TWC SBE: Small: Collaborative: Brain Password: Exploring A Psychophysiological Approach for Secure User Authentication

TWC SBE：小型：协作：大脑密码：探索安全用户身份验证的心理生理学方法

• 批准号: 1423061
• 负责人: Wenyao Xu
• 金额: $ 20万
• 依托单位: SUNY at Buffalo
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-10-01 至 2018-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1423061&HistoricalAwards=false
• 关键词: TWC; SBE; Small; Collaborative; Brain

Cryptographic systems often rely on the secrecy of cryptographic credentials; however, these are vulnerable to eavesdropping and can resist neither a user's intentional disclosure nor coercion attacks where the user is forced to reveal the credentials. Conventional biometric keys (e.g., fingerprint, iris, etc.), unfortunately, can still be surreptitiously duplicated or adversely revealed. In this research, the PIs argue that the most secure cryptographic credentials are ones of which the users aren't even aware. On the basis of this argument, the objective of this research is to investigate a new psychophysiological approach for secure and trustworthy user authentication via non-volitional components of the electroencephalogram (EEG) brainwave responses. Specifically, the research examines how consistent these responses are over time and also formally assesses how unique they are to individuals. By identifying reproducible, unique features of the EEG, we are developing a method to accurately recognize and authenticate people by extracting time-invariant and context-invariant "brain passwords."This research holds the potential to transform existing authentication systems into more secure, disclosure-resistant solutions; critical for high-security applications. The cross-disciplinary content of the work also, importantly, will allow us to strengthen our understanding of individual brain responses and apply this new knowledge into increasingly vulnerable cyberspace. This may lead to a far-reaching breakthrough in the possibility of "brain fingerprinting." Moreover, the investigators are taking active roles in nourishing the scholarship of underrepresented minorities and female students and making substantial efforts to integrate diversity in both educational and research activities.

密码系统通常依赖于密码凭证的保密性;然而，这些容易被窃听，并且既不能抵抗用户的故意披露，也不能抵抗用户被迫透露凭证的胁迫攻击。传统的生物特征密钥（例如，指纹、虹膜等），不幸的是，仍然可以被秘密地复制或不利地揭示。在这项研究中，PI认为最安全的加密凭证是用户甚至不知道的凭证。在此基础上，本研究的目的是探讨一种新的心理生理学方法的安全和可信的用户认证通过非意志成分的脑电图（EEG）脑电波响应。具体来说，研究考察了这些反应随着时间的推移有多一致，并正式评估了它们对个人的独特性。通过识别EEG的可重复的、独特的特征，我们正在开发一种方法，通过提取时间不变和上下文不变的“大脑密码”来准确地识别和认证人。“这项研究有可能将现有的身份验证系统转变为更安全、更可靠的解决方案，这对高安全性应用至关重要。重要的是，这项工作的跨学科内容将使我们能够加强对个人大脑反应的理解，并将这些新知识应用于日益脆弱的网络空间。这可能导致“大脑指纹”可能性的深远突破。“此外，调查人员正在积极发挥作用，为代表性不足的少数民族和女学生提供奖学金，并作出巨大努力，将多样性纳入教育和研究活动。