SaTC: TTP: Small: Collaborative: Privacy-Aware Wearable-Assisted Continous Authentication Framework

SaTC：TTP：小型：协作：隐私意识可穿戴设备辅助连续身份验证框架

• 批准号: 1718116
• 负责人: Selcuk Uluagac
• 金额: $ 35.72万
• 依托单位: Florida International University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-08-15 至 2020-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1718116&HistoricalAwards=false
• 关键词: SaTC; TTP; Small; Collaborative; Privacy

The login process for a mobile or desktop device does not guarantee that the person using it is necessarily the intended user. If one is logged in for a long period of time, the user's identity should be periodically re-verified throughout the session without impacting their experience, something that is not easily achievable with existing login and authentication systems. Hence, continuous authentication, which re-verifies the user without interrupting their browsing session, is essential. However, authentication in such settings is highly intrusive and may expose users' sensitive information to third parties. To address these concerns, this project develops a novel privacy-aware wearable-assisted continuous authentication (WACA) framework. User specific data is acquired through built-in sensors on a wearable device. The user data is goes through privacy-preserving operations throughout the authentication process. This login procedure can be applied to a wide variety of existing enterprise authentication systems such as university campuses, corporate Information Technology divisions, and government agencies. Prototype deployments at Florida International University (FIU) and Florida Atlantic University (FAU), both of which serve large and diverse student populations, provide valuable feedback for future improvements. Continuous authentication and digital privacy are timely and relevant topics in today's Internet-centric always-on society. This project exploits the ubiquitous nature of sensor-based wearables by designing an innovative usable continuous authentication mechanism. By leveraging the expertise of the project team on authentication, privacy-preservation, and machine learning, this project addresses the following problems: 1) Investigation of novel sensory features on wearable smartwatches and identification of an optimal subset of these features along with distance measures and machine-learning algorithms to strike the balance between accuracy and speed; 2) Discovery of novel privacy-preserving mechanisms based on secure noise-tolerant template generation and comparison techniques, multi-party computation, and homomorphic encryption; 3) Trade-offs between privacy and performance to optimize the scheme in terms of accuracy, efficiency, and security; 4) Security of sensor-based keystroke dynamics against some common attacks such as simple zero-effort, imitation, and more complex statistical attacks including, but not limited to, classical keyboard-only keystroke dynamics attacks; and 5) Development, testing, and deployment of the proposed framework with a rich set of users, devices, and usage context in a prototype system. The success of the WACA project will contribute to the growth of knowledge in privacy and authentication domains and to societal understanding of these matters.

移动的或桌面设备的登录过程并不保证使用它的人一定是预期用户。如果一个人登录了很长一段时间，用户的身份应该在整个会话期间定期重新验证，而不会影响他们的体验，这是现有登录和身份验证系统不容易实现的。因此，连续身份验证至关重要，它可以在不中断用户浏览会话的情况下重新验证用户。然而，在这样的设置中的认证是高度侵入性的，并且可能将用户的敏感信息暴露给第三方。为了解决这些问题，该项目开发了一种新的隐私感知可穿戴辅助连续身份验证（WACA）框架。通过可穿戴设备上的内置传感器获取用户特定数据。在整个身份验证过程中，用户数据都要经过隐私保护操作。此登录过程可应用于各种现有的企业身份验证系统，例如大学校园、公司信息技术部门和政府机构。原型部署在佛罗里达国际大学（FIU）和佛罗里达大西洋大学（FAU），这两个服务于大量和多样化的学生群体，为未来的改进提供了宝贵的反馈。在当今以互联网为中心的永远在线社会中，持续身份验证和数字隐私是及时且相关的主题。 该项目通过设计一种创新的可用的连续认证机制，利用基于传感器的可穿戴设备的无处不在的特性。通过利用项目团队在身份验证、隐私保护和机器学习方面的专业知识，该项目解决了以下问题：1）研究可穿戴智能手表的新感官功能，并识别这些功能的最佳子集沿着距离测量和机器学习算法，以在准确性和速度之间取得平衡; 2）基于安全的噪声容忍模板生成和比较技术、多方计算和同态加密发现新的隐私保护机制; 3）在隐私和性能之间进行权衡，以在准确性、效率和安全性方面优化方案; 4）基于传感器的动态响应针对一些常见攻击的安全性，例如简单的零努力、模仿和更复杂的统计攻击，包括但不限于经典的仅键盘动态响应攻击;以及5）在原型系统中开发、测试和部署具有丰富的用户、设备和使用上下文集合的所提出的框架。WACA项目的成功将有助于隐私和认证领域知识的增长，以及社会对这些问题的理解。

项目成果

A Survey on Homomorphic Encryption Schemes: Theory and Implementation

• DOI: 10.1145/3214303
• 发表时间: 2018-09-01
• 期刊: ACM COMPUTING SURVEYS
• 影响因子: 16.6
• 作者: Acar, Abbas;Aksu, Hidayet;Conti, Mauro
• 通讯作者: Conti, Mauro