Sea of Lights：在黑暗中实用的设备到设备安全引导
Sea of Lights: Practical Device-to-Device Security Bootstrapping in the Dark
摘要：
在当今的信息和通信系统中，引导安全性的实用解决方案严重依赖于用于身份验证以及密钥和信任管理的集中式服务。对于移动用户来说尤其如此。谷歌或Facebook等身份提供商的活跃用户群各为20亿，截至2018年初，移动运营商的用户数量超过50亿。如果这些集中式服务由于自然或人为灾害、大规模停电或全国范围的审查而完全“黑暗”，则用户将没有实际的解决方案来引导其移动设备上的安全性。现有的分布式解决方案，例如所谓的信任网络，不够轻量级。此外，它们既不支持移动设备上的交叉应用程序，也不支持使用硬件安全模块对关键材料进行强有力的保护。我们提出海的光（SOL），一个实用的轻量级方案引导设备到设备的安全无线，从而实现安全的分布式自组织网络。它是专门为“在黑暗中”运行而设计的，为关键材料提供了强有力的保护，并为建立一个轻量级的信任网提供了一种直观的手段。SoL特别适合于在紧急响应协调等场景中的本地或城市操作，它有助于遏制/限制错误信息的传播。作为概念证明，我们在Android平台上实现SoL，并在真实的移动设备上测试其可行性。我们进一步评估其关键性能方面使用模拟。
英文摘要：
Practical solutions to bootstrap security in today's information and communication systems critically depend on centralized services for authentication as well as key and trust management. This is particularly true for mobile users. Identity providers such as Google or Facebook have active user bases of two billion each, and the subscriber number of mobile operators exceeds five billion unique users as of early 2018. If these centralized services go completely `dark' due to natural or man made disasters, large scale blackouts, or country-wide censorship, the users are left without practical solutions to bootstrap security on their mobile devices. Existing distributed solutions, for instance, the so-called web-of-trust are not sufficiently lightweight. Furthermore, they support neither cross-application on mobile devices nor strong protection of key material using hardware security modules. We propose Sea of Lights(SoL), a practical lightweight scheme for bootstrapping device-to-device security wirelessly, thus, enabling secure distributed self-organized networks. It is tailored to operate `in the dark' and provides strong protection of key material as well as an intuitive means to build a lightweight web-of-trust. SoL is particularly well suited for local or urban operation in scenarios such as the coordination of emergency response, where it helps containing/limiting the spreading of misinformation. As a proof of concept, we implement SoL in the Android platform and hence test its feasibility on real mobile devices. We further evaluate its key performance aspects using simulation.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
