POPSTAR · Reasoning about Physical properties Of security Protocols with an Application To contactless Systems

The shrinking size of microprocessors as well as the ubiquity of wireless communication have led to the proliferation of portable computing devices with novel security requirements. Whereas traditional security protocols achieve their security goals relying solely on cryptographic primitives like encryptions and hash functions, theprotocols employed to secure these devices establish and rely in addition on properties of the physical world. For instance, they may use, as basic building blocks, protocols for ensuring physical proximity, securelocalisation, or secure neighbourhood discovery.Unfortunately, we often hear about ill-conceived systems, and portable computing devices raise some serious concerns about privacy.To draw meaningful conclusions, the security analysis of these systems has to be done taking into account physical properties, such as transmission delay, network topology, and node positions. This contrasts sharply with standard models used to analyse traditional protocols.The main objective of the POPSTAR project is to develop foundations and practical tools to analyse modern securityprotocols that establish and rely on physical properties. In particular, we will:- devise models and develop techniques to make possible a rigorous analysis of cryptographic protocols that establish and rely on physical properties;- develop foundations and practical tools for formally verifying security properties, as well as privacy properties that play a prominent role is many applications;- experiment the developed techniques for analysing the security of modern contactless systems.The POPSTAR project will significantly advance the use of formal verification to contribute to the security analysis of protocols that rely on physical properties. This project is bold and ambitious, and answers the forthcoming expectation from consumers and citizens for high level of trust and confidence about contactless nomadic devices.