I-Corps: Securing Mobile Devices with Memorable, Usable, and Secure Authentication

I-Corps：通过易于记忆、可用且安全的身份验证来保护移动设备

• 批准号: 1832820
• 负责人: Ye Zhu
• 金额: $ 5万
• 依托单位: Cleveland State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-04-01 至 2022-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1832820&HistoricalAwards=false
• 关键词: Corps; Securing; Mobile; Devices; Memorable

The broad impact/commercial potential of this I-Corps project is to protect security and privacy of mobile device users with memorable, usable, and secure authentication schemes. According to statista.com, the number of smartphone users in the world will be more than five billion by 2019. The popularity of these mobile devices is due to a unique set of features including ubiquitous Internet access through communication technologies such as Wifi and 4G/LTE, easy to use touch-based inputs, and numerous applications and games. In the meantime, the security of mobile devices is becoming a major concern as device users are storing sensitive data such as personal contacts and utilizing sensitive applications like banking and stock trading. Strong authentication as the forefront defense mechanism can prevent unauthorized access to a mobile device that may lead to lack of accountability, data loss or stealing, and identity theft. Due to the popularity of mobile devices and their uses in government, business, and even military applications, securing mobile devices with secure, memorable, and usable authentication is of great societal importance.This I-Corps project focuses on exploring the market potential for multi-dimensional authentication schemes. The new paradigm of multi-dimensional authentication schemes can achieve better memorability, security, and usability at the same time. The new schemes fuse information from multiple dimensions to form a password, allowing the schemes to enlarge the password space and improve memorability by reducing memory interference. The information fusion can increase usability as fewer input gestures are required for passwords of the same security strength. The schemes can also be shoulder-surfing resistant. A successful authentication requires a user to respond to a random challenge so that a set of predefined rules are satisfied after adjustments made by the user. The schemes can also be used for continuously monitoring device user behavior to ensure the current device users is a user authorized to use the device. Through this project, we will be able to investigate the needs from various customer segments and polish our technologies and prototypes to meet the needs.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该 I-Corps 项目的广泛影响/商业潜力是通过令人难忘、可用且安全的身份验证方案来保护移动设备用户的安全和隐私。据 statista.com 称，到 2019 年，全球智能手机用户数量将超过 50 亿。这些移动设备的普及得益于一系列独特的功能，包括通过 Wifi 和 4G/等通信技术进行无处不在的互联网接入。 LTE、易于使用的触摸输入以及众多应用程序和游戏。与此同时，随着设备用户存储个人联系人等敏感数据并使用银行和股票交易等敏感应用程序，移动设备的安全性正成为一个主要问题。强身份验证作为最前沿的防御机制，可以防止对移动设备的未经授权的访问，从而导致缺乏责任、数据丢失或被盗以及身份盗窃。由于移动设备的普及及其在政府、商业甚至军事应用中的使用，通过安全、难忘且可用的身份验证来保护移动设备具有重大的社会重要性。该 I-Corps 项目致力于探索多用途的市场潜力。维认证方案。多维认证方案的新范式可以同时实现更好的记忆性、安全性和可用性。新方案融合多个维度的信息形成密码，从而使该方案能够扩大密码空间并通过减少记忆干扰来提高记忆性。信息融合可以提高可用性，因为相同安全强度的密码所需的输入手势更少。该方案还可以抵抗肩窥。成功的身份验证需要用户响应随机质询，以便在用户进行调整后满足一组预定义的规则。该方案还可以用于持续监控设备用户行为，以确保当前设备用户是被授权使用该设备的用户。通过这个项目，我们将能够调查不同客户群体的需求，并完善我们的技术和原型以满足需求。该奖项反映了 NSF 的法定使命，并通过利用基金会的智力优势和更广泛的影响进行评估，认为值得支持审查标准。