With the growing demand for wireless spectrum, dynamic spectrum sharing (DSS) frameworks such as the Citizens Broadband Radio Service (CBRS) have emerged as practical solutions to improve utilization while protecting incumbent users (IUs) such as military radars. However, current incumbent protection mechanisms face critical limitations. The Environmental Sensing Capability (ESC) requires costly sensor deployments and remains vulnerable to interference and security risks. Alternatively, the Incumbent Informing Capability (IIC) requires IUs to disclose their identities and operational parameters to the Spectrum Coordination System (SCS), creating linkable records that compromise operational privacy and mission secrecy. We propose IU-GUARD, a privacy-preserving spectrum sharing framework that enables IUs to access spectrum without revealing their identities. Leveraging verifiable credentials (VCs) and zero-knowledge proofs (ZKPs), IU-GUARD allows IUs to prove their authorization to the SCS while disclosing only essential operational parameters. This decouples IU identity from spectrum access, prevents cross-request linkage, and mitigates the risk of centralized SCS data leakage. We implement a prototype, and our evaluation shows that IU-GUARD achieves strong privacy guarantees with practical computation and communication overhead, making it suitable for real-time DSS deployment.

翻译：随着无线频谱需求的日益增长，动态频谱共享（DSS）框架（如公民宽带无线电服务（CBRS））已成为提高频谱利用率同时保护授权用户（如军用雷达）的实用解决方案。然而，现有的授权用户保护机制面临关键局限。环境感知能力（ESC）需要昂贵的传感器部署，且易受干扰和安全风险影响。另一种方案——授权用户信息通报能力（IIC）则要求授权用户向频谱协调系统（SCS）披露其身份和运行参数，从而产生可关联的记录，损害其运行隐私与任务机密性。本文提出IU-GUARD，一种隐私保护的频谱共享框架，使授权用户能够在隐藏身份的前提下接入频谱。该框架利用可验证凭证（VC）和零知识证明（ZKP），使授权用户仅需向SCS证明其授权状态并披露必要的运行参数，而无需暴露身份信息。该方法实现了授权用户身份与频谱接入的解耦，防止跨请求关联，并降低了集中式SCS数据泄露的风险。我们实现了原型系统，评估结果表明IU-GUARD在提供强隐私保障的同时，具有可实际应用的计算与通信开销，适用于实时DSS部署。