CRII: SaTC: Physical Side-Channel Attacks in Biometric System

与密钥或密码不同，生物特征是永久性的，一旦被泄露就很难撤销。由于需要存储受试者的生物特征测量值（模板），生物识别系统很容易侵犯用户隐私。未受保护的生物特征参考数据存储会造成严重的隐私威胁，如身份盗窃。尽管最近对生物识别系统的安全性进行了研究，但对生物识别系统中物理侧信道攻击的研究仍处于起步阶段，特别是与密码和信息技术相比。虽然侧信道攻击在信息技术安全和密码学领域是非常发达的技术，但在生物识别系统的背景下，它们的研究还不够充分。该项目的新方面是开发方法，如度量、深度学习算法、协议和工具，用于生物识别系统中的物理侧信道攻击和对策。该项目旨在成为弥合硬件安全和生物识别安全之间看似孤立的研究领域之间知识鸿沟的第一步。该项目的更广泛的意义和重要性是提高生物识别系统的安全性和隐私性，防止物理侧通道攻击，随后是保护方案，并参与由国家标准与技术研究所领导的正在进行的生物识别评估和标准化工作。该项目为未来的生物识别设计人员提供了如何有效利用物理侧信道攻击框架来识别生物识别系统漏洞的见解。项目成果推进了生物识别系统中的攻击（物理侧通道）和防御机制（特定领域架构）。生物识别防护方案根据国际标准化组织和国际电工委员会（ISO/IEC）标准24745进行评估。由于生物识别系统在社会上的广泛采用，该项目可以对涉及身份证、边境身份检查站和医疗保健中的患者身份验证的广泛活动产生积极影响。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Biometric traits are permanent and difficult to revoke if compromised, unlike keys or passwords. By requiring the storage of biometric trait measurements (templates) for subjects, biometric systems are vulnerable to violation of user privacy. Unprotected storage of biometric reference data poses severe privacy threats such as identity theft. Despite recent research in the security of biometric systems, research on physical side-channel attacks in biometric systems are still nascent, especially when compared to cryptographic and information technologies. Although side-channel attacks are well-developed techniques in the information technology security and cryptography fields, they have been understudied in the context of biometric systems. The project’s novel aspects are developing methodologies such as metrics, deep learning algorithms, protocols, and tools for physical side-channel attacks and countermeasures in biometric systems. This project intends to be a first step towards bridging the knowledge gap between seemingly isolated research field on hardware security and biometric security. The project's broader significance and importance are improvement of security and privacy of biometric systems against physical side channel attacks followed by protection schemes and involvement in the ongoing biometric evaluation and standardization efforts led by the National Institute of Standards and Technology.This project offers insights for future biometric designers on how to efficiently take advantage of physical side-channel attack frameworks to recognize vulnerabilities in biometric systems. The project outcomes advance both attack (physical side-channel) and defense mechanism (domain-specific architecture) in biometric systems. The biometric protection scheme is evaluated according to International Organization for Standardization and the International Electrotechnical Commission (ISO/IEC) Standard 24745. Due to the wide adoption of biometric systems in society, this project can have a positive impact on a broad range of activities involving identity cards, border identity checkpoints, and patient authentication in healthcare.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.