Abstract:To prevent users’ privacy from leakage, more and more mobile devices employ biometric-based authentication approaches, such as fingerprint, face recognition, voiceprint authentications, and so on, to enhance the privacy protection. However, these approaches are vulnerable to replay attacks. Although the state-of-art solutions utilize liveness verification to combat the attacks, existing approaches are sensitive to ambient environments, such as ambient lights and surrounding audible noises. Toward this end, we explore liveness verification of user authentication leveraging users’ mouth movements, which are robust to noisy environments. In this paper, we propose a lip reading-based user authentication system, LipPass, which extracts unique behavioral characteristics of users’ speaking mouths through acoustic sensing on smartphones for user authentication. We first investigate Doppler profiles of acoustic signals caused by users’ speaking mouths and find that there are unique mouth movement patterns for different individuals. To characterize the mouth movements, we propose a deep learning-based method to extract efficient features from Doppler profiles and employ softmax function, support vector machine, and support vector domain description to construct multi-class identifier, binary classifiers, and spoofer detectors for mouth state identification, user identification, and spoofer detection, respectively. Afterward, we develop a balanced binary tree-based authentication approach to accurately identify each individual leveraging these binary classifiers and spoofer detectors with respect to registered users. Through extensive experiments involving 48 volunteers in four real environments, LipPass can achieve 90.2% accuracy in user identification and 93.1% accuracy in spoofer detection.

The Research and Implementation of the Fine-Grained Implicit Authentication Framework for Android.

ToAuth: Towards Automatic Near Field Authentication for Smartphones

A PRIVACY-PRESERVING AUTHENTICATION SCHEME USING BIOMETRICS FOR PERVASIVE COMPUTING ENVIRONMENTS

LVID: A Multimodal Biometrics Authentication System on Smartphones.

CaIAuth: Context-Aware Implicit Authentication When the Screen Is Awake

LipPass: Lip Reading-based User Authentication on Smartphones Leveraging Acoustic Signals.

Lip Reading-Based User Authentication Through Acoustic Sensing on Smartphones.

Continuous Implicit Authentication for Mobile Devices based on Adaptive Neuro-Fuzzy Inference System

Performance Evaluation of Implicit Smartphones Authentication Via Sensor-Behavior Analysis.

Sensor-based implicit authentication through learning user physiological and behavioral characteristics

Fine-Grained and Context-Aware Behavioral Biometrics for Pattern Lock on Smartphones.

Comparison of PIN- and Pattern-Based Behavioral Biometric Authentication on Mobile Devices

Implicit Smartphone User Authentication with Sensors and Contextual Machine Learning

Security after login: Identity change detection on smartphones using sensor fusion

EchoIA: Implicit Authentication System Based on User Feedback

Dynamic Multi-level Privilege Control in Behavior-based Implicit Authentication Systems Leveraging Mobile Devices

B2auth: A contextual fine-grained behavioral biometric authentication framework for real-world deployment

Actions Speak Louder Than (Pass)words: Passive Authentication of Smartphone Users via Deep Temporal Features

Towards Continuous and Passive Authentication via Touch Biometrics: An Experimental Study on Smartphones.

Shake, Shake, I Know Who You Are: Authentication Through Smart Wearable Devices

Active Authentication on Mobile Devices via Stylometry, Application Usage, Web Browsing, and GPS Location