(In)secure Acoustic Mobile Authentication

Dianqi Han,Ang Li,Tao Li,Lili Zhang,Yan Zhang,Jiawei Li,Rui Zhang,Yanchao Zhang
DOI: https://doi.org/10.1109/tmc.2021.3053282
IF: 6.075
2021-01-01
IEEE Transactions on Mobile Computing
Abstract:Acoustic fingerprinting aims to identify a mobile device based on its internal microphone(s) and speaker(s) which are unique due to manufacturing imperfection. This paper seeks a thorough understanding of the (in)security of exploring acoustic fingerprints for achieving distributed mobile authentication. Our contributions are threefold. First, we present a new acoustic fingerprint-emulation attack and demonstrate that it is a common vulnerability of acoustic mobile authentication systems. Second, we propose a dynamic challenge-response defense to secure acoustic mobile authentication systems against the acoustic fingerprint-emulation attack. Finally, we thoroughly investigate existing acoustic fingerprinting schemes and identify the best option for accurate, secure, and deployable acoustic mobile authentication systems.
computer science, information systems,telecommunications
What problem does this paper attempt to address?