CC* Integration-Large: mGuard: A Secure Real-time Data Distribution System with Fine-Grained Access Control for mHealth Research

mGuard项目旨在解决在研究广泛的健康和保健问题的研究人员之间共享移动健康（mHealth）数据时面临的两个主要数据访问挑战：(1)由于可穿戴传感器数据可能会暴露用户的隐私敏感信息，因此只能由授权用户访问；目前，这种访问控制在很大程度上是手动处理的，产生了很高的开销并容易出现人为错误；(2)为了对某些医疗状况进行实时干预，研究人员需要对传感器数据进行实时检索和处理，目前尚不支持。mGuard通过利用nsf支持的命名数据网络（NDN）计划的结果来解决上述挑战，特别是自动化数据访问控制（基于名称的访问控制，或NAC）的加密密钥管理解决方案和实现分布式数据集之间实时同步的解决方案（NDN同步）。首先，mGuard利用并扩展了NDN NAC，自动对授权研究人员的机密数据进行细粒度访问控制。其次，它利用NDN同步提供实时数据生产通知；在此基础上，应用程序可以直接使用MD2K数据名实时发布和订阅数据。这些新功能将部署在MD2K网络基础设施中。这项工作使移动传感器数据到知识（MD2K）中心（由美国国立卫生研究院支持）能够与大量移动健康研究人员安全实时地共享其数据。因此，mGuard的变革潜力扩展到许多类型的数字干预和许多健康领域。mGuard还鼓励其他数据密集型应用领域的研究人员探索NDN以数据为中心的解决方案。为了培养下一代，mGuard正在创建本科和研究生教育材料，包括具体的例子和动手练习，以及通过在线研讨会、会议教程、移动健康培训机构和夏令营进行培训和推广活动。mGuard项目的网址为https://mguard.md2k.org。发表的论文通过mGuard网站、NDN网站（https://named-data.net/）、MD2K网站（https://md2k.org）和出版商网站进行维护。项目生产的所有软件均在NDN GitHub （https://github.com/named-data）和mHealthHUB （https://mhealth.md2k.org/）中进行维护。mGuard项目网站提供课程资料、项目文档和用户手册。跟踪数据、仿真代码和评估结果将在mGuard内部服务器上进行至少10年的维护。调查人员将存档数据、样本和其他研究产品，并根据资源可用性，在项目结束日期后至少五年保留对它们的访问权。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The mGuard project aims to address two major data access challenges in sharing mobile health (mHealth) data among researchers who investigate a wide range of health and wellness issues: (1) because wearable sensor data may expose privacy-sensitive information about a user, they should be accessed only by authorized users; currently this access control is largely handled manually, incurring high overhead and subject to human errors; and (2) to enable real-time intervention for certain medical conditions, researchers need to retrieve and process the sensor data in real-time, which is not supported at this time.mGuard tackles the above challenges by utilizing the results from the NSF-supported Named Data Networking (NDN) initiative, in particular the solutions that automate the cryptographic key management for data access control (name-based access control, or NAC) and the solutions that enable real-time synchronization among distributed datasets (NDN Sync). First, mGuard utilizes and extends NDN NAC to automate fine-grained access control of confidential data to authorized researchers. Second, it utilizes NDN Sync to provide real-time data production notification; based on this, it enables applications to publish and subscribe to data in real time by directly using MD2K data names. These new capabilities will be deployed in the MD2K cyberinfrastructure. This effort enables the Mobile Sensor Data-to-Knowledge (MD2K) Center (supported by the National Institute of Health) to share its data securely and in real time with a large number of mHealth researchers. The transformative potential of mGuard thus extends across many types of digital interventions and many health domains. mGuard also encourages researchers in other areas of data-intensive applications to explore NDN’s data-centric solutions. To train the next generation, mGuard is creating undergraduate and graduate education materials including concrete examples and hands-on exercises, as well as training and outreach activities through online seminars, conference tutorials, mHealth training institute, and summer camps. The mGuard project website is https://mguard.md2k.org. Published papers are maintained through the mGuard website, NDN website (https://named-data.net/), MD2K website (https://md2k.org), and publishers’ websites. All of the software produced by the project is maintained in the NDN GitHub (https://github.com/named-data) and mHealthHUB (https://mhealth.md2k.org/). Curriculum materials, program documentations, and user manuals are maintained on the mGuard project website. The trace data, simulation code, and evaluation results will be maintained on mGuard internal servers for a period of at least 10 years. Investigators will archive data, samples, and other research products, and preserve access to them at least five years beyond the project’s end date, subject to resource availability.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.