Addressing Security and Privacy Concerns in Mobile Device Environments

我们生活的世界正变得越来越相互联系：越来越多的设备可以接入某种网络，因此地球上无数其他设备都可以访问这些设备。这种连接可以为用户带来便利、生产力和有趣的新应用程序，但也可能导致许多问题，其中最重要的是安全性和隐私风险的增加。*********拟议研究计划的目标******本研究将分析和解决当前和新兴环境中的安全/隐私问题，包括云、电子医疗、电子旅行和高安全性网络，特别是关注它们与移动设备的交互和依赖。我们将以过去几年的工作为基础，继续寻找新的技术，以减轻这些环境中对用户安全和隐私的威胁。******这个研究计划的主要目标是双重的。首先，我们将检查一些当前和新兴的环境，以评估存在的安全性和/或隐私漏洞。最近特别令人感兴趣的是：(1)云存储环境中的数据位置保证，(2)电子健康网络中的患者数据汇总和分析，(3)电子旅行应用中的边境控制，以及(4)高安全性气隙计算机的数据泄露。******其次，我们将在这些环境中找到解决方案，在允许所需功能的同时保护用户隐私并增强使用中的设备和网络的安全性。在我们所研究的所有场景中，共同的主线是使用移动设备发送、接收或操作敏感数据。因此，研究的挑战是找到解决方案，在这些小型个人设备中实现效率、可用性和正确操作的平衡；基于我们最近取得的一些成果，我们相信这是可以做到的。*** ***科学方法***这项研究将涉及重要的算法、协议和安全和隐私应用的设计和开发，扩展当前的技术，如基于身份的加密、同态加密、移动设备保护机制和凭证系统。将创建开发工具和测试环境来促进这项工作。此外，将在实验室环境中互联多台设备，以适当地模拟和测试信息共享和分布式处理模型，并在此基础上构建安全和隐私基础架构。*** ***工作的新颖性和预期意义***在本提案范围内完成的研究将影响未来几年移动安全和隐私技术的方向和实施，帮助加拿大在国际在线技术发展的最前沿。**

The world in which we live is becoming increasingly interconnected: more and more devices have access to some sort of network and are therefore accessible by myriad other devices across the planet. Such connectivity can bring convenience, productivity, and interesting new applications to users, but can also lead to a host of problems, not the least of which is heightened security and privacy risks.*********Objectives of the Proposed Research Program******This research will analyze and address security/privacy concerns in current and emerging environments including cloud, e-health, e-travel, and high-security networks, particularly with a focus on their interaction with, and dependence upon, mobile devices. We will build on and extend our work over the past few years in order to continue finding novel techniques to mitigate threats to user security and privacy in these environments.******The primary objective of this proposed research program is thus two-fold. First, we will examine a number of current and emerging environments to assess the security and/or privacy vulnerabilities that exist. Of recent and particular interest are (1) data location assurance in cloud storage environments, (2) patient data aggregation and analysis in e-health networks, (3) border control in e-travel applications, and (4) data exfiltration from high-security air-gapped computers.******Second, we will find solutions in these environments that allow the required functionality while protecting user privacy and enhancing the security of the devices and networks in use. The common thread in all the scenarios we are examining is the use of mobile devices for sending, receiving, or manipulating sensitive data. The research challenge, therefore, is to find solutions that achieve a balance of efficiency, usability, and correct operation in these small personal devices; building on some of our recent results gives confidence that this can be done.*** ***Scientific Approach***This research will involve significant design and development of algorithms, protocols, and applications for security and privacy, extending current technologies such as identity-based encryption, homomorphic encryption, mobile device protection mechanisms, and credential systems. Development tools and testing environments will be created to facilitate this work. In addition, multiple devices will be interconnected in a laboratory environment to properly simulate and test the information sharing and distributed processing models upon which the security and privacy infrastructures will be built.*** ***Novelty and Expected Significance of the Work***The research completed within the scope of this proposal will influence the direction and implementation of mobile security and privacy technologies in the next few years, helping to put Canada even more at the forefront of online technology development internationally.**