Cryptographic Enhancing of Data Security in IoT Devices

物联网正在给我们的生活带来革命性的变化。在物联网中，所有日常物品都相互连接，并自动相互通信。物联网设备处理的数据可能是隐私敏感的，例如在智能医疗保健的情况下，并且可能是安全关键的，例如在智能制造的情况下，这会引起严重的信息安全问题。*本研究计划的总体目标是设计、分析和实施端到端物联网安全和隐私解决方案，重点是(A)物联网系统中数据保护的持久性和(B)物联网数据在不同物联网设备之间的不同敏感级别。作为这项研究计划的结果，我们将产生可靠和实用的可证明安全系统的实施，并反过来增强物联网系统用户的情景隐私和安全。我们将通过确定物联网场景中数据完整性和机密性方面的挑战，并通过设计新的方案来解决这些挑战，来实现这一目标。然后，我们通过概念验证实施来补充我们的发现，并将其进一步开发为端到端包，为行业标准化和部署做好准备。*物联网设备变得越来越智能，包含更多关于我们的安全关键和隐私敏感信息，同时变得更小-使它们成为非常吸引攻击者的目标。在为普适计算提供巨大机遇的同时，智能设备的小型化带来了许多安全和隐私问题，因为传统的数字信息保护机制不再有效。因此，物联网负担不起复杂的算法和对轻量级替代方案的需求。我们将研究新的技术和方法来开发安全协议，这些协议足够轻量级，可以在物联网的小型传感器中使用，同时提供足够的上下文安全和隐私保证。*另一个挑战是保密性要求的持久性。许多物联网设备部署的预期寿命超过十年，或者存储的信息本应保密数十年。这将它们带入了量子计算威胁的范围，目前标准化的公钥方案不再安全。虽然目前存在量子抵抗解决方案，但它们还没有标准化，对于许多物联网场景来说肯定不够轻。我们将研究为物联网设备设计可扩展的量子抵抗解决方案的新方法，并以灵活的方式设计和实施它们，提供加密灵活性。*物联网的另一个痛点是高效且可扩展的消息和设备身份验证，这通常通过安全管理密钥和凭据来实现。这些技术高度依赖公钥密码术，而公钥密码术成本高昂，并且无法扩展到许多物联网设置。我们将提出解决消息和设备身份验证的替代技术。

Internet-of-Things, where everyday objects are all connected and autonomously communicate with one another, is revolutionizing our lives. The data handled by the IoT devices can be privacy-sensitive, e.g., in the case of smart healthcare, and safety-critical, e.g., in the case of smart manufacturing, giving rise to serious information security concerns. ******The overarching goal of this research program is to design, analyze and implement end-to-end IoT security and privacy solutions, with an emphasis on (a) longevity of data protection in the IoT systems and (b) varying sensitivity levels of the IoT data among different IoT devices. As a result of this research program, we will produce robust and practical implementations of provably secure systems and, in turn, enhance the contextual privacy and security of users of IoT systems. We will achieve this goal by identifying the challenges with respect to integrity and confidentiality of data in IoT scenarios and addressing them by designing new schemes. Then, we complement our findings with a proof-of-concept implementation and further develop it to an end-to-end package which is ready for standardization and deployment in the industry.******IoT devices are getting smarter and contain more safety-critical and privacy-sensitive information about us while becoming smaller - making them a very appealing target for attackers. While providing a great opportunity for ubiquitous computing, the miniaturization of smart devices brings many security and privacy concerns as the traditional mechanisms for safeguarding digital information are no longer adequate. As a result, IoT cannot afford complex algorithms and demands for lightweight alternatives. We will investigate new techniques and approaches for developing security protocols that are lightweight enough to be used in a small sensor in IoT while at the same time provide adequate and contextual security and privacy guarantees.******Another challenge is longevity of the confidentiality requirement. Many IoT devices are deployed with life expectancy of more than a decade or are storing information that are meant to remain confidential for decades. This brings them in the scope of the quantum computing threat where currently standardized public-key schemes are no longer secure. While quantum-resistant solutions currently exist, they are not yet standardized and definitely not lightweight enough for many IoT scenarios. We will investigate new approaches in designing scalable quantum-resistant solutions for IoT devices and design and implement them in a flexible manner providing crypto-agility. ******One other IoT pain point is efficient and scalable message and device authentication which are typically achieved by secure management of cryptographic keys and credentials. These techniques are highly relying on public-key cryptography which are expensive and not scalable for many IoT settings. We will propose alternative techniques to address message and device authentication.