TWC: Medium: Collaborative: Towards Secure, Robust, and Usable Gesture-Based Authentication

TWC：媒介：协作：迈向安全、稳健且可用的基于手势的身份验证

• 批准号: 1228869
• 负责人: Janusz Konrad
• 金额: $ 40万
• 依托单位: Trustees of Boston University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-09-01 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1228869&HistoricalAwards=false
• 关键词: TWC; Medium; Collaborative; Towards; Secure

This project investigates the feasibility of secure, robust, and usable gesture-based authentication as an alternative to traditional alphanumeric passwords and biometrics. It is motivated by the rapid increase in authentication-related security breaches and by the emergence of new human-computer interfaces. While the breaches have demonstrated the seriousness of the issue, two emerging types of gesture-based interfaces, multi-touch (smartphones, tablets) and camera-based (Kinect), offer a unique opportunity for robust solution.The benefit of gesture-based authentication over a purely-biometric one lies in the fact that it combines involuntary biometric features (e.g., hand shape), that are irrevocable, with user-controlled voluntary characteristics that can be easily changed. Three research thrusts are being pursued: 1) gesture recognition algorithms (search for robust gesture features, their compact representation, and reliable classification algorithms), 2) human factors (study of uniqueness, repeatability, ergonomics, device dependence of gestures, and gesture complexity) and 3) security considerations (evaluation of authentication performance under a range of performance measures and different threat models). A successful completion of this research will catalyze the development and adoption of next-generation authentication methods that are critically needed at the personal, institutional, and governmental levels. As the price paid (time, money, and resources) to repair a security breach can be astounding, this project will have substantial societal impact by increasing the sense of security and reducing breach-related costs. At educational level, this project is involved in middle and high school outreach at Boston University as well as the annual cybsersecurity competition CSAW at NYU-Poly.

本计画探讨安全、强健且可用的手势验证作为传统字母数字密码与生物辨识的替代方案的可行性。它的动机是身份验证相关的安全漏洞的快速增加和新的人机界面的出现。虽然这些漏洞已经证明了问题的严重性，但两种新兴的基于手势的界面，多点触摸（智能手机，平板电脑）和基于摄像头的（Kinect），为强大的解决方案提供了独特的机会。基于手势的身份验证优于纯生物特征的身份验证的好处在于，它结合了非自愿的生物特征（例如，手的形状），其是不可撤销的，具有可以容易地改变的用户控制的自愿特性。正在进行三个研究重点：1）手势识别算法（搜索强大的手势功能，其紧凑的表示和可靠的分类算法），2）人为因素（研究的唯一性，可重复性，人体工程学，手势的设备依赖性和手势的复杂性）和3）安全考虑（在一系列性能指标和不同的威胁模型下的认证性能的评估）。这项研究的成功完成将促进个人、机构和政府层面迫切需要的下一代身份验证方法的开发和采用。由于修复安全漏洞所付出的代价（时间，金钱和资源）可能是惊人的，该项目将通过增加安全感和减少与漏洞相关的成本来产生重大的社会影响。在教育层面，该项目参与了波士顿大学的初中和高中外展活动，以及纽约大学-理工学院的年度网络安全竞赛CSAW。