Addressing Security and Privacy Concerns in Mobile Device Environments

解决移动设备环境中的安全和隐私问题

• 批准号: RGPIN-2016-03649
• 负责人: Adams, Carlisle
• 金额: $ 2.26万
• 依托单位: University of Ottawa
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2019
• 资助国家: 加拿大
• 起止时间: 2019-01-01 至 2020-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=683739
• 关键词: Addressing; Security; Privacy; Concerns; Mobile

The world in which we live is becoming increasingly interconnected: more and more devices have access to some sort of network and are therefore accessible by myriad other devices across the planet. Such connectivity can bring convenience, productivity, and interesting new applications to users, but can also lead to a host of problems, not the least of which is heightened security and privacy risks.*********Objectives of the Proposed Research Program******This research will analyze and address security/privacy concerns in current and emerging environments including cloud, e-health, e-travel, and high-security networks, particularly with a focus on their interaction with, and dependence upon, mobile devices. We will build on and extend our work over the past few years in order to continue finding novel techniques to mitigate threats to user security and privacy in these environments.******The primary objective of this proposed research program is thus two-fold. First, we will examine a number of current and emerging environments to assess the security and/or privacy vulnerabilities that exist. Of recent and particular interest are (1) data location assurance in cloud storage environments, (2) patient data aggregation and analysis in e-health networks, (3) border control in e-travel applications, and (4) data exfiltration from high-security air-gapped computers.******Second, we will find solutions in these environments that allow the required functionality while protecting user privacy and enhancing the security of the devices and networks in use. The common thread in all the scenarios we are examining is the use of mobile devices for sending, receiving, or manipulating sensitive data. The research challenge, therefore, is to find solutions that achieve a balance of efficiency, usability, and correct operation in these small personal devices; building on some of our recent results gives confidence that this can be done.*** ***Scientific Approach***This research will involve significant design and development of algorithms, protocols, and applications for security and privacy, extending current technologies such as identity-based encryption, homomorphic encryption, mobile device protection mechanisms, and credential systems. Development tools and testing environments will be created to facilitate this work. In addition, multiple devices will be interconnected in a laboratory environment to properly simulate and test the information sharing and distributed processing models upon which the security and privacy infrastructures will be built.*** ***Novelty and Expected Significance of the Work***The research completed within the scope of this proposal will influence the direction and implementation of mobile security and privacy technologies in the next few years, helping to put Canada even more at the forefront of online technology development internationally.**

我们生活的世界正变得越来越互联：越来越多的设备可以接入某种网络，因此地球上无数其他设备都可以访问。这种连接可以为用户带来便利性、生产力和有趣的新应用程序，但也会导致一系列问题，其中最重要的是增加了安全和隐私风险。*本研究将分析和解决当前和新兴环境中的安全/隐私问题，包括云、电子健康、电子旅行和高安全网络，特别是关注它们与移动设备的交互和对移动设备的依赖。我们将在过去几年的工作基础上继续扩展我们的工作，以便继续寻找新的技术来减轻这些环境中对用户安全和隐私的威胁。因此，这项拟议研究计划的主要目标有两个。首先，我们将检查一些当前和新兴环境，以评估存在的安全和/或隐私漏洞。最近特别感兴趣的是(1)云存储环境中的数据位置保证，(2)电子健康网络中的患者数据聚合和分析，(3)电子旅行应用中的边界控制，以及(4)高安全气隙计算机的数据外泄。*第二，我们将在这些环境中找到解决方案，在保护用户隐私和增强正在使用的设备和网络的安全的同时，允许所需的功能。我们正在研究的所有场景中的共同主线是使用移动设备发送、接收或操作敏感数据。因此，研究的挑战是找到在这些小型个人设备中实现效率、可用性和正确操作之间的平衡的解决方案；基于我们最近的一些结果，我们相信可以做到这一点。*科学方法*这项研究将涉及到针对安全和隐私的算法、协议和应用程序的重要设计和开发，扩展当前的技术，如基于身份的加密、同态加密、移动设备保护机制和凭据系统。将创建开发工具和测试环境，以促进这项工作。此外，多个设备将在实验室环境中互联，以适当地模拟和测试信息共享和分布式处理模型，安全和隐私基础设施将建立在这些模型上。*工作的新颖性和预期意义*在此提案范围内完成的研究将影响未来几年移动安全和隐私技术的方向和实施，帮助加拿大在国际上更多地处于在线技术发展的前沿。**