HELPSE: Homomorphic Encryption-based Lightweight Password Strength Estimation in a Virtual Keyboard System
HELPSE: Homomorphic Encryption-based Lightweight Password Strength Estimation in a Virtual Keyboard System
复制标题
DOI：
10.1145/3526241.3530338
复制
发表时间：
2022-06
期刊：
影响因子：
--
通讯作者：
Michael Cho;Keewoo Lee;Sunwoong Kim
中科院分区：
文献类型：
--
作者：
Michael Cho;Keewoo Lee;Sunwoong Kim
最近，网络物理系统正在积极地使用云服务器来克服边缘设备的能力和处理速度的限制。当在服务器上评估客户端设备上生成的密码时，这些信息不仅会暴露在网络上，还会暴露在服务器端。为了解决这个问题，我们将以前的轻量级密码强度估计(LPSE)算法转移到同态加密(HE)域。我们提出的方法采用数值方法来执行LPSE算法的运算，这在HE格式中是没有提供的。此外，还对LPSE算法进行了改进，增加了给定深度约束的数值方法的迭代次数。我们提出的基于HE的LPSE(HELPSE)方法是以客户端-服务器模型实现的。作为客户端，在带有摄像头传感器的嵌入式开发板上实现了虚拟键盘系统。从该系统获取密码，对其进行加密，并通过网络将其发送到资源丰富的服务器端。所提出的HELPSE方法在服务器上执行。在深度约为20的情况下，我们提出的方法与原始的LPSE算法相比，平均错误率不到1%。对于32K的多项式次数，服务器端的执行时间约为5秒。
Recently, cyber-physical systems are actively using cloud servers to overcome the limitations of power and processing speed of edge devices. When passwords generated on a client device are evaluated on a server, the information is exposed not only on networks but also on the server-side. To solve this problem, we move the previous lightweight password strength estimation (LPSE) algorithm to a homomorphic encryption (HE) domain. Our proposed method adopts numerical methods to perform the operations of the LPSE algorithm, which is not provided in HE schemes. In addition, the LPSE algorithm is modified to increase the number of iterations of the numerical methods given depth constraints. Our proposed HE-based LPSE (HELPSE) method is implemented as a client-server model. As a client-side, a virtual keyboard system is implemented on an embedded development board with a camera sensor. A password is obtained from this system, encrypted, and sent over a network to a resource-rich server-side. The proposed HELPSE method is performed on the server. Using depths of about 20, our proposed method shows average error rates of less than 1% compared to the original LPSE algorithm. For a polynomial degree of 32K, the execution time on the server-side is about 5 seconds.