New Techniques for Authenticating Humans (and Other Resource-Constrained Devices)

本研究的重点是设计安全认证协议的新范例和技术，重点是当现有方法根本不适合或不适用时的设置。例如，该基金支持的PI研究涉及使用密码或生物识别数据对人类受试者进行身份验证；高效密码原语的设计，适用于资源严重受限的设备；以及使用带宽有限的身份验证通道进行安全密钥建立。本研究旨在为这些问题建立坚实的理论基础，并根据所学知识开发可证明安全且实用的协议。这项研究的结果预计将适用于广泛的问题，包括“廉价”RFID标签或传感器的认证，通过生物特征对人类用户进行认证，以及提高无线家庭网络和移动无线设备的安全性。这个建议的教育部分集中在向学生介绍现代密码学和计算机安全的原理。这在一定程度上是通过课程开发、广泛传播课程材料（包括详细的课堂讲稿）以及让本科生和研究生参与与这项工作相关的研究项目来实现的。

This research focuses on new paradigms and techniques for designing secure authentication protocols with an emphasis on settings when existing methods are simply unsuitable or inapplicable. As examples, research of the PI supported by this grant addresses the authentication of human subjects using passwords or biometric data; the design of highly-efficient cryptographic primitives suitable for use by severely resource-constrained devices; and the use of bandwidth-limited authenticated channels for secure key establishment. This research is intended both to establish firm theoretical foundations for these problems, as well as to develop provably-secure and practical protocols based on what is learned. The results of this research are expected to be applicable to a wide range of problems, including the authentication of "cheap" RFID tags or sensors, authentication of human users via biometric features, and improved security for wireless home networks and mobile wireless devices. The educational component of this proposal centers on introducing students to the principles of modern cryptography and computer security. This is accomplished, in part, via curriculum development, broad dissemination of course materials including detailed lecture notes, and involvement of students --- at both the undergraduate and graduate levels --- in research projects related to this work.