Abstract:To prevent users’ privacy from leakage, more and more mobile devices employ biometric-based authentication approaches, such as fingerprint, face recognition, voiceprint authentications, and so on, to enhance the privacy protection. However, these approaches are vulnerable to replay attacks. Although the state-of-art solutions utilize liveness verification to combat the attacks, existing approaches are sensitive to ambient environments, such as ambient lights and surrounding audible noises. Toward this end, we explore liveness verification of user authentication leveraging users’ mouth movements, which are robust to noisy environments. In this paper, we propose a lip reading-based user authentication system, LipPass, which extracts unique behavioral characteristics of users’ speaking mouths through acoustic sensing on smartphones for user authentication. We first investigate Doppler profiles of acoustic signals caused by users’ speaking mouths and find that there are unique mouth movement patterns for different individuals. To characterize the mouth movements, we propose a deep learning-based method to extract efficient features from Doppler profiles and employ softmax function, support vector machine, and support vector domain description to construct multi-class identifier, binary classifiers, and spoofer detectors for mouth state identification, user identification, and spoofer detection, respectively. Afterward, we develop a balanced binary tree-based authentication approach to accurately identify each individual leveraging these binary classifiers and spoofer detectors with respect to registered users. Through extensive experiments involving 48 volunteers in four real environments, LipPass can achieve 90.2% accuracy in user identification and 93.1% accuracy in spoofer detection.

User Identification Leveraging Whispered Sound for Wearable Devices

<i>ChestLive</i>: Fortifying Voice-based Authentication with Chest Motion Biometric on Smart Devices

VoicePop: A Pop Noise based Anti-spoofing System for Voice Authentication on Smartphones

Lip Reading-Based User Authentication Through Acoustic Sensing on Smartphones.

LipPass: Lip Reading-based User Authentication on Smartphones Leveraging Acoustic Signals.

M-PPG: A Non-intrusive Authentication for Wearable Devices Via PPG Sensors with Motor Excitations

VocalLock

Accuth$^+$ : Accelerometer-based Anti-Spoofing Voice Authentication on Wrist-worn Wearables

The Catcher in the Field

Mmear: Push the Limit of COTS Mmwave Eavesdropping on Headphones

EchoLock: Towards Low Effort Mobile User Identification

WavoID: Robust and Secure Multi-modal User Identification Via Mmwave-Voice Mechanism

Utter Innocence: Contactless Authentication Method Based on Physiological Signals

Accuth: Anti-Spoofing Voice Authentication Via Accelerometer.

VocalPrint: A mmWave-based Unmediated Vocal Sensing System for Secure Authentication

Whose Move Is It Anyway? Authenticating Smart Wearable Devices Using Unique Head Movement Patterns

VocalPrint: exploring a resilient and secure voice authentication via mmWave biometric interrogation

Securing Liveness Detection for Voice Authentication Via Pop Noises

Acoustic Fingerprinting Revisited: Generate Stable Device ID Stealthily with Inaudible Sound

EarEcho

BreathSign: Transparent and Continuous In-ear Authentication Using Bone-conducted Breathing Biometrics.