Art der Publikation: Beitrag in Sammelwerk

SmudgeSafe: geometric image transformations for smudge-resistant user authentication

Autor(en):

Stefan Schneegass, Frank Steimle; Andreas Bulling, Florian Alt; Schmidt, Albrecht

Titel des Sammelbands:

Proceedings of the 2014 ACM International Joint Conference on Pervasive and Ubiquitous Computing (UbiComp '14)

Seiten:

775-786

Verlag:

ACM

Ort(e):

New York, USA

Veröffentlichung:

2014

ISBN:

978-1-4503-2968-2

Digital Object Identifier (DOI):

doi:10.1145/2632048.2636090

Zitation:

Download BibTeX

Kurzfassung

Touch-enabled user interfaces have become ubiquitous, such as on ATMs or portable devices. At the same time, authentication using touch input is problematic, since finger smudge traces may allow attackers to reconstruct passwords. We present SmudgeSafe, an authentication system that uses random geometric image transformations, such as translation, rotation, scaling, shearing, and flipping, to increase the security of cued-recall graphical passwords. We describe the design space of these transformations and report on two user studies: A lab-based security study involving 20 participants in attacking user-defined passwords, using high quality pictures of real smudge traces captured on a mobile phone display; and an in-the-field usability study with 374 participants who generated more than 130,000 logins on a mobile phone implementation of SmudgeSafe. Results show that SmudgeSafe significantly increases security compared to authentication schemes based on PINs and lock patterns, and exhibits very high learnability, efficiency, and memorability.