TWC SBE: Small: Collaborative: Brain Password: Exploring A Psychophysiological Approach for Secure User Authentication

TWC SBE：小型：协作：大脑密码：探索安全用户身份验证的心理生理学方法

• 批准号: 1422417
• 负责人: Zhanpeng Jin
• 金额: $ 30万
• 依托单位: SUNY at Binghamton
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-10-01 至 2018-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1422417&HistoricalAwards=false
• 关键词: TWC; SBE; Small; Collaborative; Brain

Cryptographic systems often rely on the secrecy of cryptographic credentials; however, these are vulnerable to eavesdropping and can resist neither a user's intentional disclosure nor coercion attacks where the user is forced to reveal the credentials. Conventional biometric keys (e.g., fingerprint, iris, etc.), unfortunately, can still be surreptitiously duplicated or adversely revealed. In this research, the PIs argue that the most secure cryptographic credentials are ones of which the users aren't even aware. On the basis of this argument, the objective of this research is to investigate a new psychophysiological approach for secure and trustworthy user authentication via non-volitional components of the electroencephalogram (EEG) brainwave responses. Specifically, the research examines how consistent these responses are over time and also formally assesses how unique they are to individuals. By identifying reproducible, unique features of the EEG, we are developing a method to accurately recognize and authenticate people by extracting time-invariant and context-invariant "brain passwords."This research holds the potential to transform existing authentication systems into more secure, disclosure-resistant solutions; critical for high-security applications. The cross-disciplinary content of the work also, importantly, will allow us to strengthen our understanding of individual brain responses and apply this new knowledge into increasingly vulnerable cyberspace. This may lead to a far-reaching breakthrough in the possibility of "brain fingerprinting." Moreover, the investigators are taking active roles in nourishing the scholarship of underrepresented minorities and female students and making substantial efforts to integrate diversity in both educational and research activities.

加密系统通常依靠密码凭证的保密性；但是，这些容易受到窃听的影响，并且不能抵抗用户的故意披露，也不能抵抗用户被迫透露凭据的胁迫攻击。不幸的是，传统的生物识别键（例如，指纹，虹膜等）仍然可以秘密地复制或不利地揭示。在这项研究中，PIS认为，最安全的加密凭据是用户甚至不知道的凭据。基于这一论点，这项研究的目的是通过脑电图（EEG）脑电波响应的非挥发性组件来研究一种新的心理生理方法，以确保安全且值得信赖的用户身份验证。具体而言，该研究检查了这些响应随着时间的流逝的一致性，并正式评估它们对个人的独特程度。通过识别脑电图的可再现，独特的特征，我们正在开发一种方法，通过提取时间不变和上下文不变的“脑密码”来准确识别和对人员进行身份验证。这项研究具有将现有的身份验证系统转换为更安全的披露，抗披露的解决方案的潜力；对于高安全应用至关重要。重要的是，工作的跨学科内容还将使我们能够加强对个人大脑反应的理解，并将这些新知识应用于日益脆弱的网络空间。这可能会导致“大脑指纹”的可能性深远的突破。此外，调查人员正在积极地培养代表性不足的少数群体和女学生的奖学金，并做出了巨大的努力，以将多样性融合到教育和研究活动中。