TWC: Small: Collaborative: Secure Data Charging Architecture for Mobile Devices in 3G/4G Cellular Networks: Vulnerabilities and Solutions

TWC：小型：协作：3G/4G 蜂窝网络中移动设备的安全数据充电架构：漏洞和解决方案

• 批准号: 1421933
• 负责人: Chunyi Peng
• 金额: $ 24.56万
• 依托单位: Ohio State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-07-01 至 2017-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1421933&HistoricalAwards=false
• 关键词: TWC; Small; Collaborative; Secure; Data

Wireless cellular networks serve as an essential cyber-infrastructure for mobile users. Unlike the Internet, cellular networks have adopted usage-based charging, rather than the simpler flat-rate charging. Data-plan subscribers have to pay their data bills based on the consumed traffic volume in 3G/4G networks. Although this metered charging system has been operational and generally successful for years, the security study of such a system remains largely unaddressed. The objective of this research is to investigate the insecurity aspects of large-scale cellular network infrastructures, identify their security loopholes, sketch novel attacks that exploit such loopholes, devise defenses that protect from such attacks, and validate the attacks and the defenses via real experiments in operational carriers. The proposed study helps us to better understand how various forms of vulnerabilities exhibit in the cellular system, open new venue for secure system design and operations, and refine the networking design that makes both the infrastructure and the user devices more resilient against malicious threats.By addressing the key security issues of mobile data charging, the proposed research helps to protect the multi-trillion dollar network operations. It not only secures revenues of global cellular operators, but also protects the monetary rights of billions of mobile users. The proposed solutions will help to renovate the existing network infrastructure, and shape the upcoming 5G cellular technology in its standardization. It will also train a new generation of engineers and students in this field. The PIs will interact closely with industry for possible technology transfer.

无线蜂窝网络是移动用户的重要网络基础设施。与互联网不同，蜂窝网络采用基于使用情况的收费，而不是更简单的统一费率收费。数据套餐用户必须根据 3G/4G 网络消耗的流量支付数据费用。尽管这种计量收费系统已经投入运行并且通常是成功的多年，但是这种系统的安全性研究在很大程度上仍然没有得到解决。本研究的目的是调查大规模蜂窝网络基础设施的不安全方面，识别其安全漏洞，描绘利用此类漏洞的新颖攻击，设计防御此类攻击的防御措施，并通过真实实验验证攻击和防御在运营运营商中。拟议的研究有助于我们更好地了解各种形式的漏洞如何在蜂窝系统中表现出来，为安全系统设计和操作开辟新的场所，并完善网络设计，使基础设施和用户设备更能抵御恶意威胁。拟议的研究解决了移动数据计费的关键安全问题，有助于保护价值数万亿美元的网络运营。它不仅保障了全球移动运营商的收入，还保护了数十亿移动用户的货币权利。拟议的解决方案将有助于改造现有的网络基础设施，并塑造即将到来的 5G 蜂窝技术的标准化。它还将培训该领域的新一代工程师和学生。 PI 将与业界密切互动，以实现可能的技术转让。