I-Corps: Securing Mobile Devices with Memorable, Usable, and Secure Authentication

I-Corps：通过易于记忆、可用且安全的身份验证来保护移动设备

• 批准号: 1832820
• 负责人: Ye Zhu
• 金额: $ 5万
• 依托单位: Cleveland State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-04-01 至 2022-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1832820&HistoricalAwards=false
• 关键词: Corps; Securing; Mobile; Devices; Memorable

The broad impact/commercial potential of this I-Corps project is to protect security and privacy of mobile device users with memorable, usable, and secure authentication schemes. According to statista.com, the number of smartphone users in the world will be more than five billion by 2019. The popularity of these mobile devices is due to a unique set of features including ubiquitous Internet access through communication technologies such as Wifi and 4G/LTE, easy to use touch-based inputs, and numerous applications and games. In the meantime, the security of mobile devices is becoming a major concern as device users are storing sensitive data such as personal contacts and utilizing sensitive applications like banking and stock trading. Strong authentication as the forefront defense mechanism can prevent unauthorized access to a mobile device that may lead to lack of accountability, data loss or stealing, and identity theft. Due to the popularity of mobile devices and their uses in government, business, and even military applications, securing mobile devices with secure, memorable, and usable authentication is of great societal importance.This I-Corps project focuses on exploring the market potential for multi-dimensional authentication schemes. The new paradigm of multi-dimensional authentication schemes can achieve better memorability, security, and usability at the same time. The new schemes fuse information from multiple dimensions to form a password, allowing the schemes to enlarge the password space and improve memorability by reducing memory interference. The information fusion can increase usability as fewer input gestures are required for passwords of the same security strength. The schemes can also be shoulder-surfing resistant. A successful authentication requires a user to respond to a random challenge so that a set of predefined rules are satisfied after adjustments made by the user. The schemes can also be used for continuously monitoring device user behavior to ensure the current device users is a user authorized to use the device. Through this project, we will be able to investigate the needs from various customer segments and polish our technologies and prototypes to meet the needs.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

这个I-Corps项目的广泛影响/商业潜力是通过令人难忘的、可用的和安全的身份验证方案来保护移动设备用户的安全和隐私。根据statista.com的数据，到2019年，全球智能手机用户数量将超过50亿。这些移动设备的流行是由于一系列独特的功能，包括通过Wifi和4G/LTE等通信技术无处不在的互联网接入，易于使用的触摸输入，以及众多的应用程序和游戏。与此同时，移动设备的安全性正成为一个主要问题，因为设备用户正在存储敏感数据，如个人联系人，并使用敏感应用程序，如银行和股票交易。强认证作为最重要的防御机制，可以防止对移动设备的未经授权访问，从而导致缺乏问责、数据丢失或被盗以及身份盗窃。由于移动设备的普及及其在政府、商业甚至军事应用中的使用，使用安全、易于记忆和可用的身份验证来保护移动设备具有重要的社会意义。I-Corps项目的重点是探索多维认证方案的市场潜力。多维身份验证方案的新范式可以同时实现更好的可记忆性、安全性和可用性。新方案融合了来自多个维度的信息来形成密码，允许方案扩大密码空间，并通过减少内存干扰来提高记忆性。信息融合可以提高可用性，因为相同安全强度的密码需要更少的输入手势。这些方案还可以抵抗肩部冲浪。成功的身份验证需要用户响应随机挑战，以便在用户进行调整后满足一组预定义规则。该方案还可以用于持续监控设备用户行为，确保当前设备用户是被授权使用设备的用户。通过这个项目，我们将能够调查不同客户群体的需求，并完善我们的技术和原型以满足需求。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。