EAGER: Human Behavior Based Authentication for Smart Wireless Networked Systems

EAGER：智能无线网络系统基于人类行为的身份验证

• 批准号: 1251962
• 负责人: Mohammad Khan
• 金额: $ 16.94万
• 依托单位: University of Connecticut
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-09-15 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1251962&HistoricalAwards=false
• 关键词: EAGER; Human; Behavior; Based; Authentication

Smart wireless devices are increasingly becoming the preferred method for accessing physical locations, bank accounts, and other valuable resources. However, their use for authentications comes with increased security considerations, since they can be stolen and are vulnerable to different types of software attacks. The objective of the research is to develop a new type of pervasive authentication for smart wireless networked systems based on macroscopic human behavior. The key hypothesis is that the regularity in a person's behavior can be used to uniquely identify her, as well as to substitute static passwords with one-time authentication challenges pertaining to her past behavior. To this end, this project will focus in three integrated components: (1) methodologies for behavioral data collection and authentication, spanning from physical layer fingerprinting techniques to privacy-preserving authentication protocols; (2) algorithms for discovering and modeling the regularity in a user's behavior to pervasively authenticate her; and (3) methods for generating one-time authentication challenges based on the user's preferences, schedules and routines. The expected result of the research is a radically new paradigm in authentication that will eliminate the risks associated with smart wireless devices, and can also find application in other domains such as online authentication. The research outcomes and parts of the developed authentication framework will be disseminated to the widest audience possible, including application developers, through the project?s website. The educational component of the project includes integration of the research agenda with curriculum development, and outreach activities that engage high-school students and underrepresented communities in computer science and engineering.

智能无线设备正日益成为访问物理位置、银行账户和其他宝贵资源的首选方法。然而，使用它们进行身份验证会增加安全考虑，因为它们可能被盗，并且容易受到不同类型的软件攻击。研究的目的是开发一种新的基于宏观人类行为的智能无线网络系统的普适认证。关键假设是，一个人行为的规律性可以用来唯一地识别她，以及用与她过去行为有关的一次性身份验证挑战来代替静态密码。为此，该项目将集中在三个集成的组件：（1）行为数据收集和认证的方法，从物理层指纹技术到隐私保护认证协议;（2）发现和建模用户行为规律的算法，以普遍认证她;以及（3）用于基于用户的偏好、时间表和例程来生成一次性认证质询的方法。这项研究的预期结果是一种全新的身份验证模式，将消除与智能无线设备相关的风险，并且还可以在在线身份验证等其他领域中找到应用。研究成果和已开发的认证框架的部分内容将通过该项目传播给尽可能广泛的受众，包括应用程序开发人员。的网站。该项目的教育部分包括将研究议程与课程编制相结合，以及开展外联活动，让高中学生和代表性不足的社区参与计算机科学和工程。