CAREER: Cryptographic Authentication from Biometrics

在目前的设备中，生物识别是在硬件安全模块内以明文方式处理的。生物识别的明文处理导致主密钥在硬件安全模块中连续多天未加密。当设备添加传感器时，它们被包含在硬件安全模块中，增加了复杂性和风险。模糊提取器是一种从生物特征中提取密钥的密码原语。然而，先前的模糊提取器不能保证已知的生物特征。这个项目建立了一个计算安全的模糊提取器，可以保护所有可能的分布。如果要保证信息理论的安全性，这种通用模糊提取器是不可能的。通用模糊提取器可以用通用混淆构建，但这种构造不能在商用硬件上实现，也没有标准假设的构造。本项目建立通用模糊提取器并研究所需的假设。这些设计基于可以从标准假设中构建的有限形式的功能加密。此外，该项目扩展了模糊提取器的功能，以1)支持新的噪声模型，2)支持可更新的加密方法，以及3)承受主动攻击。该项目将基于实验项目的网络安全实验室扩展到初高中学生，重点关注代表性不足的女性和少数民族学生。该教育计划强调网络安全的跨学科性质。完成这些课程的学生将被聘为未来学生的研究助理和导师。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

In current devices, biometrics are processed in plaintext inside the hardware security module. Plaintext processing of biometrics leads to master keys residing unencrypted in the hardware security module for multiple consecutive days. As devices add sensors, they are included in the hardware security module, adding complexity and risk. Fuzzy extractors are a cryptographic primitive that derives keys from biometrics. However, prior fuzzy extractors do not secure known biometrics. This project builds a computationally secure fuzzy extractor that secures all possible distributions. Such a universal fuzzy extractor is not possible if one desires information theoretic security. Universal fuzzy extractors can be built with general purpose obfuscation, but such constructions cannot be implemented on commodity hardware and there are no constructions from standard assumptions. This project builds universal fuzzy extractors and investigates required assumptions. These designs are based on limited forms of functional encryption which can be built from standard assumptions. In addition, this project expands the functionality of fuzzy extractors to 1) support new noise models, 2) support updatable encryption methods, and 3) withstand active attacks. This project expands an experimental project-based cybersecurity laboratory to middle and high school students with a focus on under-represented female and minority students. This educational program stresses the outcome-focused interdisciplinary nature of cybersecurity. Students completing these programs will be hired as research assistants and mentors for future students.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.