SaTC: CORE: Small: Authentication on the Web: Provable Security for Emerging Protocols

Web上一些重要的通信和身份验证协议仍然缺乏可证明的安全处理，因此也缺乏安全保证。该项目的影响在于弥合这一差距。该项目的新颖之处在于将现代密码学的可证明安全方法与协议设计相结合，从而产生新的安全框架，并对以下日益重要的协议进行分析：(1)单点登录（SSO）服务，如OpenID Connect，允许服务提供商将客户端身份验证委托给指定的身份提供者；(2)FIDO2；这是FIDO联盟的一个雄心勃勃的项目，旨在帮助世界摆脱使用密码进行身份验证的麻烦，转而依赖第二因素设备或生物识别技术，以及安全的pin码，HTTPS协议而不是TLS或QUIC，目前近一半的互联网流量都经过加密和身份验证。然而，当与活动代理、中间盒或边缘服务器结合使用时，其安全性并不明确，所有这些服务器都会检查、缓存或转换流量，以便应用安全规则、提高性能等。对于项目的每个部分，研究人员设计正式的安全定义，考虑到实际的对抗能力和各种安全威胁。然后，他们试图证明上述协议的加密核心在协议组件的一些合理的计算假设下满足定义。当弱点被发现，而这样的证明是不可能的，那么调查人员提出修复。应用这种方法的新颖之处在于对两种以上类型的当事人进行建模，其中可能包括人类当事人。研究人员付出了巨大的努力，让包括从业人员在内的广大受众能够获得研究结果。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Some important communication and authentication protocols on the Web still lack the provable-security treatment and hence lack the security guarantees as well. The project's impact is in bridging this gap. The project’s novelty is coupling the provable-security approach of modern cryptography with protocol design to yield novel security frameworks and analyses of the following protocols of emerging importance:(1) single sign-on (SSO) services, such as OpenID Connect, that allow service providers to delegate authentication of clients to designated identity providers,(2) FIDO2, a very ambitious project of the FIDO Alliance that helps the world to move away from bothersome use of passwords for authentication, relying instead on second-factor devices or biometrics, as well as secure PINs, (3) HTTPS protocol over TLS or QUIC, which encrypts and authenticates nearly half of Internet traffic nowadays. However, its security is not clear when used in combination with active proxies, middleboxes, or edge servers, all of which inspect, cache, or transform traffic in order to apply security rules, improve performance, etc. For each part of the project, the investigators design formal security definitions that take into account practical adversarial capabilities and various security threats. They then attempt to prove that the cryptographic cores of the aforementioned protocols satisfy the definitions under some reasonable computational assumptions on the protocol's components. When weaknesses are found and such proofs are not possible, then the investigators propose fixes. The novelty in applying such an approach is in modeling parties of more than two types, which may include a human party. The investigators put a serious effort to make the results accessible to a wide audience, including practitioners.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.