PassWalk: Spatial Authentication Leveraging Lateral Shift and Gaze on Mobile Headsets
PassWalk: Spatial Authentication Leveraging Lateral Shift and Gaze on Mobile Headsets
复制标题
PassWalk：利用移动耳机上的横向移动和注视进行空间身份验证
DOI：
10.1145/3503161.3548252
复制
发表时间：
2022
期刊：
影响因子：
--
通讯作者：
Pan Hui
中科院分区：
文献类型：
--
作者：
Abhishek Kumar;Lik;Jagmohan Chauhan;Xiang Su;M. A. Hoque;S. Pirttikangas;Sasu Tarkoma;Pan Hui
在移动的耳机上进行安全和可用的用户认证是一个具有挑战性的问题。这种设备上的微型触摸板成为影响可用性的用户交互的障碍。然而，最常见的认证方法，即，用于输入密码的标准QWERTY虚拟键盘或空中输入极易受到肩击攻击。在本文中，我们提出PassWalk，一个无键盘的认证系统，利用多模态输入的移动的耳机。PassWalk证明了由用户的凝视和横向移动（即，脚步声，同时。PassWalk中的无键盘身份验证界面使用户能够实现图形密码的高度移动的输入，其中包含数字叠加和物理对象。我们对22名招募的参与者（15名合法用户和7名攻击者）进行了评估。我们的研究结果表明，PassWalk提供了高安全性（只有1.1%的观察攻击成功），平均认证时间为8.028秒，这优于使用QWERTY虚拟键盘（21.5%成功攻击）和研究原型LookUnLock（5.5%成功攻击）的商业方法。此外，与当前的商业方法相比，PassWalk给用户带来的工作量要小得多。
Secure and usable user authentication on mobile headsets is a challenging problem. The miniature-sized touchpad on such devices becomes a hurdle to user interactions that impact usability. However, the most common authentication methods, i.e., the standard QWERTY virtual keyboard or mid-air inputs to enter passwords are highly vulnerable to shoulder surfing attacks. In this paper, we present PassWalk, a keyboard-less authentication system leveraging multi-modal inputs on mobile headsets. PassWalk demonstrates the feasibility of user authentication driven by the user's gaze and lateral shifts (i.e., footsteps) simultaneously. The keyboard-less authentication interface in PassWalk enables users to accomplish highly mobile inputs of graphical passwords, containing digital overlays and physical objects. We conduct an evaluation with 22 recruited participants (15 legitimate users and 7 attackers). Our results show that PassWalk provides high security (only 1.1% observation attacks were successful) with a mean authentication time of 8.028s, which outperforms the commercial method of using the QWERTY virtual keyboard (21.5% successful attacks) and a research prototype LookUnLock (5.5% successful attacks). Additionally, PassWalk entails a significantly smaller workload on the user than the current commercial methods.
DOI：
10.14722/ndss.2020.24079
发表时间：
2020
期刊：
Proceedings 2020 Network and Distributed System Security Symposium
影响因子：
--
作者：
Shiqing Luo;Anh Nguyen;Chen Song;Feng Lin;Wenyao Xu;Zhisheng Yan
通讯作者：
Shiqing Luo;Anh Nguyen;Chen Song;Feng Lin;Wenyao Xu;Zhisheng Yan