NSF Convergence Accelerator Track G: Privacy-preserving Intrusion-resilient Secure Multiparty-computation-based Overlay (PISMO) for Secure and Resilient Communication Through 5G

该项目开发了保护隐私的入侵弹性安全多方计算覆盖（PISMO）系统，用于通过现有的非合作5G基础设施进行安全和私有通信。PISMO透明地集成到几个广泛使用的商业最终用户应用程序中，例如通过创作工具进行消息传递和内容共享，例如，Microsoft Office、电子邮件和Web浏览。 由于一些军事、政府和关键基础设施运营依赖于此类最终用户应用程序，PISMO加强了它们的安全性。考虑的威胁范围从无意的窃听到破坏网络攻击。这是在使用现有的和负担得起的5G通信基础设施而不信任或与5G运营商合作的情况下实现的。 PISMO系统的部署和商业化有助于实现更大的国家安全和通信隐私保护，无论这些操作在哪里进行，但始终以安全和弹性，但功能和维护性高的方式运行。PISMO覆盖由5G终端设备上提供的客户端软件和部署在互联网上的云服务器软件组成，以形成PISMO的骨干;客户端将通过5G无线网络连接到后端服务器。 该项目侧重于以使用为中心的设计可用性，以将开发的软件组件融合到一个易于使用，可部署，并最终可转换的系统中，该系统利用现代密码学（例如，安全多方计算、私有信息检索和基于身份的加密）以及用于分布式系统和网络的高级弹性和可靠性技术。 在这项研究中，考虑了两种用户类型：管理员，配置，部署，监控和维护PISMO覆盖，以及在无线5G终端设备上操作PISMO客户端的最终用户。 该研究集中于通过适用于（1）关键基础设施运营，（2）政府用途和（3）军事行动的三个用例来解决有关配置，部署和管理PISMO的难题。 这些用例将导致对面向人类的组件和程序的精确定义。 该项目的范围还考虑在私有云和公共云中的测试平台上部署原型实现，以执行用户研究，捕获用户体验（UX）元素和功能。原型将能够校准系统提供的各种自动化机会，以支持管理员定义设置和维护功能的任务。最后，一个集成和部署的原型解决方案将有意义地和实际地展示本项目研究在可用性、功能性、弹性和可维护性方面的进步。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

This project develops the Privacy-preserving Intrusion-resilient Secure Multiparty-computation-based Overlay (PISMO) system for secure and private communication through existing, non-cooperative 5G infrastructure. PISMO transparently integrates into several widely employed commercial end-user applications such as messaging and content sharing via authoring tools, e.g., Microsoft Office, email, and web-browsing. As several military, government, and critical infrastructure operations rely on such end-user applications, PISMO hardens them against threats. Considered threats range from unintended eavesdropping to sabotaging cyber-attacks. This is accomplished while using existing and affordable 5G communication infrastructure without trusting or cooperating with the 5G operator. Deploying and commercializing the PISMO system contributes to achieving greater national security and protection of communication privacy, wherever such operations are carried out, nonetheless always operating in a secure and resilient, yet highly functional and maintainable manner.The PISMO overlay consists of client software provisioned on 5G end devices and server software deployed in clouds on the Internet to form the backbone of PISMO; clients will connect via the 5G wireless network to the backend servers. The project focuses on use-centric design & usability to converge the developed software components into an easily usable, deployable, and ultimately transitionable system that leverages modern cryptography (e.g., secure multi-party computation, private information retrieval, and identity-based encryption) and advanced resilience and reliability techniques for distributed systems and networks. In this research, two user types are considered; an Administrator, who configures, deploys, monitors, and maintains the PISMO overlay, and an End-User operating the PISMO client on wireless 5G end devices. The research concentrates on solutions to hard questions about configuring, deploying, and managing PISMO via three use cases applicable to (1) critical infrastructure operations, (2) government uses, and (3) military operations. These use cases will lead to precise definitions of the human-facing components and procedures. The project’s scope also considers deploying prototype implementations on testbeds in private and public clouds to perform user studies capturing user experience (UX) elements and features. The prototypes will enable the calibration of various automation opportunities that the system offers in support of the Administrator’s task to define settings and maintain functionality. Lastly, an integrated and deployed prototype solution will meaningfully and practically demonstrate the advances in usability, functionality, resilience, and maintainability that the research in this project provides.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.