Abstract:The two-factor authentication ($2$FA) has drawn increasingly attention as the mobile devices become more prevalent. For example, the user's possession of the enrolled phone could be used by the $2$FA system as the second proof to protect his/her online accounts. Existing $2$FA solutions mainly require some form of user-device interaction, which may severely affect user experience and creates extra burdens to users. In this work, we propose a secure $2$FA system utilizing the proximity of a user's enrolled phone and the login device as the second proof without requiring the user's interactions. The basic idea of our $2$FA system is to derive location signatures based on acoustic beep signals emitted alternately by both devices and sensing the echoes with microphones, and compare the extracted signatures for proximity detection. Moreover, to further enhance the security of our system, we also design a device authentication scheme which derives the acoustic fingerprint between the login device and enrolled phone to verify the identity of two devices. Given the received beep signal, our system designs a period selection scheme to identify two sound segments accurately: the chirp period is the sound segment propagating directly from the speaker to the microphone whereas the echo period is the sound segment reflected back by surrounding objects. To achieve an accurate proximity detection, we develop a new energy loss compensation extraction scheme by utilizing the extracted chirp periods to estimate the intrinsic differences of energy loss between microphones of the enrolled phone and the login device. Our proximity detection component then conducts the similarity comparison between the identified two echo periods after the energy loss compensation to effectively determine whether the enrolled phone and the login device are in proximity for $2$FA. Moreover, to provide higher security, our device fingerprint-assisted proximity detection further utilizes the overall energy loss between the login device and enrolled phone as their hardware fingerprint to authenticate the identity of two devices. Our experimental results show that our system is accurate in providing $2$FA and robust to both man-in-the-middle (MiM) and co-located attacks across different scenarios and device models.

Two-Factor Authentication for Keyless Entry System via Finger-Induced Vibrations

ToAuth: Towards Automatic Near Field Authentication for Smartphones

Dynamic Authentication with Sensory Information for the Access Control Systems.

Enabling Finger-touch-based Mobile User Authentication via Physical Vibrations on IoT Devices

Sensory-Data-Enhanced Authentication For Rfid-Based Access Control Systems

User Context Detection For Relay Attack Resistance In Passive Keyless Entry And Start System

Generating stable biometric keys for flexible cloud computing authentication using finger vein.

Fingersound: A Low-cost and Deployable Authentication System with Fingertip Sliding Sound

Secure Mobile Two-Factor Authentication Leveraging Active Sound Sensing

Piezoelectric and Machine Learning Based Keystroke Dynamics For Highly Secure User Authentication

Combating Password Vulnerability with Keystroke Dynamics Featured by WiFi Sensing

Hand-Key: Leveraging Multiple Hand Biometrics for Attack-Resilient User Authentication Using COTS RFID

MTSFBet: A hand-gesture-recognition-based identity authentication approach for passive keyless entry against relay attack

TouchKey: Touch to Generate Symmetric Keys by Skin Electric Potentials Induced by Powerline Radiation

FingerPattern: Securing Pattern Lock Via Fingerprint-Dependent Friction Sound

Hold the Door! Fingerprinting Your Car Key to Prevent Keyless Entry Car Theft

Secure User Verification and Continuous Authentication Via Earphone IMU

Secure User Authentication Leveraging Keystroke Dynamics via Wi-Fi Sensing

Continuous Mobile Authentication Using Virtual Key Typing Biometrics

MagAuth: Secure and Usable Two-Factor Authentication with Magnetic Wrist Wearables

Keystroke Dynamics-Based Authentication Using Unique Keypad