TWC: Small: Physiological Information Leakage: A New Front on Health Information Security

TWC：小：生理信息泄露：健康信息安全新战线

• 批准号: 1617628
• 负责人: Niraj Jha
• 金额: $ 50万
• 依托单位: Princeton University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-10-01 至 2020-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1617628&HistoricalAwards=false
• 关键词: TWC; Small; Physiological; Information; Leakage

With the growing use of implantable and wearable medical devices, information security for such devices has become a major concern. Prior work in this area mostly focuses on attacks on the wireless communication channel among these devices and health data stored in online databases. The proposed work is a departure from this line of research and is motivated by acoustic and electromagnetic physiological information leakage from the medical devices. This type of information leakage can also directly occur from the human body, thus raising privacy concerns. This proposal will investigate physiological information from both the medical devices and the body itself and find countermeasures against this form of information leakage. This research will be accompanied with rapid dissemination of results, placement of software tools on the web for other researchers to take advantage of, and inclusion of the newly discovered material in a course that the PI teaches. In addition to graduate students, undergraduates and high school students will also take part in this research, with emphasis on participation by students from underrepresented groups.This proposal investigates privacy attacks on human health by targeting physiological signals that continuously emanate from the human body due to the normal functioning of its organs., as well as the signals that emanate from implantable and wearable medical devices. It will also investigate metadata (frequency of communication, time between consecutive transmissions, communication protocol, packet size, detection range, modulation protocol, etc.) collected from such devices to see how they leak vital health information. Finally, it will develop countermeasures against health information leakage from these devices. A comprehensive evaluation of data leakage from the human heart, lungs, skin, devices like insulin pumps and blood pressure monitors would follow.

随着植入式和可穿戴式医疗设备的使用不断增加，此类设备的信息安全已成为一个主要问题。该领域之前的工作主要集中在对这些设备之间的无线通信通道和在线数据库中存储的健康数据的攻击。拟议的工作偏离了这一研究方向，其动机是医疗设备中的声学和电磁生理信息泄漏。 这种类型的信息泄露也可能直接发生在人体上，从而引发隐私问题。该提案将调查来自医疗设备和身体本身的生理信息，并找到针对这种形式的信息泄露的对策。这项研究将伴随着结果的快速传播、在网络上放置软件工具以供其他研究人员利用，以及将新发现的材料纳入 PI 教授的课程中。除了研究生之外，本科生和高中生也将参与这项研究，重点是来自代表性不足群体的学生的参与。该提案通过针对人体持续发出的生理信号来调查对人类健康的隐私攻击。其器官的正常功能，以及可植入和可穿戴医疗设备发出的信号。它还将调查从此类设备收集的元数据（通信频率、连续传输之间的时间、通信协议、数据包大小、检测范围、调制协议等），以了解它们如何泄漏重要的健康信息。最后，它将制定针对这些设备泄露健康信息的对策。随后将对人类心脏、肺、皮肤、胰岛素泵和血压监测仪等设备的数据泄漏进行全面评估。