术。在本研究中，考虑了两种用户类型：配置、部署、监控和维护Pismo覆盖的管理员，以及在无线5G终端设备上操作Pismo客户端的最终用户。该研究集中于通过适用于(1)关键基础设施操作、(2)政府用途和(3)军事操作的三个用例，解决有关配置、部署和管理PISMO的难题。这些用例将导致对面向人的组件和过程的精确定义。该项目的范围还考虑在私有云和公共云中的试验床上部署原型实施，以执行用户研究，捕获用户体验(UX)元素和功能。原型将能够校准系统为支持管理员定义设置和维护功能的任务而提供的各种自动化机会。最后，集成和部署的原型解决方案将有意义地和实际地展示该项目的研究提供的可用性、功能性、弹性和可维护性方面的进步。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

This project develops the Privacy-preserving Intrusion-resilient Secure Multiparty-computation-based Overlay (PISMO) system for secure and private communication through existing, non-cooperative 5G infrastructure. PISMO transparently integrates into several widely employed commercial end-user applications such as messaging and content sharing via authoring tools, e.g., Microsoft Office, email, and web-browsing. As several military, government, and critical infrastructure operations rely on such end-user applications, PISMO hardens them against threats. Considered threats range from unintended eavesdropping to sabotaging cyber-attacks. This is accomplished while using existing and affordable 5G communication infrastructure without trusting or cooperating with the 5G operator. Deploying and commercializing the PISMO system contributes to achieving greater national security and protection of communication privacy, wherever such operations are carried out, nonetheless always operating in a secure and resilient, yet highly functional and maintainable manner.The PISMO overlay consists of client software provisioned on 5G end devices and server software deployed in clouds on the Internet to form the backbone of PISMO; clients will connect via the 5G wireless network to the backend servers. The project focuses on use-centric design & usability to converge the developed software components into an easily usable, deployable, and ultimately transitionable system that leverages modern cryptography (e.g., secure multi-party computation, private information retrieval, and identity-based encryption) and advanced resilience and reliability techniques for distributed systems and networks. In this research, two user types are considered; an Administrator, who configures, deploys, monitors, and maintains the PISMO overlay, and an End-User operating the PISMO client on wireless 5G end devices. The research concentrates on solutions to hard questions about configuring, deploying, and managing PISMO via three use cases applicable to (1) critical infrastructure operations, (2) government uses, and (3) military operations. These use cases will lead to precise definitions of the human-facing components and procedures. The project’s scope also considers deploying prototype implementations on testbeds in private and public clouds to perform user studies capturing user experience (UX) elements and features. The prototypes will enable the calibration of various automation opportunities that the system offers in support of the Administrator’s task to define settings and maintain functionality. Lastly, an integrated and deployed prototype solution will meaningfully and practically demonstrate the advances in usability, functionality, resilience, and maintainability that the research in this project provides.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.