NSF Convergence Accelerator Track G: Privacy-preserving Intrusion-resilient Secure Multiparty-computation-based Overlay (PISMO) for Secure and Resilient Communication Through 5G

NSF 融合加速器轨道 G：隐私保护、抗入侵、基于安全多方计算的覆盖 (PISMO)，通过 5G 实现安全和弹性通信

• 批准号: 2226457
• 负责人: Linda Briesemeister
• 金额: $ 74.98万
• 依托单位: SRI International
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-08-01 至 2023-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2226457&HistoricalAwards=false
• 关键词: NSF; Convergence; Accelerator; Track; Privacy

This project develops the Privacy-preserving Intrusion-resilient Secure Multiparty-computation-based Overlay (PISMO) system for secure and private communication through existing, non-cooperative 5G infrastructure. PISMO transparently integrates into several widely employed commercial end-user applications such as messaging and content sharing via authoring tools, e.g., Microsoft Office, email, and web-browsing. As several military, government, and critical infrastructure operations rely on such end-user applications, PISMO hardens them against threats. Considered threats range from unintended eavesdropping to sabotaging cyber-attacks. This is accomplished while using existing and affordable 5G communication infrastructure without trusting or cooperating with the 5G operator. Deploying and commercializing the PISMO system contributes to achieving greater national security and protection of communication privacy, wherever such operations are carried out, nonetheless always operating in a secure and resilient, yet highly functional and maintainable manner.The PISMO overlay consists of client software provisioned on 5G end devices and server software deployed in clouds on the Internet to form the backbone of PISMO; clients will connect via the 5G wireless network to the backend servers. The project focuses on use-centric design & usability to converge the developed software components into an easily usable, deployable, and ultimately transitionable system that leverages modern cryptography (e.g., secure multi-party computation, private information retrieval, and identity-based encryption) and advanced resilience and reliability techniques for distributed systems and networks. In this research, two user types are considered; an Administrator, who configures, deploys, monitors, and maintains the PISMO overlay, and an End-User operating the PISMO client on wireless 5G end devices. The research concentrates on solutions to hard questions about configuring, deploying, and managing PISMO via three use cases applicable to (1) critical infrastructure operations, (2) government uses, and (3) military operations. These use cases will lead to precise definitions of the human-facing components and procedures. The project’s scope also considers deploying prototype implementations on testbeds in private and public clouds to perform user studies capturing user experience (UX) elements and features. The prototypes will enable the calibration of various automation opportunities that the system offers in support of the Administrator’s task to define settings and maintain functionality. Lastly, an integrated and deployed prototype solution will meaningfully and practically demonstrate the advances in usability, functionality, resilience, and maintainability that the research in this project provides.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该项目开发了隐私保护、抗入侵、基于安全多方计算的覆盖 (PISMO) 系统，通过现有的非合作 5G 基础设施实现安全和私密的通信，PISMO 透明地集成到多种广泛使用的商业最终用户应用程序中，例如消息传递。由于一些军事、政府和关键基础设施运营依赖于此类最终用户应用程序，PISMO 变得更加坚固。所考虑的威胁包括意外窃听和破坏性网络攻击。这是在不信任或不与 5G 运营商合作的情况下实现的。PISMO 系统的部署和商业化有助于实现更大的国家安全和保护。通信隐私，无论在何处执行此类操作，但始终以安全、有弹性、功能强大且可维护的方式运行。PISMO 覆盖层由 5G 终端设备上配置的客户端软件组成部署在互联网云中的服务器软件将构成 PISMO 的骨干，客户端将通过 5G 无线网络连接到后端服务器。可部署且最终可转换的系统，利用现代密码学（例如，安全多方计算、私有信息检索和基于身份的加密）以及分布式系统和网络的高级弹性和可靠性技术。考虑用户类型；配置、部署、监控和维护 PISMO 覆盖的管理员，以及在无线 5G 终端设备上操作 PISMO 客户端的最终用户。 PISMO 通过三个适用于 (1) 关键基础设施运营、(2) 政府用途和 (3) 军事行动的用例，这些用例将导致项目面向人员的组件和程序的精确定义。范围还考虑在私有云和公共云的测试台上部署原型实现，以执行捕获用户体验（UX）元素和功能的用户研究。原型将能够校准系统提供的各种自动化机会，以支持管理员定义设置的任务。最后，集成和部署的原型解决方案将有意义且实际地展示该项目的研究在可用性、功能性、弹性和可维护性方面的进步。该奖项是 NSF 的法定使命，并通过评估被认为值得支持。使用基金会的智力价值和更广泛的影响审查标准。