EAGER: Human Behavior Based Authentication for Smart Wireless Networked Systems

智能无线设备正日益成为访问物理位置、银行账户和其他有价值资源的首选方法。然而，使用它们进行身份验证需要更多的安全考虑，因为它们可能被盗，并且容易受到不同类型的软件攻击。研究的目的是基于宏观的人类行为，为智能无线网络系统开发一种新型的普适认证。关键的假设是，一个人的行为的规律性可以用来唯一地识别她，也可以用与她过去的行为有关的一次性身份验证挑战代替静态密码。为此，该项目将重点关注三个集成组件：(1)行为数据收集和认证的方法，从物理层指纹技术到保护隐私的认证协议；(2)发现和建模用户行为规律的算法，以对其进行普适认证；(3)基于用户偏好、时间表和例程生成一次性认证挑战的方法。该研究的预期结果是一种全新的认证范式，将消除与智能无线设备相关的风险，并且还可以在其他领域（如在线认证）中找到应用。研究成果和开发的认证框架的部分内容将通过该项目传播给尽可能广泛的受众，包括应用程序开发人员。年代的网站。该项目的教育部分包括将研究议程与课程开发相结合，以及在计算机科学和工程领域吸引高中生和代表性不足的社区的外展活动。

Smart wireless devices are increasingly becoming the preferred method for accessing physical locations, bank accounts, and other valuable resources. However, their use for authentications comes with increased security considerations, since they can be stolen and are vulnerable to different types of software attacks. The objective of the research is to develop a new type of pervasive authentication for smart wireless networked systems based on macroscopic human behavior. The key hypothesis is that the regularity in a person's behavior can be used to uniquely identify her, as well as to substitute static passwords with one-time authentication challenges pertaining to her past behavior. To this end, this project will focus in three integrated components: (1) methodologies for behavioral data collection and authentication, spanning from physical layer fingerprinting techniques to privacy-preserving authentication protocols; (2) algorithms for discovering and modeling the regularity in a user's behavior to pervasively authenticate her; and (3) methods for generating one-time authentication challenges based on the user's preferences, schedules and routines. The expected result of the research is a radically new paradigm in authentication that will eliminate the risks associated with smart wireless devices, and can also find application in other domains such as online authentication. The research outcomes and parts of the developed authentication framework will be disseminated to the widest audience possible, including application developers, through the project?s website. The educational component of the project includes integration of the research agenda with curriculum development, and outreach activities that engage high-school students and underrepresented communities in computer science and engineering.