SaTC: CORE: Small: Collaborative: Cardiac Password: Exploring a Non-Contact and Continuous Approach to Secure User Authentication

SaTC：核心：小型：协作：心脏密码：探索非接触式和连续的安全用户身份验证方法

• 批准号: 1718375
• 负责人: Wenyao Xu
• 金额: $ 29.46万
• 依托单位: SUNY at Buffalo
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-09-01 至 2022-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1718375&HistoricalAwards=false
• 关键词: SaTC; CORE; Small; Collaborative; Cardiac

Most traditional security systems authenticate a user only at the initial log-in session. As a result, it is possible for another user, authorized or unauthorized, to access the system information, with or without the permission of the signed-on user, until the initial user logs out. This could be a critical security flaw even for high-security systems. Traditional one-time (e.g., password) or two-factor (e.g., password with fingerprint) authentication methods are no longer sufficient. Continuous authentication is a form of dynamic, risk-based authentication that changes the perspective of authentication from an event to a process, and has the potential to address the vulnerability of existing security systems by continuously verifying the user's identity during the session use. This interdisciplinary team explores a novel continuous authentication through a transformative non-contact heart-based biometrics. This project could transform the understanding of non-volatile components in cardiac motion, and convert this new knowledge and related technologies into improved security in increasingly vulnerable cyberspace. The project establishes a unique inter university research and education program on cyber security, which involves both K-12, undergraduate students, and underrepresented populations.The Cardiac Password project investigates a holistic hardware/software solution to secure and trustworthy continuous authentication via non-contact cardiac motion sensing. The new authentication system can recognize humans in a non-contact, unobtrusive and even non-line-of-sight fashion. Towards this goal, the project has three thrusts. First, the team develops a high-fidelity non-contact cardiac motion sensing device. Second, the team investigates invariant cardiac descriptors and propose continuous authentication methodologies. Third, the team assesses the performance, usability, and vulnerability of the proposed Cardiac Password system. The outcome of this research can advance state-of-the-art heart-based biometrics in user authentication, and provide insights on developing more undeceivable, disclosure-resistant and user-friendly biometric solutions. The investigators will disseminate the results of the project through publications, talks, and demos, and integrate the research results into education curricula.

大多数传统安全系统仅在初始登录会话时对用户进行身份验证。因此，无论是否经过登录用户的许可，其他用户（无论是否已授权）都可以访问系统信息，直到初始用户注销为止。即使对于高安全性系统来说，这也可能是一个严重的安全缺陷。传统的一次性（例如密码）或双因素（例如密码加指纹）身份验证方法已不再足够。持续身份验证是一种动态的、基于风险的身份验证形式，它将身份验证的视角从事件转变为过程，并且有可能通过在会话使用期间持续验证用户的身份来解决现有安全系统的漏洞。这个跨学科团队通过变革性的非接触式基于心脏的生物识别技术探索一种新颖的连续身份验证。该项目可以转变对心脏运动中非易失性成分的理解，并将这些新知识和相关技术转化为日益脆弱的网络空间中更高的安全性。该项目建立了一个独特的大学间网络安全研究和教育计划，涉及 K-12、本科生和代表性不足的人群。心脏密码项目研究整体硬件/软件解决方案，通过非接触式心脏运动传感实现安全且值得信赖的持续身份验证。新的身份验证系统可以以非接触、不引人注目甚至非视线的方式识别人类。为了实现这一目标，该项目有三个重点。首先，该团队开发了一种高保真非接触式心脏运动传感装置。其次，该团队研究了不变的心脏描述符并提出了连续认证方法。第三，团队评估拟议的心脏密码系统的性能、可用​​性和漏洞。这项研究的成果可以推进用户身份验证中最先进的基于心脏的生物识别技术，并为开发更可靠、防泄露和用户友好的生物识别解决方案提供见解。研究人员将通过出版物、演讲和演示的方式传播该项目的成果，并将研究成果纳入教育课程。

项目成果

WaveEar: Exploring a mmWave-based Noise-resistant Speech Sensing for Voice-User Interface

• DOI: 10.1145/3307334.3326073
• 发表时间: 2019-06
• 期刊: Proceedings of the 17th Annual International Conference on Mobile Systems, Applications, and Services
• 作者: Chenhan Xu;Zhengxiong Li;Hanbin Zhang;Aditya Singh Rathore;Huining Li;Chen Song;Kun Wang;Wenyao Xu

A Survey on Heart Biometrics

• DOI: 10.1145/3410158
• 发表时间: 2021-02-01
• 期刊: ACM COMPUTING SURVEYS
• 影响因子: 16.6
• 作者: Rathore, Aditya Singh;Li, Zhengxiong;Xu, Wenyao
• 通讯作者: Xu, Wenyao

Cardiac biometrics for continuous and non-contact mobile authentication: poster

用于连续和非接触式移动身份验证的心脏生物识别技术：海报

• DOI: 10.1145/3317549.3326303
• 发表时间: 2019
• 期刊: the 12th Conference on Security and Privacy in Wireless and Mobile Networks
• 作者: Song, Chen;Li, Zhengxiong;Xu, Wenyao
• 通讯作者: Xu, Wenyao

VocalPrint: exploring a resilient and secure voice authentication via mmWave biometric interrogation

• DOI: 10.1145/3384419.3430779
• 发表时间: 2020-11
• 期刊: Proceedings of the 18th Conference on Embedded Networked Sensor Systems
• 作者: Huining Li;Chenhan Xu;Aditya Singh Rathore;Zhengxiong Li;Hanbin Zhang;Chen Song;Kun Wang;Lu Su;Feng Lin;K. Ren;Wenyao Xu

FerroTag: a paper-based mmWave-scannable tagging infrastructure

• DOI: 10.1145/3356250.3360019
• 发表时间: 2019-11
• 期刊: Proceedings of the 17th Conference on Embedded Networked Sensor Systems
• 作者: Zhengxiong Li;Baicheng Chen;Zhuolin Yang;Huining Li;Chenhan Xu;Xingyu Chen;Kun Wang;Wenyao Xu