SBIR Phase I: Wave: End-end Security for virtual reality and video conferencing applications (COVID-19)

这个小型企业创新研究（SBIR）第一阶段项目的更广泛的影响/商业潜力将来自于开发人员构建大规模协作和实时协作视频/虚拟现实应用程序的能力，而不会影响端端安全。在COVID-19大流行期间，缺乏端到端加密一直是消费者、教育机构和企业远程协作的一个日益严重的问题。该项目将通过为开发人员提供必要的工具来创建高质量的同步协作虚拟环境，使儿童，教师，企业专业人员甚至国家安全人员可以安全地从事工作活动，而不会有隐私丢失或安全/数据妥协的风险。这也将有利于远程医疗，因为从个人角度和法律的角度来看，隐私是最重要的。成功演示高性能应用程序的端端加密将导致其他远程工作协作工具在设计时将端端安全性作为关键功能。这个小型企业创新研究（SBIR）第一阶段项目解决了维护端端安全性的问题，同时通过将数据平面与控制平面分离来允许使用脚本语言的表达性应用.控制平面可以使用Web友好的语言进行编程，该语言可以在任何现有的用户设备（如笔记本电脑/智能手机）上执行，从而为应用程序开发人员提供最大的可移植性。数据平面始终保持端到端加密，并且可以使用脚本语言以高度表达的方式进行操作。该系统通过使用快速组密钥更新协议来提供完美的前向和后向保密，以保持多媒体内容的机密性、完整性和真实性。该项目的研究和开发将在多个方面取得突破，包括展示真正高性能的去中心化端端加密应用程序。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The broader impact/commercial potential of this Small Business Innovation Research (SBIR) Phase I project will result from the ability for developers to build massively collaborative and real-time cooperative video/virtual reality applications without compromising end-end security. Lack of end-to-end encryption has been a growing problem for consumers, educational institutions and businesses collaborating remotely during the COVID-19 pandemic. This project will advance the state-of-the-art by providing developers with the necessary tools to create high quality synchronous collaborative virtual environments where children, teachers, corporate professionals and even national security personnel can safely engage in work-activity without risks of privacy loss or security/data compromises. This will also benefit telemedicine where privacy is paramount from a personal perspective and also from a legal standpoint. The success of demonstrating end-end encryption for a high-performance application will result in other remote-work collaborative tools being designed with end-end security as a key feature.This Small Business Innovation Research (SBIR) Phase I project solves the problem of maintaining end-end security of content while allowing expressivity using a scripting language by separating the data plane from the control plane for such massively collaborative multimedia applications. The control plane can be programmed using a web-friendly language that can be executed on any existing user-device such as laptops/smartphones thus giving maximum portability to the app developers. The data plane always stays end-end encrypted and can be manipulated using the scripting language in a highly expressive manner. The system provides perfect forward and backward secrecy by using a fast-group rekeying protocol to maintain confidentiality, integrity and authenticity of the multimedia content. Research and development on this project will lead to breakthroughs in multiple avenues including the demonstration of a truly high performant decentralized end-end encrypted application. This will spur the demand for end-end security for any remote-work collaborative application.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.