Ass. Prof.

Rie Shigetomi YAMACUCHI

CampusHongo (Eng.Bld.2)

Field

Information Security

Information Security: Personal Authentication and Privacy Protection
Various problems including information theft and fraud exist in the infrastructure for e-commerce. In
development of safe and secure systems applicable to such problems, we propose implementation of new
information security technologies using next generation techniques in personal authentication.
Contact: yamaguchi.rie@i.u-tokyo.ac.jp
1. Personal Authentications and Sensor Information
User authentication is important for secure personalcommunication on the Internet. Authentication by ID andpassword is the most popular user validation technique.
However, as the technique is based on user literacy andmemory, many studies have identified security problems andpropose new authentication techniques. The recent prevalencein cases of leaked IDs and passwords mean that changes areurgently required.
In this study, we focused on applying techniques using datacollected from portable or handheld devices to personalauthentication such as GPS, Wi-Fi, user history, and biometricinformation. We will apply these techniques to user
authentication so that the server can identify who the user isbased on the device. Some similar techniques have alreadybeen proposed in the field of recognition and classification but
not in the field of security for authentication.
We are also interested in evaluating multimodal personalauthentication. Multimodal personal authentication identifies
individuals using multiple indicators such as biometricfingerprint and finger-vein. By using multiple individual
identifiers, the level of accuracy is increased. Multimodal
authentication has been applied for practical use, but its
theoretical verification as a security evaluation technique has
so far been insufficient. This evaluation investigates key
technology for multiple sensor authentications.

Human
⼈間
Commute, Be at
home, Have meals,Walk, Sleep,Exercise, Shop, Use
Smartphones

Life Environment
ActionPatterns
Commute, Be at
home, Shop, HaveMeals, Travel,
Entertainment

Env.

3. Privacy Protection Techniques by Real Data
Privacy protection techniques are an alternative security
method to personal authentication as the latter identifies a user
while the former gathers user information without identifying.
We focus on analyzing real data collected by sensory input
devices, and discuss the risks that would identify how muchinformation is necessary to complete tasks versus how muchcauses privacy risks. We also discuss privacy issues including
what kinds of information are classified as key data and what
information is necessary for making use of another application.
You can choose any research topic in the field of information
security and I would be very happy to encourage you to pursue
new challenges.

Big
DataAccum
ulationSensors
Observe

2. Trust Platform and Security
The root of trust on the system is required for security
techniques. When users manage certain computing systems
such as clouds, they need to trust part of a device in order toensure whole system security. For example, if a system has atrust point used to gain access, a root of trust such as a smart
card can be used to unlock the trust point.. We discuss the useof anti-tamper devices including secure processors or smart
cards for the root of trust.

Input

Loc. Info.
Wifi
Activity Level
App. Log
Security Camera
・・・

ProvideCharacteristics

PersonalizedService

Personalized Lifestyle
Analysis PlatformBehavior
HabitsCommute, Be at
home

Analyzeusing
AI/Big
Data

Pattern Recognition
Attribute Extraction

PersonalPreferences

Clustering

Shopping, Travel,
CinemaBinary Classification

Unordinary
Exceptional Activity
Biz. Trip, Move ahouse

Outlier Detection