The Experts below are selected from a list of 5406 Experts worldwide ranked by ideXlab platform

Chip-hong Chang - One of the best experts on this subject based on the ideXlab platform.

  • UDhashing: Physical Unclonable Function-Based User-Device Hash for Endpoint Authentication
    IEEE Transactions on Industrial Electronics, 2019
    Co-Authors: Yue Zheng, Yuan Cao, Chip-hong Chang
    Abstract:

    With IT consumerization, access control to remote system by Endpoint user and Endpoint Device is mandatory for security and privacy protection. Existing systems bind an end user with his/her registered Devices but authenticate only the user and Device independently. This paper presents a novel UDhashing scheme, which is capable of providing a bipartite authentication of both end user and end Device as a whole, and mutual authentication between the Endpoint and the verifier. Noncontact facial biometric is extracted as user identity and physical unclonable function (PUF) is embedded into the Device to generate a Device “fingerprint.” UDhashing serves as an intermediary to unify the macroscopic human biometric and microscopic silicon entropy source into a single identity. The scheme is demonstrated using measured silicon data of a diode-clamped inverter-based strong PUF fabricated in 40 nm 1.1 V CMOS technology, and the Olivetti Research Laboratory (ORL) and extended (Ext.) Yale B face databases. The experimental results show that the proposed system has good authentication performance with excellent discriminability for different (challenge, user, Device) tuples. Besides, the proposed system is analyzed to be resilient to several known attacks. Its reliability and authentication performance can be easily enhanced by low-cost error-correction technique without compromising security.

Yue Zheng - One of the best experts on this subject based on the ideXlab platform.

  • UDhashing: Physical Unclonable Function-Based User-Device Hash for Endpoint Authentication
    IEEE Transactions on Industrial Electronics, 2019
    Co-Authors: Yue Zheng, Yuan Cao, Chip-hong Chang
    Abstract:

    With IT consumerization, access control to remote system by Endpoint user and Endpoint Device is mandatory for security and privacy protection. Existing systems bind an end user with his/her registered Devices but authenticate only the user and Device independently. This paper presents a novel UDhashing scheme, which is capable of providing a bipartite authentication of both end user and end Device as a whole, and mutual authentication between the Endpoint and the verifier. Noncontact facial biometric is extracted as user identity and physical unclonable function (PUF) is embedded into the Device to generate a Device “fingerprint.” UDhashing serves as an intermediary to unify the macroscopic human biometric and microscopic silicon entropy source into a single identity. The scheme is demonstrated using measured silicon data of a diode-clamped inverter-based strong PUF fabricated in 40 nm 1.1 V CMOS technology, and the Olivetti Research Laboratory (ORL) and extended (Ext.) Yale B face databases. The experimental results show that the proposed system has good authentication performance with excellent discriminability for different (challenge, user, Device) tuples. Besides, the proposed system is analyzed to be resilient to several known attacks. Its reliability and authentication performance can be easily enhanced by low-cost error-correction technique without compromising security.

Yuan Cao - One of the best experts on this subject based on the ideXlab platform.

  • UDhashing: Physical Unclonable Function-Based User-Device Hash for Endpoint Authentication
    IEEE Transactions on Industrial Electronics, 2019
    Co-Authors: Yue Zheng, Yuan Cao, Chip-hong Chang
    Abstract:

    With IT consumerization, access control to remote system by Endpoint user and Endpoint Device is mandatory for security and privacy protection. Existing systems bind an end user with his/her registered Devices but authenticate only the user and Device independently. This paper presents a novel UDhashing scheme, which is capable of providing a bipartite authentication of both end user and end Device as a whole, and mutual authentication between the Endpoint and the verifier. Noncontact facial biometric is extracted as user identity and physical unclonable function (PUF) is embedded into the Device to generate a Device “fingerprint.” UDhashing serves as an intermediary to unify the macroscopic human biometric and microscopic silicon entropy source into a single identity. The scheme is demonstrated using measured silicon data of a diode-clamped inverter-based strong PUF fabricated in 40 nm 1.1 V CMOS technology, and the Olivetti Research Laboratory (ORL) and extended (Ext.) Yale B face databases. The experimental results show that the proposed system has good authentication performance with excellent discriminability for different (challenge, user, Device) tuples. Besides, the proposed system is analyzed to be resilient to several known attacks. Its reliability and authentication performance can be easily enhanced by low-cost error-correction technique without compromising security.

Newman Thomas John - One of the best experts on this subject based on the ideXlab platform.

  • system and methods for providing security to an Endpoint Device
    2015
    Co-Authors: Vargas Anthony Joseph, Tallo Kenneth, Harvey Andrew George, Petree David Brian, Newman Thomas John
    Abstract:

    Described are architectures, systems, processes and methods for security that, at their core, are adaptive and changing at determined intervals so as to present a different environment, a portion of which is a varied attack surface, to the communications world exterior to the system. In one aspect is described improved security architecture, system and methods based upon multiple processors, operating systems and communication channels, in which at least some processors each perform as an input system connectable to a network, and are dissimilar in some manner, the manner of dissimilarity being controlled by a control system that is not connected to the network. Additionally in this aspect, an execution system is included which performs execution based upon received inputs to the input system, which are passed to the execution system once validated as being safe and not compromised.

Reyes Jose - One of the best experts on this subject based on the ideXlab platform.

  • systems and methods for detecting network security deficiencies on Endpoint Devices
    2019
    Co-Authors: Shavell Michael, Jiang Kevin, Reyes Jose
    Abstract:

    The disclosed computer-implemented method for detecting network security deficiencies on Endpoint Devices may include (i) detecting, at a network Device, a request from an Endpoint Device to automatically connect to a wireless network, (ii) establishing, via the network Device, a network connection between the Endpoint Device and a wireless network that appears to be the wireless network requested by the Endpoint Device but is not actually the requested wireless network, (iii) determining, based on establishing the network connection between the Endpoint Device and the wireless network that appears to be the requested wireless network, that the Endpoint Device is vulnerable to network attacks, and then (iv) facilitating, via the network connection, a security action on the Endpoint Device to protect the Endpoint Device against the network attacks. Various other methods, systems, and computer-readable media are also disclosed.