TWC: Small: Physiological Information Leakage: A New Front on Health Information Security

TWC：小：生理信息泄露：健康信息安全新战线

• 批准号: 1617628
• 负责人: Niraj Jha
• 金额: $ 50万
• 依托单位: Princeton University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-10-01 至 2020-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1617628&HistoricalAwards=false
• 关键词: TWC; Small; Physiological; Information; Leakage

With the growing use of implantable and wearable medical devices, information security for such devices has become a major concern. Prior work in this area mostly focuses on attacks on the wireless communication channel among these devices and health data stored in online databases. The proposed work is a departure from this line of research and is motivated by acoustic and electromagnetic physiological information leakage from the medical devices. This type of information leakage can also directly occur from the human body, thus raising privacy concerns. This proposal will investigate physiological information from both the medical devices and the body itself and find countermeasures against this form of information leakage. This research will be accompanied with rapid dissemination of results, placement of software tools on the web for other researchers to take advantage of, and inclusion of the newly discovered material in a course that the PI teaches. In addition to graduate students, undergraduates and high school students will also take part in this research, with emphasis on participation by students from underrepresented groups.This proposal investigates privacy attacks on human health by targeting physiological signals that continuously emanate from the human body due to the normal functioning of its organs., as well as the signals that emanate from implantable and wearable medical devices. It will also investigate metadata (frequency of communication, time between consecutive transmissions, communication protocol, packet size, detection range, modulation protocol, etc.) collected from such devices to see how they leak vital health information. Finally, it will develop countermeasures against health information leakage from these devices. A comprehensive evaluation of data leakage from the human heart, lungs, skin, devices like insulin pumps and blood pressure monitors would follow.

随着植入式和可穿戴医疗设备的日益增长，此类设备的信息安全已成为主要问题。该领域的先前工作主要集中在这些设备和在线数据库中存储的健康数据之间对无线通信渠道的攻击。拟议的工作是与这一研究偏离的，是由医疗设备的声学和电磁生理信息泄漏所激发的。 这种类型的信息泄漏也可以直接来自人体，从而引发隐私问题。该建议将调查医疗设备和身体本身的生理信息，并发现针对这种信息泄漏形式的对策。这项研究将伴随着结果的快速传播，网络上的软件工具的放置，以供其他研究人员利用，并在PI教授的课程中包含新发现的材料。除研究生外，本科生和高中生还将参与这项研究，重点是来自代表性不足的群体的学生参与。该提案通过针对人体的生理信号来调查对人类健康的隐私攻击，这些信号因其器官的正常运作而导致人体的正常功能，以及该机构的正常工作。它还将研究元数据（通信的频率，连续变速箱之间的时间，通信协议，数据包大小，检测范围，调制协议等），以查看它们如何泄漏重要的健康信息。最后，它将开发对这些设备健康信息泄漏的对策。将随后对人心脏，肺，皮肤，胰岛素泵和血压监测器等设备的数据泄漏进行全面评估。