SaTC: CORE: Small: Collaborative: Cardiac Password: Exploring a Non-Contact and Continuous Approach to Secure User Authentication

SaTC：核心：小型：协作：心脏密码：探索非接触式和连续的安全用户身份验证方法

• 批准号: 1718375
• 负责人: Wenyao Xu
• 金额: $ 29.46万
• 依托单位: SUNY at Buffalo
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-09-01 至 2022-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1718375&HistoricalAwards=false
• 关键词: SaTC; CORE; Small; Collaborative; Cardiac

Most traditional security systems authenticate a user only at the initial log-in session. As a result, it is possible for another user, authorized or unauthorized, to access the system information, with or without the permission of the signed-on user, until the initial user logs out. This could be a critical security flaw even for high-security systems. Traditional one-time (e.g., password) or two-factor (e.g., password with fingerprint) authentication methods are no longer sufficient. Continuous authentication is a form of dynamic, risk-based authentication that changes the perspective of authentication from an event to a process, and has the potential to address the vulnerability of existing security systems by continuously verifying the user's identity during the session use. This interdisciplinary team explores a novel continuous authentication through a transformative non-contact heart-based biometrics. This project could transform the understanding of non-volatile components in cardiac motion, and convert this new knowledge and related technologies into improved security in increasingly vulnerable cyberspace. The project establishes a unique inter university research and education program on cyber security, which involves both K-12, undergraduate students, and underrepresented populations.The Cardiac Password project investigates a holistic hardware/software solution to secure and trustworthy continuous authentication via non-contact cardiac motion sensing. The new authentication system can recognize humans in a non-contact, unobtrusive and even non-line-of-sight fashion. Towards this goal, the project has three thrusts. First, the team develops a high-fidelity non-contact cardiac motion sensing device. Second, the team investigates invariant cardiac descriptors and propose continuous authentication methodologies. Third, the team assesses the performance, usability, and vulnerability of the proposed Cardiac Password system. The outcome of this research can advance state-of-the-art heart-based biometrics in user authentication, and provide insights on developing more undeceivable, disclosure-resistant and user-friendly biometric solutions. The investigators will disseminate the results of the project through publications, talks, and demos, and integrate the research results into education curricula.

大多数传统的安全系统仅在初始登录会话中对用户进行身份验证。结果，在有或未经签名的用户许可的情况下，其他用户（授权或未经授权）可以访问系统信息，直到初始用户登录为止。即使对于高安全系统，这也可能是一个关键的安全漏洞。传统的一次性（例如密码）或两因素（例如，用指纹密码）身份验证方法不再足够。连续身份验证是一种基于动态的，基于风险的身份验证的一种形式，它将身份验证的观点从事件变为过程，并有可能通过在会话使用过程中连续验证用户的身份来解决现有安全系统的脆弱性。这个跨学科的团队通过基于转化的非接触心脏生物识别技术探索了一种新颖的连续身份验证。该项目可以改变对心脏运动中非易失性组件的理解，并将这些新知识和相关技术转化为越来越脆弱的网络空间的安全性。该项目建立了一项独特的大学间研究与教育计划，涉及K-12，本科生和代表性不足的人群。心脏密码项目研究了整体硬件/软件解决方案，以通过非接触性心脏运动感应来保护和可信赖的连续身份验证。新的身份验证系统可以以非接触，不引人注目甚至非线的视线方式识别人类。为了实现这一目标，该项目有三个推力。首先，团队开发了高保真性非接触性心脏运动感应装置。其次，该小组研究了不变的心脏描述符，并提出了连续的身份验证方法。第三，该团队评估了建议的心脏密码系统的性能，可用性和脆弱性。这项研究的结果可以推进用户身份验证中最新的基于心脏的生物识别，并提供有关开发更不受欢迎，抗披露和用户友好的生物特征识别解决方案的见解。研究人员将通过出版物，谈判和演示传播项目的结果，并将研究结果纳入教育课程。

项目成果

WaveEar: Exploring a mmWave-based Noise-resistant Speech Sensing for Voice-User Interface

• DOI: 10.1145/3307334.3326073
• 发表时间: 2019-06
• 期刊: Proceedings of the 17th Annual International Conference on Mobile Systems, Applications, and Services
• 作者: Chenhan Xu;Zhengxiong Li;Hanbin Zhang;Aditya Singh Rathore;Huining Li;Chen Song;Kun Wang;Wenyao Xu

E-Eye: Hidden Electronics Recognition through mmWave Nonlinear Effects

• DOI: 10.1145/3274783.3274833
• 发表时间: 2018-01-01
• 期刊: SENSYS'18: PROCEEDINGS OF THE 16TH CONFERENCE ON EMBEDDED NETWORKED SENSOR SYSTEMS
• 作者: Li, Zhengxiong;Yang, Zhuolin;Xu, Wenyao
• 通讯作者: Xu, Wenyao

A Survey on Heart Biometrics

• DOI: 10.1145/3410158
• 发表时间: 2021-02-01
• 期刊: ACM COMPUTING SURVEYS
• 影响因子: 16.6
• 作者: Rathore, Aditya Singh;Li, Zhengxiong;Xu, Wenyao
• 通讯作者: Xu, Wenyao

Cardiac Scan: A Non-contact and Continuous Heart-based User Authentication System

• DOI: 10.1145/3117811.3117839
• 发表时间: 2017-01-01
• 期刊: PROCEEDINGS OF THE 23RD ANNUAL INTERNATIONAL CONFERENCE ON MOBILE COMPUTING AND NETWORKING (MOBICOM '17)
• 作者: Lin, Feng;Song, Chen;Ren, Kui
• 通讯作者: Ren, Kui

FerroTag: a paper-based mmWave-scannable tagging infrastructure

• DOI: 10.1145/3356250.3360019
• 发表时间: 2019-11
• 期刊: Proceedings of the 17th Conference on Embedded Networked Sensor Systems
• 作者: Zhengxiong Li;Baicheng Chen;Zhuolin Yang;Huining Li;Chenhan Xu;Xingyu Chen;Kun Wang;Wenyao Xu