SaTC: CORE: Small: Mining Strong Security from Weak RFID Tags

无线射频识别（RFID）已经并将继续在物联网（IoT）时代发挥关键作用。无源超高频（UHF） RFID标签在市场上最受欢迎，但大多数商业现成产品不支持加密操作，并且特别容易受到欺骗和克隆。这种安全问题严重阻碍了现成的无源超高频RFID标签在安全敏感环境中的应用。该项目还为课程开发、研究生培训、本科生研究参与、扩大女性和代表性不足的学生在计算机领域的参与以及在物联网和网络安全领域的推广活动提供了一个综合教育平台。该项目旨在提高现有无源超高频RFID系统在安全敏感应用中的适用性，如用户身份验证、受保护物理或电子资源的访问控制以及关键资产跟踪。拟议的研究包括五个综合重点。重点一是开发一种基于RFID标签在宽频带上独特的频率依赖的后向散射功率曲线的指纹识别系统。重点二是基于用户在RFID标签上有节奏的轻敲，开发一种新型的RFID双因素认证系统。推力3是基于预期的智能手表与RFID数据之间的强相关性，开发智能手表辅助的双因素RFID认证系统。重点4是开发一种智能手表辅助的持续认证系统，以验证用户在受保护区域的持续物理存在。推力5是所有提议的技术原型，并通过irb批准的用户实验评估其安全性和可用性。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Radio Frequency Identification (RFID) has played and will continue playing critical roles in the era of the Internet of Things (IoT). Passive ultra-high frequency (UHF) RFID tags are most popular in the market, but most commercial off-the-shelf products do not support cryptographic operations and are particularly vulnerable to spoofing and cloning. Such security concerns severely hinder the application of off-the-shelf passive UHF RFID tags to security-sensitive contexts. This project also offers an integrated education platform for curriculum development, graduate student training, undergraduate research engagement, broadening participation of female and underrepresented students in computing, and outreach activities in the IoT and cybersecurity domains. This project aims to boost the applicability of off-the-shelf passive UHF RFID systems to security-sensitive applications such as user authentication, access control to protected physical or electronic resources, and critical asset tracking. The proposed research comprises five integrated thrusts. Thrust 1 is to develop a novel system to fingerprint RFID tags based on their unique frequency-dependent backscatter-power profiles over a wide frequency band. Thrust 2 is to develop a novel two-factor RFID authentication system based on the user's rhythmic taps on the RFID tag. Thrust 3 is to develop a smartwatch-aided two-factor RFID authentication system based on the anticipated strong correlation between the smartwatch and RFID data. Thrust 4 is to develop a smartwatch-aided continuous authentication system to verify a user's continuous physical presence in a protected area. Thrust 5 is to prototype all the proposed techniques and evaluate their security and usability through IRB-approved user experiments.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.