TWC: Small: Secure Near Field Communications between Mobile Devices

据估计，到本十年末，物联网（IoT）将连接多达500亿台设备。近场通信（NFC）被认为是物联网的关键推动者。NFC支持许多有用的应用，包括非接触式支付、身份识别、身份验证、文件交换和电子医疗保健等。然而，移动设备之间的NFC安全面临着巨大的挑战，主要是因为NFC设备的严重资源限制，部署的NFC系统没有安全性，以及复杂的对手。本项目研究了三种保护NFC的技术：(1)利用NFC设备的全双工能力，实现节能和快速的密钥协议机制；(2)射频信号随机化，提供NFC保密性，无需预共享密钥；(3)利用磁传感防御继电器攻击的接近验证机制。与传统的Diffie-Hellman密钥协议相比，这些技术有望显著提高密钥生成速率和降低能耗，并实现较高的安全性和可用性。这些建议的技术将通过理论分析、数值模拟、试验台实验和用户研究进行评估，并与不同系统设置和条件下的传统安全机制进行比较。拟议的项目将推进物联网应用移动网络中轻量级、节能和可用安全机制的研究。本研究适用于移动支付、门禁等重要应用。研究生，本科生，少数民族和高中生将积极参与拟议的研究。乔治梅森大学新成立的网络安全工程（CYSE）学士课程将通过该项目得到充实。该项目的资料将以教程、讲座、出版物和软件工具包的形式在网上提供。

By the end of this decade, it is estimated that Internet of Things (IoT) could connect as many as 50 billion devices. Near Field Communication (NFC) is considered as a key enabler of IoT. Many useful applications are supported by NFC, including contactless payment, identification, authentication, file exchange, and eHealthcare, etc. However, securing NFC between mobile devices faces great challenges mainly because of severe resource constraints on NFC devices, NFC systems deployed without security, and sophisticated adversaries.This project investigates three techniques to secure NFC: (1) energy-efficient and fast key agreement mechanisms by exploiting full-duplex capability of NFC devices; (2) RF signal randomization to provide NFC confidentiality without a pre-shared key; and (3) a proximity verification mechanism defending against relay attacks utilizing magnetic sensing. These techniques are expected to significantly improve the key generation rate and reduce energy consumption compared with the conventional Diffie-Hellman key agreement protocol, and achieve high security and usability. These proposed techniques will be evaluated through theoretical analysis, numeric simulation, testbed experiments, and user study, and compared with conventional security mechanisms under different system settings and conditions.The proposed project will advance research on lightweight, energy-efficient, and usable security mechanisms in mobile networks for IoT applications. The research is applicable to important applications, such as mobile payment and access control. Graduate, undergraduate, minority, and high school students will be actively involved into the proposed research. The newly established Cyber Security Engineering (CYSE) BS program at George Mason University will be enriched through this project. Materials of this project will be made available online in the forms of tutorials, talks, publications, and software toolkits.