GazeTouchPIN: Protecting Sensitive Data on Mobile Devices Using Secure Multimodal Authentication

Khamis, M. , Hassib, M., Zezschwitz, E. v., Bulling, A. and Alt, F. (2017) GazeTouchPIN: Protecting Sensitive Data on Mobile Devices Using Secure Multimodal Authentication. In: 19th ACM International Conference on Multimodal Interaction (ICMI 2017), Glasgow, Scotland, 13-17 Nov 2017, pp. 446-450. ISBN 9781450355438 (doi: 10.1145/3136755.3136809)

Abstract

Although mobile devices provide access to a plethora of sensitive data, most users still only protect them with PINs or patterns, which are vulnerable to side-channel attacks (e.g., shoulder surfing). How-ever, prior research has shown that privacy-aware users are willing to take further steps to protect their private data. We propose GazeTouchPIN, a novel secure authentication scheme for mobile devices that combines gaze and touch input. Our multimodal approach complicates shoulder-surfing attacks by requiring attackers to ob-serve the screen as well as the user’s eyes to and the password. We evaluate the security and usability of GazeTouchPIN in two user studies (N=30). We found that while GazeTouchPIN requires longer entry times, privacy aware users would use it on-demand when feeling observed or when accessing sensitive data. The results show that successful shoulder surfing attack rate drops from 68% to 10.4%when using GazeTouchPIN.

• Item Type: Conference Proceedings
• Additional Information: This work was partially funded by the Bavarian State Ministry of Education, Science and the Arts in the framework of the Centre Digitisation.Bavaria (ZD.B), and by the Cluster of Excellence on Multimodal Computing and Interaction (MMCI) at Saarland University, Germany.
• Keywords: Gaze gestures, multimodal authentication, usable security.
• Status: Published
• Refereed: Yes
• Glasgow Author(s) Enlighten ID: Khamis, Dr Mohamed
• Authors: Khamis, M., Hassib, M., Zezschwitz, E. v., Bulling, A., and Alt, F.
• College/School: College of Science and Engineering > School of Computing Science
• Publisher: ACM
• ISBN: 9781450355438
• Copyright Holders: Copyright © 2017 The Authors
• First Published: First published in 19th ACM International Conference on Multimodal Interaction (ICMI 2017): 446-450
• Publisher Policy: Reproduced in accordance with the publisher copyright policy