In this work, we study two problems in information-theoretic security. Firstly, we study a wireless network where two nodes want to securely exchange messages via an honest-but-curious bidirectional relay. There is no direct link between the user nodes, and all communication must take place through the relay. The relay behaves like a passive eavesdropper, but otherwise follows the protocol it is assigned. Our objective is to design a scheme where the user nodes can reliably exchange messages such that the relay gets no information about the individual messages. We first describe a perfectly secure scheme using nested lattices, and show that our scheme achieves secrecy regardless of the distribution of the additive noise, and even if this distribution is unknown to the user nodes. Our scheme is explicit, in the sense that for any pair of nested lattices, we give the distribution used for randomization at the encoders to guarantee security. We then give a strongly secure lattice coding scheme, and we characterize the performance of both these schemes in the presence of Gaussian noise. We then extend our perfectly-secure and strongly-secure schemes to obtain a protocol that guarantees end-to-end secrecy in a multichip line network. We also briefly study the robustness of our bidirectional relaying schemes to channel imperfections.
In the second problem, we consider the scenario where multiple terminals have access to private correlated Gaussian sources and a public noiseless communication channel. The objective is to generate a group secret key using their sources and public communication in a way that an eavesdropper having access to the public communication can obtain no information about the key. We give a nested lattice-based protocol for generating strongly secure secret keys from independent and identically distributed copies of the correlated random variables. Under certain assumptions on the joint distribution of the sources, we derive achievable secret key rates.
The tools used in designing protocols for both these problems are nested lattice codes, which have been widely used in several problems of communication and security. In this thesis, we also study lattice constructions that permit polynomial-time encoding and decoding. In this regard, we first look at a class of lattices obtained from low-density parity-check (LDPC) codes, called Low-density Construction-A (LDA) lattices. We show that high-dimensional LDA lattices have several “goodness” properties that are desirable in many problems of communication and security. We also present a new class of low-complexity lattice coding schemes that achieve the capacity of the AWGN channel. Codes in this class are obtained by concatenating an inner Construction-A lattice code with an outer Reed-Solomon code or an expander code. We show that this class of codes can achieve the capacity of the AWGN channel with polynomial encoding and decoding complexities. Furthermore, the probability of error decays exponentially in the block length for a fixed transmission rate…
In this work, we study two problems in information-theoretic security. Firstly, we study a wireless network where two nodes want to securely exchange messages via an honest-but-curious bidirectional relay. There is no direct link between the user nodes, and all communication must take place through the relay. The relay behaves like a passive eavesdropper, but otherwise follows the protocol it is assigned. Our objective is to design a scheme where the user nodes can reliably exchange messages such that the relay gets no information about the individual messages. We first describe a perfectly secure scheme using nested lattices, and show that our scheme achieves secrecy regardless of the distribution of the additive noise, and even if this distribution is unknown to the user nodes. Our scheme is explicit, in the sense that for any pair of nested lattices, we give the distribution used for randomization at the encoders to guarantee security. We then give a strongly secure lattice coding scheme, and we characterize the performance of both these schemes in the presence of Gaussian noise. We then extend our perfectly-secure and strongly-secure schemes to obtain a protocol that guarantees end-to-end secrecy in a multichip line network. We also briefly study the robustness of our bidirectional relaying schemes to channel imperfections.
In the second problem, we consider the scenario where multiple terminals have access to private correlated Gaussian sources and a public noiseless communication channel. The objective is to generate a group secret key using their sources and public communication in a way that an eavesdropper having access to the public communication can obtain no information about the key. We give a nested lattice-based protocol for generating strongly secure secret keys from independent and identically distributed copies of the correlated random variables. Under certain assumptions on the joint distribution of the sources, we derive achievable secret key rates.
The tools used in designing protocols for both these problems are nested lattice codes, which have been widely used in several problems of communication and security. In this thesis, we also study lattice constructions that permit polynomial-time encoding and decoding. In this regard, we first look at a class of lattices obtained from low-density parity-check (LDPC) codes, called Low-density Construction-A (LDA) lattices. We show that high-dimensional LDA lattices have several “goodness” properties that are desirable in many problems of communication and security. We also present a new class of low-complexity lattice coding schemes that achieve the capacity of the AWGN channel. Codes in this class are obtained by concatenating an inner Construction-A lattice code with an outer Reed-Solomon code or an expander code. We show that this class of codes can achieve the capacity of the AWGN channel with polynomial encoding and decoding complexities. Furthermore, the probability of error decays exponentially in the block length for a fixed transmission rate…
In this paper, we propose a perfectly secure transmission scheme for an asymmetric bidirectional relay channel. The scheme is based on nested lattice coding with keys generated at both legitimate nodes, consisting of unshared random dithers. These keys are indexed by the past secret mutual transmissions and kept secret from other nodes. This model allows legitimate users to transmit safely their secret messages jointly with the artificial noise (dither) without the help of any dedicated internal or external jamming source. Besides, this scheme achieves perfect secrecy at the best known rate for the relay channel in presence of not only an untrusted relay, but also one passive eavesdropper at uplink and one at downlink, even if both eavesdropper channels are noiseless.
This dissertation studies the fundamental rate limits of wireless communication systems through which confidential messages can be transmitted without being intercepted by an adversary. It is assumed that the adversary is subject to noise and interference, as are the legitimate nodes in the system. The security guarantees offered are irrespective of the computational power of the adversary.
Three themes are developed in parallel throughout the dissertation. The first theme explores the relationship between cooperation and secrecy. In wireless networks, cooperation from intermediate relay nodes are essential for facilitating long range communications. This dissertation considers a series of network models where the information from a source to a destination needs to be kept confidential from intermediate relays. Four different network models with untrusted relay nodes are considered: the three-node relay channel, the two-hop link, the two-way relay channel and the multi-hop line network. These models are studied for relays that are honest but curious. That is, the relay nodes are legitimate nodes with lower security clearance, that willingly carry out the designated relay schemes. Secrecy capacity lower and upper bounds for each channel model are found and cases where secrecy capacity can be found are identified. Next the two-hop link is studied where the relay turns malicious in that it can manipulate the signals being relayed and carry out a Byzantine attack. In this case, two requirements must be satisfied simultaneously: The message must be kept confidential from the relay node, and, any modification carried out by the relay node must be detected reliably by the legitimate parties. The dissertation shows that both requirements can be fulfilled for this model with arbitrarily small overhead.
The next two themes developed in this dissertation serve as the technical foundation for the first theme. One establishes the foundation for providing secrecy using structured codes. Traditionally, the achievability proofs for information theoretic secrecy rely on Shannon’s random codebook generation argument in which the codebook does not exhibit structure. In this dissertation, it is shown that by imposing structure requirements in random codebook generation, higher rates for secure communication can be achieved than known results obtained using the conventional approach. This dissertation develops the necessary tool and general methodology for computing the secrecy rate when a nested lattice structure is used in codebook generation. Two results are presented that rely on this foundation. First, it is proved that, for a class of Gaussian channel models with interference and secrecy constraints, structured codes outperform Gaussian signaling at medium to high SNR. Second, this tool is used to develop a strong secrecy scheme for the two-hop link with an untrusted relay, which in turn is the centerpiece of the Byzantine detection scheme developed in this dissertation.
The third theme is methods of proving strong secrecy. Information theoretic secrecy results often rely on the weak secrecy constraint which provides only asymptotic guarantees with respect to the information rate leaked to the adversary. As this would likely be insufficient in a practical system, a non-asymptotic, strong secrecy guarantee must be sought. More often than not, weak secrecy rates can be strengthened to strong secrecy rates in a straightforward manner, leading back to the justification of proving weak secrecy only. This dissertation challenges this conventional wisdom and identifies two cases where this approach does not follow. In both cases, direct strong secrecy proofs are established. These are: the two-hop link with a Byzantine relay, and models with arbitrarily varying eavesdropper channel considered in the last chapter of this dissertation.
The latter model is motivated by the need to bring the theory of providing unconditional secrecy guarantees closer to practice. In particular, the dissertation addresses the case where the channel that the adversary (eavesdropper) experiences is completely unknown to the legitimate parties. To do so, a multiple input-multiple output (MIMO) wiretap channel is considered where the eavesdropper’s channel is arbitrarily varying. A coding theorem is derived for with this setting. The secrecy rate obtained from this coding theorem is tight in terms of secure degree of freedom, which is a high SNR characterization of the secrecy capacity. In addition, the secure degree of freedom regions for the MIMO multiple access (MAC) wiretap channel and the MIMO broadcast wiretap channel are derived when the legitimate nodes have the same number of antennas, identifying the high SNR characterization of the fundamental transmission limits for these models.
The aim of information-theoretic secrecy is to ensure that an eavesdropper who listens to the wireless transmission of a message can only collect an arbitrarily small number of information bits about this message. In contrast to cryptography, there are no assumptions on the computational power of the eavesdropper. Information-theoretically secret communication has been studied for many particular wireless network topologies. In the main part of this thesis, we consider such communication for arbitrary acyclic wireless network topologies. We provide lower and upper bounds on the strong perfect secrecy capacity for the case when the channels of the network are either Gaussian or deterministic. These results are based on the recent understanding of the capacity of wireless networks (without secrecy constraints) by Avestimehr, Diggavi and Tse. As a side result, we give inner and outer bounds on the capacity region for the multisource problem in arbitrary wireless networks with Gaussian or deterministic signal interaction. For linear deterministic signal interaction, we find the exact capacity region. For Gaussian signal interaction, we are able to bound the gap between the two bounds on the capacity region. This gap depends only on the network topology, but not on the signal-to-noise ratio (SNR), which leads to an approximation of the capacity region for the high SNR regime. We further consider a particular network topology, called the fan-network, in which we assume that an eavesdropper has physical access to every node in a subset of the relay nodes. We give a general upper bound on the perfect secrecy capacity, and we characterize the perfect secrecy capacity for two special cases. In the second part of the thesis, we consider interactive secrecy, i.e., secrecy in the presence of a public feedback link from the destination to the source. We focus on the problem of secret key generation rather than secret communication. The benefit of public discussion for secret key generation in a broadcast channel was first shown by Maurer. We extend his ideas to a relay network called the line network, leading to a lower bound on the strongly secret key capacity for this network topology. Finally, we introduce a new channel coding setup called the interference-multiple access (IMA) channel. This channel is a variant of the interference channel where one of the receivers is required to decode the messages from both transmitters. We derive an inner bound on the capacity region of the IMA channel, as well as an outer bound for the so-called structured IMA channel. In a semi-deterministic version of the structured IMA channel, the bounds match, providing a characterization of the capacity region. In the Gaussian case, we obtain a 1 bit-approximation of the capacity region. We also show an inner bound on the equivocation-capacity region for the IMA channel, where we require that part of the private message for one receiver is kept information-theoretically secret from the other receiver.
A multi-hop line network is considered, where each node can receive signals transmitted by its two neighbors. As such, the model embodies both the interference and broadcast aspects of wireless networks. The leftmost node wishes to send messages to the rightmost node, while keeping these messages confidential from all the intermediate relay nodes. In this setting where any or all of the relay nodes can be eavesdroppers, it is shown that end-to-end secure and reliable communication is possible. Notably, it is shown that an end-to-end secrecy rate that is independent of the number of hops, i.e., intermediate eavesdroppers, is achievable by means of a carefully designed transmission schedule, compute-and-forward relaying and coding strategy utilizing nested lattice codes. The achievable rate obtained indicates that imposing secrecy constraints penalizes the capacity by at most 1 bit per channel use. Therefore, it is concluded that information theoretic secrecy can be guaranteed for this model irrespective of eavesdropping relays and a fixed modest cost for the end-to-end rate.
We consider a source-destination pair that can communicate only through a chain of unauthenticated intermediate relay nodes over AWGN links. In this scenario, it is desirable to use these relays-as otherwise communicating with the destination is impossible-without the relays being able to decode the information flowing through them. This in turn is tantamount to treating the relays as eavesdroppers from whom the information needs to be kept secret. An important question then becomes that of identifying the limits of reliable and secure communication in this network in the information theoretic sense. In particular, we ask whether it is possible to achieve a non-vanishing perfect secrecy rate regardless of the number of hops. In this work, we find that the answer is yes and show that a constant secrecy rate for an arbitrary number of hops is achievable by employing the combination of a lattice code and a random code.
Confidentiality of information is a key consideration in many networking applications, including e-commerce, online banking, and intelligence operations. How can information be communicated reliably to the legitimate users, while keeping it secret from eavesdroppers? How does such a secrecy constraint on communication affect the limits on information flow in the network? In this chapter, we study these questions under the information theoretic notion of secrecy, which requires each eavesdropper to obtain essentially no information about the messages sent from knowledge of its received sequence, the channel statistics, and the codebooks used. We investigate two approaches to achieve secure communication. The first is to exploit the statistics of the channel from the sender to the legitimate receivers and the eavesdroppers. We introduce the wiretap channel as a 2-receiver broadcast channel with a legitimate receiver and an eavesdropper, and establish its secrecy capacity, which is the highest achievable secret communication rate. The idea is to design the encoder so that the channel from the sender to the receiver becomes effectively stronger than the channel to the eavesdropper; hence the receiver can recover the message but the eavesdropper cannot. This wiretap coding scheme involves multicoding and randomized encoding. If the channel from the sender to the receiver is weaker than that to the eavesdropper, however, secret communication at a positive rate is not possible. This brings us to the second approach to achieve secret communication, which is to use a secret key shared between the sender and the receiver but unknown to the eavesdropper. We show that the rate of such secret key must be at least as high as the rate of the confidential message. This raises the question of how the sender and the receiver can agree on such a long secret key in the first place. After all, if they had a confidential channel with sufficiently high capacity to communicate the key, then why not use it to communicate the message itself! We show that if the sender and the receiver have access to correlated sources (e.g., through a satellite beaming common randomness to them), then they can still agree on a secret key even when the channel has zero secrecy capacity. We first consider the source model for key agreement, where the sender communicates with the receiver over a noiseless public broadcast channel to generate a secret key from their correlated sources.