CAREER: Towards Secure and Usable IoT Authentication Under Constraints

物联网（IoT）的蓬勃发展对各行各业和日常生活的影响越来越大。物联网身份验证用于验证用户和/或物联网设备的合法性，是最基本和最关键的物联网安全问题之一。现有的方法通常存在不安全性（例如，基于蓝牙的接近证明可以被无线攻击利用）或可用性差（例如，要求大多数物联网设备上不可用的用户界面或传感器）。该研究提出了在约束条件下安全可用的物联网认证。与之前的许多工作不同的是，该项目的新颖之处在于，它基于无法被攻击者欺骗的物理操作。该项目更广泛的意义和重要性如下。1)这项研究可以帮助农村地区或残疾人在不依赖特殊的用户端硬件的情况下，平等地获得无人机配送等现代技术。2)该研究可以使物联网配对和认证变得更加容易和安全，其成果在智能健康，取证和持续安全监控方面具有广泛的应用。3) PI将开展外展和教育活动，旨在提高K-12社区的网络安全意识，并扩大来自代表性不足群体的学生的参与。该项目旨在通过以下重点改进物联网认证，并提供新颖的方法、算法、技术和系统。主旨1：受ui约束设备的身份验证。一种支持相互认证的协议，通过不安全的无线通道，在受ui约束的设备和用户之间建立信任，以支持异构物联网设备的认证。推力2：距离受限设备的身份验证。一种高度可用的方法可以在物联网设备和用户之间实现安全认证，即使它们相隔数米，其应用范围从无人机交付到乘车共享。推力3：操作受限设备的身份验证。对于使用零ui传感器节点改造的传统对象，ai辅助的隐式身份验证可以在不需要任何显式身份验证操作的情况下识别用户。总之，该研究旨在实质性地推进物联网认证并促进各种物联网应用。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The booming development of Internet of Things (IoT) makes ever-growing impacts on various industries and daily lives. IoT authentication, which authenticates the legitimacy of a user and/or an IoT device, is among the most fundamental and critical IoT security problems. Existing approaches often suffer from insecurity (e.g., Bluetooth based proximity proving can be exploited by wireless attacks) or poor usability (e.g., requiring user interfaces or sensors unavailable on most IoT devices). The research advances secure and usable IoT authentication under constraints. Unlike many prior works that build authentication on proximity, which can be exploited by wireless attacks, the project's novelty is based on physical operations that cannot be spoofed by an attacker. The project's broader significance and importance are as follows. 1) The research can help people in rural areas or with disabilities have equal rights of access to modern techniques, such as drone delivery, without relying on special user-side hardware. 2) The research can make IoT pairing and authentication much easier and more secure, and the results have wide applications to smart health, forensics, and continuous security monitoring. 3) The PI will conduct outreach and educational activities that aim to increase awareness of cybersecurity in the K-12 community and broaden the participation of students from underrepresented groups. The project seeks to improve IoT authentication and deliver novel approaches, algorithms, techniques, and systems through the following thrusts. Thrust 1: Authentication for UI-Constrained Devices. A protocol that supports mutual authentication, over an insecure wireless channel, to establish trust between a UI-constrained device and the user to support authentication for heterogeneous IoT devices. Thrust 2: Authentication for Distance-Constrained Devices. A highly usable approach enables secure authentication between an IoT device and the user even when they are multiple meters apart, which has applications ranging from drone delivery to ride sharing. Thrust 3: Authentication for Operation-Constrained Devices. For traditional objects retrofitted with zero-UI sensor nodes, AI-assisted implicit authentication enables recognizing a user without requiring any explicit authentication operations. In sum, the research seeks to substantially advance IoT authentication and foster a variety of IoT applications.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.