GTmoPass: Two-factor Authentication on Public Displays Using Gaze-touch Passwords and Personal Mobile Devices

Khamis, M. , Hasholzner, R., Bulling, A. and Alt, F. (2017) GTmoPass: Two-factor Authentication on Public Displays Using Gaze-touch Passwords and Personal Mobile Devices. In: 6th ACM International Symposium on Pervasive Displays, Lugano, Switzerland, 7-9 Jun 2017, p. 8. ISBN 9781450350457 (doi:10.1145/3078810.3078815)

[img]
Preview
Text
170220.pdf - Accepted Version

1MB

Abstract

As public displays continue to deliver increasingly private and personalized content, there is a need to ensure that only the legitimate users can access private information in sensitive contexts. While public displays can adopt similar authentication concepts like those used on public terminals (e.g., ATMs), authentication in public is subject to a number of risks. Namely, adversaries can uncover a user's password through (1) shoulder surfing, (2) thermal attacks, or (3) smudge attacks. To address this problem we propose GTmoPass, an authentication architecture that enables Multi-factor user authentication on public displays. The first factor is a knowledge-factor: we employ a shoulder-surfing resilient multimodal scheme that combines gaze and touch input for password entry. The second factor is a possession-factor: users utilize their personal mobile devices, on which they enter the password. Credentials are securely transmitted to a server via Bluetooth beacons. We describe the implementation of GTmoPass and report on an evaluation of its usability and security, which shows that although authentication using GTmoPass is slightly slower than traditional methods, it protects against the three aforementioned threats.

Item Type:Conference Proceedings
Additional Information:This work was supported by a Google IoT Technology Research Award.
Keywords:Eye gestures, multi-factor authentication, pervasive displays.
Status:Published
Refereed:Yes
Glasgow Author(s) Enlighten ID:Khamis, Dr Mohamed
Authors: Khamis, M., Hasholzner, R., Bulling, A., and Alt, F.
College/School:College of Science and Engineering > School of Computing Science
Publisher:ACM
ISBN:9781450350457
Copyright Holders:Copyright © 2017 The Authors
First Published:First published in Proceedings of the 6th ACM International Symposium on Pervasive Displays: 8
Publisher Policy:Reproduced in accordance with the publisher copyright policy

University Staff: Request a correction | Enlighten Editors: Update this record