CAREER: Cryptographic Authentication from Biometrics

在目前的设备中，生物识别是在硬件安全模块内以明文处理的。生物识别的明文处理导致主密钥连续多天未加密地驻留在硬件安全模块中。随着设备添加传感器，它们被包括在硬件安全模块中，从而增加了复杂性和风险。模糊抽取器是一种从生物识别中导出密钥的加密原语。然而，现有的模糊抽取器不能保证已知生物特征的安全。这个项目构建了一个计算安全的模糊抽取器，可以保护所有可能的发行版。如果人们希望信息理论安全，那么这样的通用模糊抽取器是不可能的。通用模糊抽取器可以用通用模糊处理来构建，但这种构造不能在商用硬件上实现，并且不存在基于标准假设的构造。这个项目构建了通用的模糊抽取器，并调查了所需的假设。这些设计基于可根据标准假设构建的有限形式的功能加密。此外，该项目将模糊抽取器的功能扩展到1)支持新的噪声模型，2)支持可更新的加密方法，以及3)抵抗主动攻击。该项目将以实验项目为基础的网络安全实验室扩大到初中生和高中生，重点关注代表性不足的女性和少数族裔学生。这一教育计划强调网络安全注重结果的跨学科性质。完成这些项目的学生将被聘为未来学生的研究助理和导师。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

In current devices, biometrics are processed in plaintext inside the hardware security module. Plaintext processing of biometrics leads to master keys residing unencrypted in the hardware security module for multiple consecutive days. As devices add sensors, they are included in the hardware security module, adding complexity and risk. Fuzzy extractors are a cryptographic primitive that derives keys from biometrics. However, prior fuzzy extractors do not secure known biometrics. This project builds a computationally secure fuzzy extractor that secures all possible distributions. Such a universal fuzzy extractor is not possible if one desires information theoretic security. Universal fuzzy extractors can be built with general purpose obfuscation, but such constructions cannot be implemented on commodity hardware and there are no constructions from standard assumptions. This project builds universal fuzzy extractors and investigates required assumptions. These designs are based on limited forms of functional encryption which can be built from standard assumptions. In addition, this project expands the functionality of fuzzy extractors to 1) support new noise models, 2) support updatable encryption methods, and 3) withstand active attacks. This project expands an experimental project-based cybersecurity laboratory to middle and high school students with a focus on under-represented female and minority students. This educational program stresses the outcome-focused interdisciplinary nature of cybersecurity. Students completing these programs will be hired as research assistants and mentors for future students.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.