0EISUA: Zero Effort Indoor Secure User Authentication

Abstract

Two-factor authentication (2FA) systems implement by verifying at least two factors. A factor can be one or more of something a user knows (password, or phrase), something a user possesses (smart card, or smartphone), something a user is (fingerprint, or iris), something a user does (keystroke), or somewhere a user is (location). In a conventional 2FA system, a user is required to interacts (e.g., typing a passcode) in order to implement the second layer of authentication, which is not very user-friendly. Nowadays, smart devices (phones, laptops, tablets, etc.) can receive signals from different radio frequency technologies within range. As these devices move among networks (Wi-Fi access points, cell phone towers, etc.), they receive broadcast messages, some of which can be used to collect information. This information can be utilized in a variety of ways, such as establishing a connection, sharing information, locating devices, and, most appropriately, identifying users in range. The principal benefit of broadcast messages is that the devices can read and process the embedded information without being connected to the broadcaster. Moreover, the broadcast messages can be received only within a range of the wireless access point sending the broadcast, thus inherently limiting access to those devices in close physical proximity and facilitating many applications dependent on that proximity. In this paper, 0EISUA is proposed, a zero-effort two-factor authentication scheme based on something that is in the user's environment (ambient access points). In our research, data from the broadcast messages are utilized to implement the second authentication factor by determining whether two devices are proximate or not to ensure that they belong to the same user, in a way that requires zero interaction from the user. The new proposed system introduced in this paper is experimentally tested.

Design Recommendations for Gate Security Systems and Health Status: A Systematic Review

“…Usability is defined as the degree to which legitimate users can enter the main gate with an acceptable level of efficiency and satisfaction without compromising the proposed security mechanisms and ease of use without falling into recurring problems [9]. User satisfaction addresses several aspects, including approval and acceptance of the system's functionality and efficiency.…”

“…Smartphones provide a means for verifying a user's identity. Reference [9] used smartphones to verify user login information. They designed a smart gate that uses broadcast messages from a mobile app that connects to the gate to allow or deny access.…”

“…Type of system Advantages Disadvantages Challenges [9] Mobile-centered Convenience Small proximity, needs a Wi-Fi connection.…”

Efficient Entry: A Stateful Authentication Approach in Health-Aware Smart Gate Systems

“…The choice of user verification design hinges on the required security level. Solutions dependent on authorization techniques are typically more susceptible to security threats, including man-in-the-middle attacks, verifier theft, guessing, forgery, and eavesdropping [22]. Conversely, the efficacy of authentication methods is measured by their performance, cost-effectiveness, and user-friendliness.…”

Zero-effort Continuous Two-factor Authentication

“…These systems rely on capturing and analyzing the ambient sound in the user's environment, which may include private conversations or other sensitive information. In 2020, we published a paper that presents an indoor 2FA based on something that is in the user's environment that can be implemented indoors only [2]. It is important for 2FA systems to be able to operate in a wide range of environments (indoor and outdoor).…”