New Techniques for Authenticating Humans (and Other Resource-Constrained Devices)

验证人类（和其他资源受限设备）身份的新技术

• 批准号: 0627306
• 负责人: Jonathan Katz
• 金额: $ 30万
• 依托单位: University of Maryland, College Park
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-09-01 至 2011-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0627306&HistoricalAwards=false
• 关键词: New; Techniques; Authenticating; Humans; Other

This research focuses on new paradigms and techniques for designing secure authentication protocols with an emphasis on settings when existing methods are simply unsuitable or inapplicable. As examples, research of the PI supported by this grant addresses the authentication of human subjects using passwords or biometric data; the design of highly-efficient cryptographic primitives suitable for use by severely resource-constrained devices; and the use of bandwidth-limited authenticated channels for secure key establishment. This research is intended both to establish firm theoretical foundations for these problems, as well as to develop provably-secure and practical protocols based on what is learned. The results of this research are expected to be applicable to a wide range of problems, including the authentication of "cheap" RFID tags or sensors, authentication of human users via biometric features, and improved security for wireless home networks and mobile wireless devices. The educational component of this proposal centers on introducing students to the principles of modern cryptography and computer security. This is accomplished, in part, via curriculum development, broad dissemination of course materials including detailed lecture notes, and involvement of students --- at both the undergraduate and graduate levels --- in research projects related to this work.

这项研究集中于设计安全认证协议的新范例和技术，重点是当现有方法根本不适合或不适用时的设置。例如，这笔赠款支持的PI研究涉及使用密码或生物统计数据对人类主体进行身份验证；设计适合于资源严重受限的设备使用的高效加密原语；以及使用带宽有限的身份验证通道来建立安全密钥。这项研究的目的是为这些问题建立坚实的理论基础，以及在所学知识的基础上开发可证明安全和实用的协议。这项研究的结果预计将适用于广泛的问题，包括“廉价”的RFID标签或传感器的认证，通过生物特征对人类用户的认证，以及提高无线家庭网络和移动无线设备的安全性。这项建议的教育部分集中在向学生介绍现代密码学和计算机安全的原理。这在一定程度上是通过课程开发，广泛传播课程材料，包括详细的课堂讲稿，以及让本科生和研究生参与与这项工作有关的研究项目来实现的。