CSR: Small: Collaborative Research: Sensorprint: Hardware-Enforced Information Authentication for Mobile Systems

今天的社会是通过大量技术驱动的网络内在地、不可分割地融合在一起的，这些网络大多以移动为基础。配备功能丰富的移动设备的个人有效地成为世界其他地区的实时眼睛，提供对偏远、难以访问的网站和活动的宝贵见解。然而，在关键的社会责任环境中，很难确定和断言可接受的信任水平，特别是在目前的技术允许轻松伪造、操纵和伪造数据的情况下。该项目的目标是设计和构建技术，使移动数据具有更高的真实性和完整性保证。最重要的是数据的“活性”保证，或证明数据是在实际的移动设备上实时捕获的，而不是伪造的。该项目将识别和利用移动数据和设备传感器流同时捕获的洞察力，必然具有一定的关系。这项研究在建立移动和社交媒体的可信度方面发挥了基础作用，充当了报告数据真实性的必要证人。具有重要社会影响的应用包括公民新闻、智慧城市管理和原型验证。该项目将调查、开发和评估基于传感器的安全和高效移动数据验证机制的框架。在第一次推进中，该团队将利用TrustZone来构建一个可信的移动设备平台，将信任引导到设备上捕获的传感器读数，并为敏感功能提供安全存储和安全执行环境。在第二个推力中，该团队将设计解决方案，以安全有效地捕获、验证、通信、存档、搜索和访问移动设备传感器快照(“ensorprint”)。最后，该团队将开发机制来验证移动数据和同时捕获的传感器流之间的一致性。此外，开发的解决方案将在新推出的以传感器为中心的数据抄袭攻击和基于移动性的数据类别上进行评估。

Today's societies are intrinsically and inextricably fused through a vast set of technology-driven networks, mostly mobile-based. Individuals equipped with feature-rich mobile devices effectively become the real-time eyes of the rest of the world, providing invaluable insights into remote, hard to access sites and events. However, in critical socially charged settings it is difficult to ascertain and assert an acceptable level of trust, especially as current technologies allow easy forging, manipulation and fabrication of data. The goal of this project is to design and build technology that will endow mobile data with increased authenticity and integrity assurances. Of primary importance is the data "liveness" assurance, or proof that the data has been captured live on the actual mobile device, and has not been fabricated. This project will identify and exploit the insight that mobile data and the device sensor streams simultaneously captured, necessarily bear certain relations. This research plays a fundamental role in establishing the credibility of mobile and social media, acting as the required witness to the authenticity of reported data. Applications with important social impact include citizen journalism, smart city management and prototype verification.The project will investigate, develop and evaluate a framework for secure and efficient sensor-based mobile data verification mechanisms. In a first thrust, the team will leverage TrustZone to build a trusted mobile device platform, to bootstrap trust into sensor readings captured on the device, and provide secure storage and a secure execution environment for sensitive functions. In a second thrust, the team will devise solutions to securely and efficiently capture, authenticate, communicate, archive, search and access mobile device sensor snapshots ("sensorprints"). Finally, the team will develop mechanisms to verify the consistency between mobile data and simultaneously captured sensor streams. In addition, the developed solutions will be evaluated on newly introduced sensor-centric data plagiarism attacks and mobility based data categories.