CT-M: Implementable Privacy and Security for Resource-Constrained Devices

各种新兴的微电子应用以便携式系统为目标，对功率、外形系数和寿命等相关指标有严格的限制。对于这些应用中的许多，系统中的电子设备的能量消耗受到严格的限制。特别是，无源RFID标签依赖于从读取器接收的功率，因此需要低功耗来实现远距离读取。然而，这些设备已经被广泛用于具有严格安全和隐私要求的应用，如钥匙卡、公共交通令牌和植入式医疗设备。现有的设计方法和标准的密码原语不能满足这些系统的需求。因此，当前的实现要么求助于不能提供足够安全并且在实践中经常被破坏的隐蔽的安全和临时解决方案。该项目正在开发一种综合的方法来分析、设计和实现诸如广泛部署的RFID系统等严重资源受限的设备的安全和隐私。其目标是使设计者能够通过组合具有已知属性的库中的原语和协议来创建安全、经济高效的大规模RFID部署，并以原则性和高效的方式实现这些设计。这项研究遵循跨学科的方法，汇集了低能耗集成电路设计、设计自动化和嵌入式系统、系统和网络安全以及密码学方面的专家。除了研究，该项目还包括一个模块化的RFID安全实验室课程，以及使用密码学和RFID系统的教学推广课程，以激发中学生追求科学和工程。

A variety of emerging microelectronics applications target portable systems with tight constraints on the related metrics of power, form factor, and longevity. For many of these applications, there are severe constraints on the energy consumption for the electronics in the system. In particular, passive RFID tags rely on power received from readers so low power consumption is necessary to enable long-range reads. Nevertheless, these devices are already widely used for applications with serious security and privacy requirements such as key cards, public transportation tokens, and implantable medical devices. Current design approaches and standard cryptographic primitives fail to satisfy the needs for these systems. As a result, current implementations either resort to "security-by-obscurity" and ad hoc solutions that fail to provide adequate security and are frequently broken in practice.This project is developing a comprehensive approach to analyzing, designing, and implementing security and privacy for severely resource-constrained devices such as widely deployed RFID systems.The goal is to enable designers to create secure, cost-effective, large-scale RFID-deployments by combining primitives and protocols from a library with known properties and to implement those designs in a principled and efficient manner. The research follows an interdisciplinary approach by bringing together experts in low-energy integrated circuit design, design automation and embedded systems, system and network security, and cryptography. In addition to the research, the project includes a modular RFID security lab course and teaching outreach courses using cryptography and RFID systems to excite middle school students about pursuing science and engineering.