Abstract:To prevent users’ privacy from leakage, more and more mobile devices employ biometric-based authentication approaches, such as fingerprint, face recognition, voiceprint authentications, and so on, to enhance the privacy protection. However, these approaches are vulnerable to replay attacks. Although the state-of-art solutions utilize liveness verification to combat the attacks, existing approaches are sensitive to ambient environments, such as ambient lights and surrounding audible noises. Toward this end, we explore liveness verification of user authentication leveraging users’ mouth movements, which are robust to noisy environments. In this paper, we propose a lip reading-based user authentication system, LipPass, which extracts unique behavioral characteristics of users’ speaking mouths through acoustic sensing on smartphones for user authentication. We first investigate Doppler profiles of acoustic signals caused by users’ speaking mouths and find that there are unique mouth movement patterns for different individuals. To characterize the mouth movements, we propose a deep learning-based method to extract efficient features from Doppler profiles and employ softmax function, support vector machine, and support vector domain description to construct multi-class identifier, binary classifiers, and spoofer detectors for mouth state identification, user identification, and spoofer detection, respectively. Afterward, we develop a balanced binary tree-based authentication approach to accurately identify each individual leveraging these binary classifiers and spoofer detectors with respect to registered users. Through extensive experiments involving 48 volunteers in four real environments, LipPass can achieve 90.2% accuracy in user identification and 93.1% accuracy in spoofer detection.

Acoustic Fingerprinting Revisited: Generate Stable Device ID Stealthily with Inaudible Sound

VoicePop: A Pop Noise based Anti-spoofing System for Voice Authentication on Smartphones

ToAuth: Towards Automatic Near Field Authentication for Smartphones

Fingerprinting Smart Devices Through Embedded Acoustic Components

AccelPrint: Imperfections of Accelerometers Make Smartphones Trackable

Defending against Speaker Fingerprinting Based Device Tracking for Smartphones

Black Hole of Sound: Constructing an Anti-eavesdropping Area Using Ultrasound

LipPass: Lip Reading-based User Authentication on Smartphones Leveraging Acoustic Signals.

SoundID: Securing Mobile Two-Factor Authentication Via Acoustic Signals

The Catcher in the Field

Towards Safer Connections: Secure Authentication in 5G Networks Leveraging Radio Frequency Fingerprinting

Key Listener: Inferring Keystrokes on QWERTY Keyboard of Touch Screen Through Acoustic Signals

Lip Reading-Based User Authentication Through Acoustic Sensing on Smartphones.

VocalLock

BLE Location Tracking Attacks by Exploiting Frequency Synthesizer Imperfection

(In)secure Acoustic Mobile Authentication

EchoLock: Towards Low Effort Mobile User Identification

Wireless Device Authentication Using Acoustic Hardware Fingerprints

Privacy Threats of Acoustic Covert Communication among Smart Mobile Devices

InertiEAR: Automatic and Device-independent IMU-based Eavesdropping on Smartphones

Device-Independent Smartphone Eavesdropping Jointly Using Accelerometer and Gyroscope