CSR: Small: Collaborative Research: Sensorprint: Hardware-Enforced Information Authentication for Mobile Systems

CSR：小型：协作研究：Sensorprint：移动系统的硬件强制信息认证

• 批准号: 1526102
• 负责人: Radu Sion
• 金额: $ 25万
• 依托单位: SUNY at Stony Brook
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1526102&HistoricalAwards=false
• 关键词: CSR; Small; Collaborative; Research; Sensorprint

Today's societies are intricately fused through a vast set of technology-driven networks, mostly mobile-based. Individuals equipped with feature-rich mobile devices are becoming the real-time eyes of world events, providing invaluable insights into remote, hard to access sites and events. However, in critical politically and socially charged settings an acceptable level of trust is difficult, especially since current technologies allow easy forging, manipulation and fabrication of data. The goal of this project is to design and build a mobile data technology with increased authenticity and integrity assurances. Of primary importance is the proof that data have been captured live on the actual mobile device and not fabricated. The new framework will more accurately verify that mobile data and the device sensor streams simultaneously captured are factually related and act as the required witness to the authenticity of reported data - a fundamental role in establishing the credibility of mobile and social media. Applications with important social impact include citizen journalism, smart city management and prototype verification.The project will investigate, develop and evaluate a framework for secure and efficient sensor-based mobile data verification mechanisms. In a first thrust, the team will leverage TrustZone to build a trusted mobile device platform to bootstrap trust into sensor readings captured on the device and provide secure storage and a secure execution environment for sensitive functions. In a second thrust, the team will devise solutions to securely and efficiently capture, authenticate, communicate, archive, search, and access mobile device sensor snapshots ("sensorprints"). Finally, the team will develop mechanisms to verify the consistency between mobile data and simultaneously captured sensor streams. In addition, the developed solutions will be evaluated on newly introduced sensor-centric data plagiarism attacks and mobility based data categories.

当今社会通过大量技术驱动的网络（主要是基于移动的）错综复杂地融合在一起。配备功能丰富的移动设备的个人正在成为世界事件的实时眼睛，为远程、难以访问的站点和事件提供宝贵的见解。然而，在关键的政治和社会环境中，达到可接受的信任水平是很困难的，特别是因为当前的技术允许轻松伪造、操纵和制造数据。该项目的目标是设计和构建具有更高真实性和完整性保证的移动数据技术。 最重要的是证明数据是在实际移动设备上实时捕获的，而不是捏造的。新框架将更准确地验证同时捕获的移动数据和设备传感器流是否确实相关，并充当报告数据真实性所需的见证——这在建立移动和社交媒体的可信度方面发挥着重要作用。 具有重要社会影响的应用包括公民新闻、智慧城市管理和原型验证。该项目将调查、开发和评估安全高效的基于传感器的移动数据验证机制的框架。首先，该团队将利用 TrustZone 构建可信移动设备平台，将信任引导到设备上捕获的传感器读数中，并为敏感功能提供安全存储和安全执行环境。第二个重点是，该团队将设计解决方案来安全有效地捕获、验证、通信、存档、搜索和访问移动设备传感器快照（“传感器指纹”）。最后，该团队将开发机制来验证移动数据和同时捕获的传感器流之间的一致性。此外，开发的解决方案将根据新引入的以传感器为中心的数据剽窃攻击和基于移动性的数据类别进行评估。