TWC: Medium: Collaborative: Towards Secure, Robust, and Usable Gesture-Based Authentication

TWC：媒介：协作：迈向安全、稳健且可用的基于手势的身份验证

• 批准号: 1228842
• 负责人: Nasir Memon
• 金额: $ 40万
• 依托单位: New York University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-09-01 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1228842&HistoricalAwards=false
• 关键词: TWC; Medium; Collaborative; Towards; Secure

This project investigates the feasibility of secure, robust, and usable gesture-based authentication as an alternative to traditional alphanumeric passwords and biometrics. It is motivated by the rapid increase in authentication-related security breaches and by the emergence of new human-computer interfaces. While the breaches have demonstrated the seriousness of the issue, two emerging types of gesture-based interfaces, multi-touch (smartphones, tablets) and camera-based (Kinect), offer a unique opportunity for robust solution.The benefit of gesture-based authentication over a purely-biometric one lies in the fact that it combines involuntary biometric features (e.g., hand shape), that are irrevocable, with user-controlled voluntary characteristics that can be easily changed. Three research thrusts are being pursued: 1) gesture recognition algorithms (search for robust gesture features, their compact representation, and reliable classification algorithms), 2) human factors (study of uniqueness, repeatability, ergonomics, device dependence of gestures, and gesture complexity) and 3) security considerations (evaluation of authentication performance under a range of performance measures and different threat models). A successful completion of this research will catalyze the development and adoption of next-generation authentication methods that are critically needed at the personal, institutional, and governmental levels. As the price paid (time, money, and resources) to repair a security breach can be astounding, this project will have substantial societal impact by increasing the sense of security and reducing breach-related costs. At educational level, this project is involved in middle and high school outreach at Boston University as well as the annual cybsersecurity competition CSAW at NYU-Poly.

该项目研究了安全、稳健且可用的基于手势的身份验证作为传统字母数字密码和生物识别技术替代方案的可行性。其动机是与身份验证相关的安全漏洞的快速增加以及新人机界面的出现。虽然这些违规行为已经证明了问题的严重性，但两种新兴类型的基于手势的界面，即多点触控（智能手机、平板电脑）和基于摄像头的界面（Kinect），为稳健的解决方案提供了独特的机会。基于手势的优势与纯生物识别相比，其身份验证的优势在于它结合了不可撤销的非自愿生物识别特征（例如手形）与用户控制的可轻松更改的自愿特征。正在追求三个研究重点：1）手势识别算法（寻找鲁棒的手势特征、其紧凑的表示和可靠的分类算法），2）人为因素（研究唯一性、可重复性、人体工程学、手势的设备依赖性和手势复杂性） ) 和 3) 安全考虑（在一系列性能测量和不同威胁模型下评估身份验证性能）。这项研究的成功完成将促进个人、机构和政府层面迫切需要的下一代身份验证方法的开发和采用。由于修复安全漏洞所付出的代价（时间、金钱和资源）可能令人震惊，因此该项目将通过提高安全感并降低与漏洞相关的成本来产生巨大的社会影响。在教育层面，该项目参与了波士顿大学的初高中外展活动以及纽约大学理工学院的年度网络安全竞赛 CSAW。