arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2103.10671cs.CR
收藏

Wisecr:多个无电池计算RFID设备的安全同步码鉴别

Wisecr: Secure Simultaneous Code Disseminationto Many Batteryless Computational RFID Devices

Yang Su, Michael Chesser, Yansong Gao, Alanson P. Sample, Damith C. Ranasinghe

摘要:

在网络物理系统和物联网(IoT)中出现的超低功率微小规模计算设备在收集的能量上运行,间歇地供电,具有有限的计算能力,并且在没有操作系统的监督控制的情况下操作的专用固件的控制下执行感测和致动功能。无线更新或修补这些设备的固件是不可避免的。我们认为具有挑战性的问题,同时和安全的固件更新或修补一类典型的设备-计算射频识别(CRFID)设备。我们提出了Wisecr,第一个安全和同步的无线代码传播机制,多个设备,防止恶意代码注入攻击和知识产权(IP)盗窃,同时实现远程认证的代码安装。重要的是,Wisecr的设计符合CRFID设备和系统采用的现有ISO兼容通信协议标准。我们全面评估了Wisecr的开销,展示了它在符合标准的协议上的实现,分析了它的安全性,并使用流行的CRFID设备实现了端到端的实现-开源代码在GitHub上发布。

英文摘要:

Emerging ultra-low-power tiny scale computing devices in Cyber-Physical Systems %and Internet of Things (IoT) run on harvested energy, are intermittently powered, have limited computational capability, and perform sensing and actuation functions under the control of a dedicated firmware operating without the supervisory control of an operating system. Wirelessly updating or patching the firmware of such devices is inevitable. We consider the challenging problem of simultaneous and secure firmware updates or patching for a typical class of such devices -- Computational Radio Frequency Identification (CRFID) devices. We propose Wisecr, the first secure and simultaneous wireless code dissemination mechanism to multiple devices that prevent malicious code injection attacks and intellectual property (IP) theft, whilst enabling remote attestation of code installation. Importantly, Wisecr is engineered to comply with existing ISO compliant communication protocol standards employed by CRFID devices and systems. We comprehensively evaluate Wisecr's overhead, demonstrate its implementation over standards-compliant protocols, analyze its security and implement an end-to-end realization with popular CRFID devices -- the open-source code is released on GitHub.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑