GTmoPass: Two-factor Authentication on Public Displays Using Gaze-touch Passwords and Personal Mobile Devices

Khamis, M. , Hasholzner, R., Bulling, A. and Alt, F. (2017) GTmoPass: Two-factor Authentication on Public Displays Using Gaze-touch Passwords and Personal Mobile Devices. In: 6th ACM International Symposium on Pervasive Displays, Lugano, Switzerland, 7-9 Jun 2017, p. 8. ISBN 9781450350457 (doi: 10.1145/3078810.3078815)

Abstract

As public displays continue to deliver increasingly private and personalized content, there is a need to ensure that only the legitimate users can access private information in sensitive contexts. While public displays can adopt similar authentication concepts like those used on public terminals (e.g., ATMs), authentication in public is subject to a number of risks. Namely, adversaries can uncover a user's password through (1) shoulder surfing, (2) thermal attacks, or (3) smudge attacks. To address this problem we propose GTmoPass, an authentication architecture that enables Multi-factor user authentication on public displays. The first factor is a knowledge-factor: we employ a shoulder-surfing resilient multimodal scheme that combines gaze and touch input for password entry. The second factor is a possession-factor: users utilize their personal mobile devices, on which they enter the password. Credentials are securely transmitted to a server via Bluetooth beacons. We describe the implementation of GTmoPass and report on an evaluation of its usability and security, which shows that although authentication using GTmoPass is slightly slower than traditional methods, it protects against the three aforementioned threats.

• Item Type: Conference Proceedings
• Additional Information: This work was supported by a Google IoT Technology Research Award.
• Keywords: Eye gestures, multi-factor authentication, pervasive displays.
• Status: Published
• Refereed: Yes
• Glasgow Author(s) Enlighten ID: Khamis, Dr Mohamed
• Authors: Khamis, M., Hasholzner, R., Bulling, A., and Alt, F.
• College/School: College of Science and Engineering > School of Computing Science
• Publisher: ACM
• ISBN: 9781450350457
• Copyright Holders: Copyright © 2017 The Authors
• First Published: First published in Proceedings of the 6th ACM International Symposium on Pervasive Displays: 8
• Publisher Policy: Reproduced in accordance with the publisher copyright policy