TWC: Small: Techniques and Tools for Enforcing Proximity-based Policies in Wireless Systems

TWC：小型：在无线系统中实施基于邻近策略的技术和工具

• 批准号: 1527144
• 负责人: Yao Liu
• 金额: $ 30万
• 依托单位: University of South Florida
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-01 至 2018-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1527144&HistoricalAwards=false
• 关键词: TWC; Small; Techniques; Tools; Enforcing

As wireless technologies become more pervasive, it becomes increasingly important for devices to authenticate the locations of other devices. For example, patients with implantable medical devices (IMDs) may reasonably expect that any device used to control their IMD would have to be within arm's reach, to help prevent unauthorized access to their device. In other words, IMDs should enforce policies based on the proximity, and in general the location, of wirelessly connected devices. Similar examples exist in many application areas: contactless payment terminals may require credit cards to be located in front of the terminals; wireless routers may require network users to be located in the same building; GPS devices may require signals to come from satellites (rather than from adversaries masquerading as satellites); and mobile phones may require signals to come from known, legitimate cell-tower locations. Hence, the security of many wireless devices could be improved by enforcing proximity-based policies on remote devices' locations.This project aims to address the problem that, although proximity-policy enforcement would improve the security of many wireless devices, robust techniques and tools do not yet exist for enforcing such policies. The project addresses this problem by creating such techniques and tools. The proximity-authentication techniques will allow a device to passively authenticate the location of remote device, without having to send messages to, or share secrets with, the remote device. They identify the proximity of a remote target by utilizing the multipath effect, in which a wireless signal sent by a transmitter propagates to the receiver in the air along multiple paths due to reflection, diffraction, and scattering. The proximity authentication decision is made based on amplitude ratios of wireless signal copies traveling on these prorogation paths. The proximity-policy enforcement tools will include (1) an expressive language, and a graphical interface, for specifying remote-device location policies, (2) an engine for statically analyzing specified location policies, in order to notify security engineers as to how accurately their policies can be enforced and whether their policies are unsatisfiable, and (3) a compilation module to transform valid policies into concrete enforcement code that can be inlined or otherwise hooked into a device's existing connection-establishment code.

随着无线技术变得越来越普遍，对设备进行身份验证其他设备的位置变得越来越重要。例如，具有可植入医疗设备（IMD）的患者可能会合理地期望任何用于控制其IMD的设备都必须在武器范围内，以防止未经授权访问其设备。换句话说，IMD应根据接近性和无线连接设备的位置执行策略。许多应用程序领域也存在类似的示例：非接触式支付终端可能需要信用卡位于终端的前面；无线路由器可能要求网络用户位于同一建筑物中； GPS设备可能需要来自卫星的信号（而不是伪装成卫星的对手）；手机可能需要信号来自已知的合法牢房位置。因此，通过在远程设备的位置执行基于邻近的策略，可以提高许多无线设备的安全性。该项目旨在解决以下问题，尽管接近 - 政策的执行将提高许多无线设备的安全性，但强大的技术和工具，执行此类政策尚未存在。该项目通过创建此类技术和工具来解决此问题。接近授权技术将允许设备被动地验证远程设备的位置，而无需将消息发送到远程设备或与远程设备共享秘密。他们通过利用多路径效应来识别远程目标的接近度，在这种效应中，由于反射，衍射和散射，发射器发送的无线信号沿多个路径传播到空气中的接收器。接近身份验证决定是基于无线信号的幅度比率做出的，这些信号副本副本在这些prorogation路径上传播。接近政策的执行工具将包括（1）一种表达语言和图形界面，用于指定远程设备的位置策略，（2）用于静态分析指定位置策略的引擎，以通知安全工程师，以通知安全工程师。他们的策略可以执行，是否不满意，以及（3）将有效策略转换为具体执行代码的汇编模块，这些策略可以被嵌入或以其他方式挂钩到设备现有的连接建立代码中。