Towards device-to-user authentication: Protecting against phishing hardware by ensuring mobile device authenticity using vibration patterns

Rainhard Dieter Findling, René Mayrhofer

Tutkimustuotos: Artikkeli kirjassa/konferenssijulkaisussaConference contributionScientificvertaisarvioitu

4 Sitaatiot (Scopus)

Abstrakti

Users usually authenticate to mobile devices before using them (e.g. PIN, password), but devices do not do the same to users. Revealing the authentication secret to a non-authenticated device potentially enables attackers to obtain the secret, by replacing the device with an identical-looking malicious device. The revealed authentication secret could be transmitted to the attackers immediately, who then conveniently authenticate to the real device. Addressing this attack scenario, we analyze different approaches towards mobile device-to-user (D2U) authentication, for which we provide an overview of advantages/drawbacks, potential risks and device authentication data bandwidth estimations. We further analyze vibration as one D2U feedback channel that is unobtrusive and hard to eavesdrop, including a user study to estimate vibration pattern recognition using a setup of '7 bits per second (b/s). Study findings indicate that users are able to distinguish vibration patterns with median correctness of 97.5% (without taking training effects into account) - which indicates that vibration could act as authentication feedback channel and should be investigated further in future research.

AlkuperäiskieliEnglanti
OtsikkoMUM 2015 - Proceedings of the 14th International Conference on Mobile and Ubiquitous Multimedia
ToimittajatEnrico Rukzio, Michael Roland, Rene Mayrhofer, Clemens Holzmann, Jonna Hakkila
KustantajaACM
Sivut131-135
Sivumäärä5
Vuosikerta30-November-2015
ISBN (elektroninen)9781450336055
DOI - pysyväislinkit
TilaJulkaistu - 30 marraskuuta 2015
OKM-julkaisutyyppiA4 Artikkeli konferenssijulkaisuussa
TapahtumaInternational Conference on Mobile and Ubiquitous Multimedia - Linz, Itävalta
Kesto: 30 marraskuuta 20152 joulukuuta 2015
Konferenssinumero: 14

Conference

ConferenceInternational Conference on Mobile and Ubiquitous Multimedia
LyhennettäMUM
MaaItävalta
KaupunkiLinz
Ajanjakso30/11/201502/12/2015

Sormenjälki Sukella tutkimusaiheisiin 'Towards device-to-user authentication: Protecting against phishing hardware by ensuring mobile device authenticity using vibration patterns'. Ne muodostavat yhdessä ainutlaatuisen sormenjäljen.

Siteeraa tätä