CAREER: Towards Reliable and Quantum-resistant Connected Vehicle Security

职业：实现可靠且抗量子的联网车辆安全

• 批准号: 2239931
• 负责人: Hanif Rahbari
• 金额: $ 59.97万
• 依托单位: Rochester Institute of Tech
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-03-01 至 2028-02-29
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2239931&HistoricalAwards=false
• 关键词: CAREER; Towards; Reliable; Quantum; resistant

The number of people who die in motor vehicle accidents unfortunately increases every year with human error as a primary cause of serious crashes. To enhance roadway safety and efficiency through driver-assistance and automated-driving systems, cellular vehicle-to-everything (C-V2X) is the globally preeminent technology to support connected vehicle services, including vehicle-to-vehicle (V2V) communications, and is set for expansion toward 6G cellular technology. In particular, V2V communication that allows vehicles to directly exchange messages beyond the perception range of on-board sensors has many tangible benefits to society with the potential to prevent a significant percentage of crashes, increase transportation system efficiency (reducing travel time, pollution, etc.), and enhance mobility for disadvantaged communities. Despite long-standing classical security protocols designed for C-V2X, however, this technology is vulnerable to imminent quantum attacks from emerging quantum computers threatening the “integrity” of safety-critical messages, and to denial-of-service attacks at the currently unprepared communication protocols hindering possible mitigations for those quantum attacks. Countering these attacks, separately or jointly, is challenging, a significant risk to the safety of the growing connected vehicle services and future autonomous ones, especially as current hardware (with 12-15 year life expectancy on vehicles) is inefficient at running post-quantum algorithms fast enough.This CAREER project refines and refocuses existing V2V communication and security protocols, without an overhaul, to support post-quantum algorithms, given the hardware and other practical limitations in the automotive industry. With novel security protocols and backward-compatible communication techniques to prevent, mitigate, and evaluate quantum attacks, this project transforms the current C-V2X ecosystem to become crypto-agile for a staged transition over the next two decades into a quantum-resistant one. The research and education agenda is framed around three thrusts: (1) Establishing a roadmap and a transition plan in designing specific interim security protocols for different stages of the transition (e.g., before and after compatible hardware is available); (2) Supporting post-quantum algorithms by optimizing the resource scheduling techniques at the MAC layer to accommodate more messages, and developing novel message sieving techniques at the physical layer to reduce the integrity verification loads on the security modules; and (3) Developing a unique prototype of a digital twin infused with software-defined radios by converting an open-source V2V security testbed to an interactive platform with interfaces to large-scale (NSF-funded) testbeds. As an integral part of this project, a digital twin will be used (instead of costly urban experiments) for comprehensive evaluation of the proposed techniques and development of a novel game for gamifying connected vehicle security education. It cultivates new interdisciplinary research among game design, wireless security, and the automotive industry, providing for synergistic research and education outcomes, and will also help broaden the impacts through inclusive mobility initiatives for disadvantaged (deaf and hard-of-hearing) communities and innovative educational pathways to train next generation of under-represented cybersecurity experts. The PI will disseminate new course modules, hands-on labs, and the new games through open-access lectures, academic/public exhibits, and various collegiate and K-12 competitions. The research outcomes will be shared with stakeholders for supporting safe innovations, standardization bodies (NIST, IEEE) for security standards, and 3GPP and automotive industry for 6G C-V2X specifications.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

不幸的是，死于机动车事故的人数每年都在增加，人为错误是严重撞车的主要原因。为了通过驾驶员辅助和自动驾驶系统提高道路安全性和效率，蜂窝车联网（C-V2X）是全球领先的技术，可支持车联网服务，包括车对车（V2 V）通信，并将扩展到6 G蜂窝技术。特别是，允许车辆在车载传感器的感知范围之外直接交换消息的V2 V通信对社会有许多切实的好处，有可能防止相当大比例的撞车事故，提高运输系统效率（减少旅行时间，污染等），并增强弱势群体的流动性。然而，尽管为C-V2X设计了长期存在的经典安全协议，但这项技术很容易受到来自新兴量子计算机的即将到来的量子攻击，威胁安全关键消息的“完整性”，以及目前尚未准备好的通信协议的拒绝服务攻击，阻碍了这些量子攻击的可能缓解。单独或联合应对这些攻击具有挑战性，这对日益增长的联网车辆服务和未来的自动驾驶服务的安全构成重大风险，特别是作为当前的硬件（车辆的预期寿命为12-15年）在足够快地运行后量子算法方面效率低下。该CAREER项目改进并重新关注现有的V2 V通信和安全协议，而无需大修，考虑到汽车行业的硬件和其他实际限制，支持后量子算法。通过新的安全协议和向后兼容的通信技术来防止、缓解和评估量子攻击，该项目将当前的C-V2X生态系统转变为加密敏捷，以便在未来二十年内逐步过渡到量子抗性。研究和教育议程围绕三个重点：（1）建立路线图和过渡计划，为过渡的不同阶段设计特定的临时安全协议（例如，兼容硬件可用之前和之后）;（2）通过优化MAC层的资源调度技术来支持后量子算法，以容纳更多消息，并在物理层开发新型消息筛选技术，以减少安全模块的完整性验证负载;以及（3）通过将开源V2 V安全测试平台转换为具有大规模接口的交互式平台，开发一个注入软件定义无线电的数字孪生模型的独特原型。（NSF资助）测试平台。作为该项目的一个组成部分，将使用数字孪生模型（而不是昂贵的城市实验）对所提出的技术进行全面评估，并开发一种新的游戏，用于将联网车辆安全教育游戏化。它在游戏设计，无线安全和汽车行业之间培养新的跨学科研究，提供协同研究和教育成果，并将通过针对弱势群体（聋人和听力障碍）的包容性移动计划和创新教育途径来帮助扩大影响，以培养下一代代表性不足的网络安全专家。PI将通过开放式讲座，学术/公共展览以及各种大学和K-12比赛传播新的课程模块，动手实验室和新游戏。研究成果将与支持安全创新的利益相关者、安全标准的标准化机构（NIST、IEEE）以及6 G C-V2X规范的3GPP和汽车行业分享。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

When Cryptography Needs a Hand: Practical Post-Quantum Authentication for V2V Communications

当密码学需要帮助时：V2V 通信的实用后量子身份验证

• DOI: 10.14722/ndss.2024.24267
• 发表时间: 2024
• 期刊: Network and Distributed System Security Symposium (NDSS 2024
• 作者: Twardokus, Geoff;Bindel, Nina;Rahbari, Hanif;McCarthy, Sarah
• 通讯作者: McCarthy, Sarah

Demo: An Open-Source Hardware-in-the-Loop Testbed for Post-Quantum V2V Security Research

演示：用于后量子 V2V 安全研究的开源硬件在环测试台

• DOI: 10.14722/vehiclesec.2024.25007
• 发表时间: 2024
• 期刊: Symposium on Vehicle Security and Privacy (VehicleSec 2024
• 作者: Twardokus, Geoff;Rahbari, Hanif
• 通讯作者: Rahbari, Hanif