Collaborative Research: SaTC: CORE: Medium: An Anti-tracking and Robocall-free Architecture for Next-G Mobile Networks

协作研究：SaTC：CORE：Medium：下一代移动网络的防跟踪和无 Robocall 架构

• 批准号: 2247561
• 负责人: Yang Xiao
• 金额: $ 30万
• 依托单位: University of Kentucky Research Foundation
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-05-01 至 2027-04-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2247561&HistoricalAwards=false
• 关键词: Collaborative; Research; SaTC; CORE; Medium

Mobile networks have become integral to modern life, providing their users ubiquitous access to voice, text, and data services. However, this reliance on mobile phones has raised serious privacy concerns, as mobile network operators (MNOs) have the ability to track and profile users. While the 5G system offers some privacy protection through the use of concealed and temporary subscriber identifiers, those with access to MNO databases can still track and profile users. This project addresses this problem by developing a fully functional anonymous mobile access architecture that allows legitimate mobile subscribers to access the network without revealing their real identity. The architecture is designed to disable mobile tracking and profiling using anonymous identifiers ensuring that connections made by the same user at different times cannot be linked. The design also supports critical incumbent mobile network functions, including the identification of a user equipment (UE) and recovery of its mobility history under legal intervention, while giving users control over the level of privacy they risk under their own mobile phone use contexts.The research team aims to achieve the above goal by integrating decentralized identifiers (DID) and anonymous verifiable credential (VC) schemes into the 5G authentication and key agreement (5G-AKA) protocol. Key research tasks to realize this anonymous mobile access architecture include developing a novel secure callee discovery mechanism leveraging DID to handle the voice call function, supporting user accountability and ensuring compatibility with existing lawful interception requirements, enabling flexible billing and rate control by service network, disabling robocall scams, quantifying privacy risks and developing identifier refreshing strategies, and conducting experiments and validation. Successful results for this research will enable anti-tracking capabilities while using mobile networks and offer a new way of thinking about privacy enhancement technologies in the digital world. The outcomes of this research will be made publicly available online, including tutorials, talks, publications, and open-source software. The research team is committed to actively expanding the involvement of underrepresented groups.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

移动网络已成为现代生活不可或缺的一部分，使他们的用户无处不在地访问语音，文本和数据服务。但是，由于移动网络运营商（MNOS）具有跟踪和配置用户的能力，因此对手机的依赖引起了严重的隐私问题。虽然5G系统通过使用隐藏和临时用户标识符提供了一些隐私保护，但访问MNO数据库的人仍然可以跟踪和个人资料用户。该项目通过开发功能齐全的匿名移动访问体系结构来解决此问题，该架构允许合法的移动订户访问网络而不揭示其真实身份。该体系结构旨在使用匿名标识符禁用移动跟踪和分析，以确保在不同时间在不同时间建立的连接无法链接。该设计还支持关键的现有移动网络功能，包括对用户设备（UE）的识别以及在法律干预下恢复其移动性历史记录，同时使用户控制他们在自己的手机使用环境下风险的风险。该研究团队旨在通过集成了分散的标识符（DID）和匿名验证符号（vc）和5G的协议，以实现上述目标，以实现上述目标（DID）和匿名的标识（VC）和5G afterak and prokecation 5g and eartectiation（vc）和5G AIRSENT（vc）和5G air（5G）。实现这一匿名移动访问体系结构的关键研究任务包括开发一种新型的安全Callee发现机制来处理语音呼叫功能，支持用户责任制并确保与现有合法拦截要求的兼容，通过服务网络允许灵活的计费和速率控制，从而使Robocall Scams欺诈，量化Robocall Scams，量化Robocall Scam，量化隐私风险风险和验证者的识别和验证策略，并进行验证和进行验证，并进行验证。这项研究的成功结果将在使用移动网络的同时实现反向跟踪功能，并为数字世界中的隐私增强技术提供新的思考方式。这项研究的结果将在网上公开提供，包括教程，会谈，出版物和开源软件。研究小组致力于积极扩大代表性不足的群体的参与。该奖项反映了NSF的法定任务，并被认为是值得通过基金会的知识分子优点和更广泛的影响审查标准通过评估来获得支持的。

项目成果

AAKA: An Anti-Tracking Cellular Authentication Scheme Leveraging Anonymous Credentials

AAKA：利用匿名凭证的反跟踪蜂窝身份验证方案

• DOI: 10.14722/ndss.2024.24617
• 发表时间: 2024
• 期刊: Network and Distributed System Security (NDSS
• 作者: Yu, Hexuan;Du, Changlai;Xiao, Yang;Keromytis, Angelos;Wang, Chonggang;Gazda, Robert;Hou, Y. Thomas;Lou, Wenjing
• 通讯作者: Lou, Wenjing

UCBlocker: Unwanted Call Blocking Using Anonymous Authentication

UCBlocker：使用匿名身份验证阻止不需要的呼叫

• 发表时间: 2023
• 期刊: 32nd USENIX Security Symposium (USENIX Security 23
• 作者: Du, Changlai;Yu, Hexuan;Xiao, Yang;Hou, Y. Thomas;Keromytis, Angelos D.;Lou, Wenjing
• 通讯作者: Lou, Wenjing

Rethinking Single Sign-On: A Reliable and Privacy-Preserving Alternative with Verifiable Credentials

重新思考单点登录：具有可验证凭证的可靠且保护隐私的替代方案

• DOI: 10.1145/3605760.3623767
• 发表时间: 2023
• 期刊: Proceedings of the 10th ACM Workshop on Moving Target Defense
• 作者: Johnson, Athan D.;Alom, Ifteher;Xiao, Yang
• 通讯作者: Xiao, Yang