CAREER: Cryptographic Authentication from Biometrics

在当前的设备中，生物特征在硬件安全模块内以明文形式处理。生物识别的明文处理导致主密钥连续多天未加密地驻留在硬件安全模块中。随着设备增加传感器，它们被包含在硬件安全模块中，增加了复杂性和风险。模糊提取器是一种从生物特征中提取密钥的加密原语。然而，现有的模糊提取器不能保护已知的生物特征。这个项目建立了一个计算安全的模糊提取器，确保所有可能的分布。这样一个通用的模糊提取器是不可能的，如果一个人的愿望信息理论的安全性。通用模糊提取器可以用通用混淆来构建，但是这样的构造不能在商品硬件上实现，并且没有来自标准假设的构造。这个项目建立通用的模糊提取器，并调查所需的假设。这些设计是基于有限形式的功能加密，可以从标准假设建立。此外，该项目扩展了模糊提取器的功能，以1）支持新的噪声模型，2）支持可更新的加密方法，3）抵御主动攻击。该项目将一个基于实验项目的网络安全实验室扩大到初中和高中学生，重点是代表性不足的女性和少数民族学生。该教育计划强调网络安全的跨学科性质。完成这些项目的学生将被聘为未来学生的研究助理和导师。该奖项反映了NSF的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

In current devices, biometrics are processed in plaintext inside the hardware security module. Plaintext processing of biometrics leads to master keys residing unencrypted in the hardware security module for multiple consecutive days. As devices add sensors, they are included in the hardware security module, adding complexity and risk. Fuzzy extractors are a cryptographic primitive that derives keys from biometrics. However, prior fuzzy extractors do not secure known biometrics. This project builds a computationally secure fuzzy extractor that secures all possible distributions. Such a universal fuzzy extractor is not possible if one desires information theoretic security. Universal fuzzy extractors can be built with general purpose obfuscation, but such constructions cannot be implemented on commodity hardware and there are no constructions from standard assumptions. This project builds universal fuzzy extractors and investigates required assumptions. These designs are based on limited forms of functional encryption which can be built from standard assumptions. In addition, this project expands the functionality of fuzzy extractors to 1) support new noise models, 2) support updatable encryption methods, and 3) withstand active attacks. This project expands an experimental project-based cybersecurity laboratory to middle and high school students with a focus on under-represented female and minority students. This educational program stresses the outcome-focused interdisciplinary nature of cybersecurity. Students completing these programs will be hired as research assistants and mentors for future students.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.