SaTC: CORE: Medium: Implicit One-handed Mobile User Authentication by Induced Thumb Biometrics on Touch-screen Handheld Devices

SaTC：核心：中：通过触摸屏手持设备上的感应拇指生物识别技术进行隐式单手移动用户身份验证

• 批准号: 1917537
• 负责人: Lina Zhou
• 金额: $ 62.6万
• 依托单位: University of North Carolina at Charlotte
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-08-15 至 2023-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1917537&HistoricalAwards=false
• 关键词: SaTC; CORE; Medium; Implicit; handed

People often store private and sensitive data on their mobile devices, and the security of these devices is essential. This project advances and develops a new process for verifying a user's legitimate right to access a mobile device. Existing research has not made this process very usable for many people who lack dexterity or the use of both hands. This research aims to design and develop a method for one-handed authentication on a touch-screen mobile handheld device. The objective is to improve both security and usability of authentication. The proposed methods also will detect unauthorized access to a mobile device in a continuous manner, even if the password is stolen. The interdisciplinary nature of this work will promote teaching, training, and education in mobile security and privacy, human-computer interaction, mobile accessibility, machine learning, and behavioral science. The researchers will actively engage students at both graduate and undergraduate levels in their research activities, and make a strong effort to engage women and underrepresented minorities.The project will support one-handed mobile authentication on a touch-screen mobile handheld device by inducing thumb biometrics and by enabling one-handed text entry based on thumb strokes. This project will advance authentication research and practice by: (1) laying the groundwork for one-handed authentication in support of both point-of-entry and implicit continuous authentication; (2) introducing a new venue for improving the security of one-handed authentication by inducing and fusing thumb biometrics from user interactions with a touch-screen mobile device; (3) creating new design principles for improving the usability of mobile authentication; and (4) addressing accessibility challenges for users with situational or visual impairments via the support of keypress-less text entry on a mobile touch screen. This project will lend itself to a new solution that can address the common security-usability tradeoff of mobile authentication methods.

人们经常在他们的移动的设备上存储私人和敏感数据，这些设备的安全性至关重要。该项目推进并开发了一种用于验证用户访问移动终端的合法权利的新过程。现有的研究还没有使这个过程非常适用于许多人谁缺乏灵活性或使用双手。本研究旨在设计并开发一种在触控式移动的手持装置上进行单手认证的方法。目的是提高身份验证的安全性和可用性。所提出的方法还将以连续的方式检测对移动终端的未授权访问，即使密码被盗。这项工作的跨学科性质将促进移动的安全和隐私、人机交互、移动的可访问性、机器学习和行为科学方面的教学、培训和教育。研究人员将积极吸引研究生和本科生参与他们的研究活动，并努力吸引女性和代表性不足的少数民族参与。该项目将通过引入拇指生物识别技术和基于拇指笔画的单手文本输入，支持触摸屏移动的手持设备上的单手移动的身份验证。该项目将通过以下方式推进认证研究和实践：（1）为单手认证奠定基础，同时支持进入点认证和隐式连续认证;（2）引入一个新的场所，通过从用户与触摸屏移动终端的交互中诱导和融合拇指生物特征来提高单手认证的安全性;（3）创建新的设计原则，以提高移动的身份验证的可用性;以及（4）通过支持移动的触摸屏上的无按键文本输入，解决有情境或视觉障碍的用户的无障碍挑战。该项目将提供一种新的解决方案，可以解决移动的身份验证方法的常见安全性和可用性权衡问题。

项目成果

Shoulder Surfing on Mobile Authentication: Perception vis-a-vis Performance from the Attacker's Perspective

移动身份验证上的肩窥：从攻击者的角度看待性能

• DOI: 10.1109/isi58743.2023.10297219
• 发表时间: 2023
• 期刊: IEEE
• 作者: Wang, Kanlun;Zhou, Lina;Zhang, Dongsong;Lai, Jianwei
• 通讯作者: Lai, Jianwei

Understanding Attacking Behaviors Toward Password-based Mobile User Authentication

了解针对基于密码的移动用户身份验证的攻击行为

• 发表时间: 2021
• 期刊: Who Are You?! Adventures in Authentication Workshop
• 作者: Lina Zhou, Kanlun Wang

A Comparison of a Touch-Gesture- and a Keystroke-Based Password Method: Toward Shoulder-Surfing Resistant Mobile User Authentication

• DOI: 10.1109/thms.2023.3236328
• 发表时间: 2023-04
• 期刊: IEEE Transactions on Human-Machine Systems
• 影响因子: 3.6
• 作者: Lina Zhou;Kanlun Wang;Jianwei Lai;Dongsong Zhang

D&L: A Natural Language Processing Based Approach for Protecting Sensitive Information from Shoulder Surfing Attacks

D

• 发表时间: 2023
• 期刊: AMCIS 2023
• 作者: Marran Aldossari;Dongsong Zhang
• 通讯作者: Dongsong Zhang

What is More Important for Touch Dynamics based Mobile User Authentication?

基于触摸动态的移动用户认证更重要的是什么？

• 发表时间: 2020
• 期刊: PACIS 2020 Proceedings
• 作者: Kanlun Wang, Lina Zhou