EAGER: Human Behavior Based Authentication for Smart Wireless Networked Systems

智能无线设备日益成为访问物理位置、银行账户和其他宝贵资源的首选方法。然而，使用它们进行身份验证伴随着更多的安全考虑，因为它们可能被窃取，并且容易受到不同类型的软件攻击。本研究的目的是开发一种新型的基于宏观人类行为的智能无线网络系统普适认证。关键假设是，一个人行为的规律性可以用来唯一地识别她，以及用与她过去的行为有关的一次性身份验证挑战来取代静态密码。为此，该项目将重点放在三个集成组件上：(1)行为数据收集和验证的方法，从物理层指纹技术到隐私保护验证协议；(2)发现和模拟用户行为的规律性以普遍验证她的算法；以及(3)根据用户的偏好、时间表和例程生成一次性验证挑战的方法。这项研究的预期结果是一种全新的身份验证范式，它将消除与智能无线设备相关的风险，并可在其他领域找到应用，如在线身份验证。研究成果和开发的身份验证框架的部分内容将通过S项目网站尽可能广泛地传播给包括应用程序开发人员在内的最广泛的受众。该项目的教育部分包括将研究议程与课程编制相结合，以及让高中生和代表不足的社区参与计算机科学和工程的外联活动。

Smart wireless devices are increasingly becoming the preferred method for accessing physical locations, bank accounts, and other valuable resources. However, their use for authentications comes with increased security considerations, since they can be stolen and are vulnerable to different types of software attacks. The objective of the research is to develop a new type of pervasive authentication for smart wireless networked systems based on macroscopic human behavior. The key hypothesis is that the regularity in a person's behavior can be used to uniquely identify her, as well as to substitute static passwords with one-time authentication challenges pertaining to her past behavior. To this end, this project will focus in three integrated components: (1) methodologies for behavioral data collection and authentication, spanning from physical layer fingerprinting techniques to privacy-preserving authentication protocols; (2) algorithms for discovering and modeling the regularity in a user's behavior to pervasively authenticate her; and (3) methods for generating one-time authentication challenges based on the user's preferences, schedules and routines. The expected result of the research is a radically new paradigm in authentication that will eliminate the risks associated with smart wireless devices, and can also find application in other domains such as online authentication. The research outcomes and parts of the developed authentication framework will be disseminated to the widest audience possible, including application developers, through the project?s website. The educational component of the project includes integration of the research agenda with curriculum development, and outreach activities that engage high-school students and underrepresented communities in computer science and engineering.