A Completely Automatic Public Physical test to tell Computers and Humans Apart: A way to enhance authentication schemes in mobile devices

Abstract

Nowadays, data security is one of the most - if not the most important aspects in mobile applications, web and information systems in general. On one hand, this is a result of the vital role of mobile and web applications in our daily life. On the other hand, though, the huge, yet accelerating evolution of computers and software has led to more and more sophisticated forms of threats and attacks which jeopardize user's credentials and privacy. Today's computers are capable of automatically performing authentication attempts replaying recorded data. This fact has brought the challenge of access control to a whole new level, and has urged the researchers to develop new mechanisms in order to prevent software from performing automatic authentication attempts. In this research perspective, the Completely Automatic Public Turing test to tell Computers and Humans Apart (CAPTCHA) has been proposed and widely adopted. However, this mechanism consists of a cognitive intelligence test to reinforce traditional authentication against computerized attempts, thus it puts additional strain on the legitimate user too and, quite often, significantly slows the authentication process. In this paper, we introduce a Completely Automatic Public Physical test to tell Computers and Humans Apart (CAPPCHA) as a way to enhance PIN authentication scheme for mobile devices. This test does not introduce any additional cognitive strain on the user as it leverages only his physical nature. We prove that the scheme is even more secure than CAPTCHA and our experiments show that it is fast and easy for users

Invisible CAPPCHA: A usable mechanism to distinguish between malware and humans on the mobile IoT

“…Computer and Humans Apart (CAPPCHA) [11,12], which, in order to spot the presence of automations, leverages the physical nature of human subjects instead of requiring them to tackle a complex cognitive task. In doing this, CAPPCHA asks the user to tilt the smartphone to a specific degree to be recognized as a human.…”

“…Guerar et al introduced CAPPCHA [11], a new dependable way to determine whether a user is human. The CAPPCHA challenge requires the user to tilt the smartphone to a specific degree displayed on the screen to be recognized as a human.…”

“…Strong taps present variation peaks with more amplitude than the gentle taps. Similar to CAPPCHA [11,12], the rationale behind our work is that malware cannot physically move the device. However,…”

Color Channel CAPTCHA: A Secure Scheme for Cloud Environment

“…Google is secretly monitoring the behavior of the clicking over the checkbox to distinguish whether human or not before allowing access to online services. In CAPPTCHA (Completely Automated Public Physical Test to tell Computers and Humans Apart) [3] asks the user to tilt the smartphone to a certain degree to identify humans. But this CAPPTCHA can be applied only in mobile phones, not suitable for all devices which are connected to the network.…”

Completely Automated Public Physical test to tell Computers and Humans Apart: A usability study on mobile devices

“…Such a test can be defined as a Completely Automated Public Physical test to tell Computers and Humans Apart (CAPPCHA). An example implementation of CAPPCHA [51] requires the user to arrange the mobile device in a specific position for being recognized as a human. The rationale is that malware cannot physically move the device.…”