基于通用移动设备的匿名多因子认证协议研究

Identity authentication is the first line of defense for information systems, and anonymity is an important property to protect user privacy. The rapid development of mobile Internet is both a challenge and an opportunity. It’s mobile, real-time and personalized service features challenge the security, efficiency and usability of traditional smart card-based password authentication. Therefore, it becomes an imperative need to replace smart card with generic mobile devices for designing new leakage-resistant two-factor authentication protocols. In this project, we will focus on the multi-factor authentication technique which is a combination of passwords, mobile devices and behavior features, and includes the following research contents: (1) We develop a suite of comprehensive evaluation indicator system for anonymous "mobile device+ password" two-factor authentication protocols; (2) We propose generic frameworks to construct two-factor protocols from single-factor ones and multi-factor protocols from two-factor ones; (3) We advance two leakage-resistant anonymous multi-factor authentication protocols with provable security. The development of this project will provide important theoretical basis and technical reference for the fundamental solution to the user authentication problem in mobile environment.

身份认证是保障信息系统安全的第一道防线，匿名性是保护用户隐私的重要属性。移动互联网的快速发展是挑战也是机遇，其移动、实时、个性化的服务特征对传统基于智能卡的口令认证协议的安全性、效率和可用性提出挑战。以智能手机为代表的通用移动设备，取代传统专用智能卡，来构建抗泄露的口令认证协议面临迫切现实需求。本项目拟研究基于口令、移动设备和行为特征相结合的多因子认证技术。具体研究内容包括:(1)构建一套“移动设备+口令”匿名双因子认证协议的综合评价指标体系;(2)提出单因子向双因子协议以及双因子向多因子协议转化的通用框架;(3)设计两个可证明安全的抗泄露匿名多因子认证协议。课题的开展将为通用移动设备环境下用户身份认证问题的根本解决提供重要的理论依据和技术参考。

本项目主要研究基于通用移动设备的匿名多因子认证协议的设计和分析，着重研究了“口令”这一认证因子的特征和安全性、匿名多因子身份认证协议的综合评价指标、双因子协议向单因子协议转化的通用框架以及多因子协议的具体设计等内容。特别地，发现中英用户口令在结构和安全性方面有显著差异，突出了针对中文用户设计专门口令策略的必要性。这项工作已发表在顶级会议USENIX Security 2019上，随后被MIT科技评论、IEEE Spectrum、ACM TechNews、凤凰科技等国内外媒体报道；在格上提出的一种不使用非交互式零知识证明的两轮PAKE协议，获得了第十四届信息安全与密码学国际会议(INSCRYPT 2018)的最佳论文奖。项目执行期间发表论文16篇，其中SCI检索9篇，EI检索7篇，包括中国计算机学会推荐A类期刊和会议4篇。项目组共培养博士研究生2名，硕士研究生1名，本科生6名，其中已毕业6名。