HapticLock: Eyes-Free Authentication for Mobile Devices
HapticLock: Eyes-Free Authentication for Mobile Devices
复制标题
HapticLock：移动设备的免视身份验证
DOI：
10.1145/3462244.3481001
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Euan Freeman
中科院分区：
文献类型：
--
作者：
Gloria Dhandapani;Jamie Ferguson;Euan Freeman
智能手机提供了对越来越多的个人和敏感信息的访问，但通常只能使用易于观察攻击的方法来保护。我们提出了HapticLock，一种新的身份验证方法，用于移动的设备，使用非视觉交互方式的谨慎的PIN输入，是很难攻击的肩膀冲浪。可用性实验（N=20）发现在安全条件下有效的PIN输入：例如，从随机起始数字输入四位数PIN的成功率为98.3%。一个肩膀冲浪实验（N=15）发现，HapticLock对观察攻击具有很高的抵抗力。即使在交互高度可见的情况下，当PIN输入以随机数开始时，攻击者也需要猜测第一个数字，从而导致肩扛冲浪的成功率非常低。此外，在认证期间，设备可以从视图中隐藏。我们使用的触觉交互方式给隐私意识的移动终端用户提供了一个可用的和安全的身份验证替代敏感情况。
Smartphones provide access to increasing amounts of personal and sensitive information, yet are often only secured using methods that are prone to observational attacks. We present HapticLock, a novel authentication method for mobile devices that uses non-visual interaction modalities for discreet PIN entry that is difficult to attack by shoulder surfing. A usability experiment (N=20) finds effective PIN entry in secure conditions: e.g., in 23.5s with 98.3% success rate for a four-digit PIN entered from a random start digit. A shoulder surfing experiment (N=15) finds that HapticLock is highly resistant to observational attacks. Even when interaction is highly visible, attackers need to guess the first digit when PIN entry begins with a random number, yielding a very low success rate for shoulder surfing. Furthermore, a device can be hidden from view during authentication. Our use of haptic interaction modalities gives privacy-conscious mobile device users a usable and secure authentication alternative for sensitive situations.