Back-of-device authentication on smartphones

Authors:
Alexander De Luca;Emanuel von Zezschwitz;Ngo Dieu Huong Nguyen;Max-Emanuel Maurer;Elisa Rubegni;Marcello Paolo Scipioni;Marc Langheinrich
Affiliations:
University of Munich, Munich, Bavaria, Germany;University of Munich, Munich, Bavaria, Germany;University of Munich, Munich, Bavaria, Germany;University of Munich, Munich, Bavaria, Germany;University of Lugano, Lugano, Switzerland;University of Lugano, Lugano, Switzerland;University of Lugano, Lugano, TI, Switzerland
Venue:
Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Year:
2013

Citing 21
Cited 2

Reassessing current cell phone designs: using thumb input effectively

CHI '03 Extended Abstracts on Human Factors in Computing Systems
A comparison of perceived and real shoulder-surfing risks between alphanumeric and graphical passwords

SOUPS '06 Proceedings of the second symposium on Usable privacy and security
Authenticating mobile phone users using keystroke analysis

International Journal of Information Security
The design and analysis of graphical passwords

SSYM'99 Proceedings of the 8th conference on USENIX Security Symposium - Volume 8
PassShapes: utilizing stroke based authentication to increase password memorability

Proceedings of the 5th Nordic conference on Human-computer interaction: building bridges
Vibrapass: secure authentication based on shared lies

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Can i borrow your phone?: understanding concerns when sharing mobile phones

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Back-of-device interaction allows creating very small touch devices

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Implicit User Re-authentication for Mobile Devices

UIC '09 Proceedings of the 6th International Conference on Ubiquitous Intelligence and Computing
Exploring the Use of Discrete Gestures for Authentication

INTERACT '09 Proceedings of the 12th IFIP TC 13 International Conference on Human-Computer Interaction: Part II
A closer look at recognition-based graphical passwords on mobile devices

Proceedings of the Sixth Symposium on Usable Privacy and Security
Towards understanding ATM security: a field study of real world ATM use

Proceedings of the Sixth Symposium on Usable Privacy and Security
Implicit authentication for mobile devices

HotSec'09 Proceedings of the 4th USENIX conference on Hot topics in security
Smudge attacks on smartphone touch screens

WOOT'10 Proceedings of the 4th USENIX conference on Offensive technologies
The phone lock: audio and haptic shoulder-surfing resistant PIN entry methods for mobile devices

Proceedings of the fifth international conference on Tangible, embedded, and embodied interaction
Spinlock: a single-cue haptic and audio PIN input technique for authentication

HAID'11 Proceedings of the 6th international conference on Haptic and audio interaction design
Falling asleep with Angry Birds, Facebook and Kindle: a large scale study on mobile application usage

Proceedings of the 13th International Conference on Human Computer Interaction with Mobile Devices and Services
Fat finger worries: how older and younger users physically interact with PDAs

INTERACT'05 Proceedings of the 2005 IFIP TC13 international conference on Human-Computer Interaction
Touch me once and i know it's you!: implicit authentication based on touch screen patterns

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
PassChords: secure multi-touch authentication for blind people

Proceedings of the 14th international ACM SIGACCESS conference on Computers and accessibility
ShortStraw: a simple and effective corner finder for polylines

SBM'08 Proceedings of the Fifth Eurographics conference on Sketch-Based Interfaces and Modeling

Exploring the design space of graphical passwords on smartphones

Proceedings of the Ninth Symposium on Usable Privacy and Security
Exploring back-of-device interaction

Proceedings of the adjunct publication of the 26th annual ACM symposium on User interface software and technology

Quantified Score

Hi-index	0.01

Visualization

Abstract

This paper presents BoD Shapes, a novel authentication method for smartphones that uses the back of the device for input. We argue that this increases the resistance to shoulder surfing while remaining reasonably fast and easy-to-use. We performed a user study (n=24) comparing BoD Shapes to PIN authentication, Android grid unlock, and a front version of our system. Testing a front version allowed us to directly compare performance and security measures between front and back authentication. Our results show that BoD Shapes is significantly more secure than the three other approaches. While performance declined, our results show that BoD Shapes can be very fast (up to 1.5 seconds in the user study) and that learning effects have an influence on its performance. This indicates that speed improvements can be expected in long-term use.