Seeing-Is-Believing: Using Camera Phones for Human-Verifiable Authentication

McCune, Jonathan M.; Perrig, Adrian; Reiter, Michael K.

doi:10.21236/ada457868

Cited by 79 publications

(75 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Several recent studies have utilized barcode based out-of-band channels as security enhancement primitives. For example, McCune et al proposed the Seeing-is-believing (SiB) system [18] for human authentication. It also can be used for secure device pairing [19].…”

Section: Related Workmentioning

confidence: 99%

SBVLC: Secure Barcode-Based Visible Light Communication for Smartphones

Zhang

Ren

Xing

et al. 2016

IEEE Trans. on Mobile Comput.

View full text Add to dashboard Cite

2D barcodes have enjoyed a significant penetration rate in mobile applications. This is largely due to the extremely low barrier to adoption -almost every camera-enabled smartphone can scan 2D barcodes. As an alternative to NFC technology, 2D barcodes have been increasingly used for security-sensitive mobile applications including mobile payments and personal identification. However, the security of barcode-based communication in mobile applications has not been systematically studied. Due to the visual nature, 2D barcodes are subject to eavesdropping when they are displayed on the smartphone screens. On the other hand, the fundamental design principles of 2D barcodes make it difficult to add security features. In this paper, we propose SBVLC -a secure system for barcode-based visible light communication (VLC) between smartphones. We formally analyze the security of SBVLC based on geometric models and propose physical security enhancement mechanisms for barcode communication by manipulating screen view angles and leveraging user-induced motions. We then develop three secure data exchange schemes that encode information in barcode streams. These schemes are useful in many security-sensitive mobile applications including private information sharing, secure device pairing, and contactless payment. SBVLC is evaluated through extensive experiments on both Android and iOS smartphones.Index Terms-Short-range smartphone communication, key exchange, secure VLC, 2D barcode streaming, QR codes. ! B ingsheng Zhang is a postdoctoral researcher

show abstract

Section: Related Workmentioning

confidence: 99%

SBVLC: Secure Barcode-Based Visible Light Communication for Smartphones

Zhang

Ren

Xing

et al. 2016

IEEE Trans. on Mobile Comput.

View full text Add to dashboard Cite

show abstract

“…While a cable provides no ambiguity about the device that is being paired [27], the majority of pairing approaches are wireless. These include infrared [29,2] and NFC, used by Bluetooth OOB pairing [17]; audio techniques where melodies [26] or synthesized speech are compared [11]; and visual approaches, where one of the two devices has a camera and it decodes either a 2D barcode [19] or flashing LED [23] on the other device. Others are more physical, involving synchronized button pressing [25] or shaking of the devices [14,18].…”

Section: Device Pairingmentioning

confidence: 99%

“…Other researchers have investigated pairing approaches that use flashing lights. Saxena [23] found that a flashing LED on one device, paired with a camera on the other, would be a performant alternative to approaches that required screens showing barcode representations of public keys [19]. Systems for data transmission subsequent to pairing have also been developed to make use of flashing lights: LedTX [24] provides data transfer from a UbiLighter instrumented lighter, with a flashing LED on the lighter decoded by a Javascript program accessing a laptop's webcam; FlashLight [13] creates a bidirectional communication channel between a tabletop and mobile phone, using the built-in cameras and displays of the devices.…”

Section: Device Pairingmentioning

confidence: 99%

Connecting the things to the internet

Jewell

Costanza

Kittley-Davies

2015

Proceedings of the 2015 ACM International Joint Conference on Pervasive and Ubiquitous Computing

View full text Add to dashboard Cite

The availability of low-power Wi-Fi radio modules opens up opportunities to leverage the existing prevalent Wi-Fi infrastructure for large-scale trials and deployments of Ubicomp technology. In this paper we address the challenge of supporting end-users, especially when they are not technical experts, in connecting new low-power, low-cost Wi-Fi devices with very minimal UIs to an existing, secure Wi-Fi infrastructure. We report two usability studies through which 30 participants, with no formal technical training, compared 4 alternative configuration techniques, selected based on cost and consumption constraints, and on adoption in off-the-shelf products. Through an analysis of success rate and causes of failure, our results indicate that two techniques are noticeably more usable than others. These are a web-based configuration mechanism, where users connect to an access point on the Wi-Fi device, and one that makes use of a standard audio cable to connect a smartphone to the device to be configured.

show abstract

“…Moreover, the use of evolutionary algorithms are almost non-present for this purpose. Some of the relevant work on user authentication system has been reported in [3], [9] and [8]. However only [10] has done some preliminary work using GA. To the best of our knowledge no previous study has used any of the genetic algorithms for user authentication on smart phones.…”

Section: Related Workmentioning

confidence: 99%

A hybrid GA-PSO fuzzy system for user identification on smart phones

Shahzad

Zahid

Farooq

2009

Proceedings of the 11th Annual Conference on Genetic and Evolutionary Computation

View full text Add to dashboard Cite

The major contribution of this paper is a hybrid GA-PSO fuzzy user identification system, UGuard, for smart phones. Our system gets 3 phone usage features as input to identify a user or an imposter. We show that these phone usage features for different users are diffused; therefore, we justify the need of a front end fuzzy classifier for them. We further show that the fuzzy classifier must be optimized using a back end online dynamic optimizer. The dynamic optimizer is a hybrid of Particle Swarm Optimizer (PSO) and Genetic Algorithm (GA). We have collected phone usage data of 10 real users having Symbian smart phones for 8 days. We evaluate our UGuard system on this dataset. The results of our experiments show that UGuard provides on the average an error rate of 2% or less. We also compared our system with four classical classifiers -Naïve Bayes, Back Propagation Neural Networks, J48 Decision Tree, and Fuzzy System -and three evolutionary schemes -fuzzy system optimized by ACO, PSO, and GA. To the best of our knowledge, the current work is the first system that has achieved such a small error rate. Moreover, the system is simple and efficient; therefore, it can be deployed on real world smart phones.

show abstract

Seeing-Is-Believing: Using Camera Phones for Human-Verifiable Authentication

Abstract: Abstract

Cited by 79 publications

References 13 publications

SBVLC: Secure Barcode-Based Visible Light Communication for Smartphones

SBVLC: Secure Barcode-Based Visible Light Communication for Smartphones

Connecting the things to the internet

A hybrid GA-PSO fuzzy system for user identification on smart phones

Contact Info

Product

Resources

About