Two-factor Authentication for Multi-touch Mobile Devices
Date: Mon, December 07, 2015
Time: 10:30am - 11:30am
Location: Holmes Hall 389
Speaker: Professor Yanchao Zhang
Multi-touch mobile devices have penetrated into everyday life to support personal and business communications. Secure and usable authentication techniques are indispensable for preventing illegitimate access to mobile devices. In this talk, I will introduce RhyAuth and TouchIn, two novel two-factor authentication schemes for multi-touch mobile devices. RhyAuth requires a user to perform a sequence of rhythmic taps/slides on a device screen to unlock the device. The user is authenticated and admitted only when the features extracted from his/her rhythmic taps or slides match those stored on the device.
TouchIn works by letting a user draw on the touch screen with one or multiple fingers to unlock his/her mobile device, and the user is authenticated based on the geometric properties of his/her drawn curves as well as his/her behavioral and physiological characteristics. I will also talk about the user experiments on Android devices, which show that both RhyAuth and TouchIn are highly secure against various attacks and also very usable for sighted and visually impaired users.