TC: Small: Designing New Authentication Mechanisms using Hardware Capabilities in Advanced Mobile Devices

身份验证是计算机安全中的一个典型问题。然而，最常用的身份验证机制存在各种缺点。密码是最常见的身份验证机制，很容易受到重播攻击。物理身份验证令牌克服了其中的一些问题，但它们面临着部署和兼容性方面的障碍。最近，先进的移动设备得到了广泛的应用。这些设备提供了新的硬件能力，如MIMO(多输入多输出)无线电、各种传感器和硬件认证模块。我们研究如何利用先进移动设备的硬件能力来设计更好的认证机制。我们主要关注三种类型的硬件功能。首先，某些移动设备通过内置硬件模块向其网络进行身份验证。我们研究了如何利用这种现有的身份验证基础设施来执行其他身份验证任务，例如对网站用户进行身份验证。其次，移动设备具有MIMO无线电收发机。我们研究了如何使用这些收发器配对附近的移动设备，而不需要用户将共享的秘密输入到设备中。最后，许多先进的移动设备都有传感器，如加速计。我们研究了如何使用加速度计设计基于手势的用户身份验证。该项目的影响将非常明显。大多数当前的身份验证机制都存在各种安全、可用性和部署问题。我们的新机制克服了许多这样的问题。由于这些机制基于移动设备中日益常见的硬件功能，因此可以将它们部署到数十亿移动用户，使他们的身份验证任务更轻松、更安全。

Authentication is a quintessential problem in computer security. However, most commonly used authentication mechanisms suffer from a variety of shortcomings. Passwords, the most common authentication mechanism, are vulnerable to replay attacks. Physical authentication tokens overcome some of these problems; however, they face deployment and compatibility obstacles.Recently, advanced mobile devices have become widely available. These devices provide new hardware capabilities, such as MIMO (multiple-input and multiple-output) radio, a variety of sensors, and hardware authentication modules.We investigate how to take advantage of hardware capabilities in advanced mobile devices to design better authentication mechanisms. We are focusing on three types of hardware capabilities. First, certain mobile devices authenticate to their networks via built-in hardware modules. We investigate how to leverage such existing authenticating infrastructure for other authentication tasks, such as authenticating users to websites. Second, mobile devices have MIMO radio transceivers. We investigate how to use these transceivers to pair nearby mobile devices without requiring the user to enter shared secrets into the devices. Finally, many advanced mobile devices have sensors, such as accelerometers. We investigate how to design gesture-based user authentication using accelerometers.The impact of this project will be highly visible. Most current authentication mechanisms have various security, usability, and deployment problems. Our new mechanisms overcome many of these problems. Since these mechanisms are based on hardware capabilities that are increasingly common in mobile devices, they can be deployed to billions of mobile users to make their authentication tasks easier and securer.