BehavioCog: An Observation Resistant Authentication Scheme

DOI10.1007/978-3-319-70972-7_3MaRDI QIDQ5854425zbMATH OpenOpenAlexFDO

Authors Jagmohan Chauhan, Benjamin Zi Hao Zhao, Hassan Jameel Asghar, Jonathan Cheung-Wai Chan, Mohamed Ali Kaafar

Publication date 17 March 2021

Published in Financial Cryptography and Data Security (Search for Journal in Brave)

Full work available at URL https://arxiv.org/abs/1610.09044

Mathematics Subject Classification ID

Authentication, digital signatures and secret sharing (94A62)

Abstract: We propose that by integrating behavioural biometric gestures---such as drawing figures on a touch screen---with challenge-response based cognitive authentication schemes, we can benefit from the properties of both. On the one hand, we can improve the usability of existing cognitive schemes by significantly reducing the number of challenge-response rounds by (partially) relying on the hardness of mimicking carefully designed behavioural biometric gestures. On the other hand, the observation resistant property of cognitive schemes provides an extra layer of protection for behavioural biometrics; an attacker is unsure if a failed impersonation is due to a biometric failure or a wrong response to the challenge. We design and develop an instantiation of such a "hybrid" scheme, and call it BehavioCog. To provide security close to a 4-digit PIN---one in 10,000 chance to impersonate---we only need two challenge-response rounds, which can be completed in less than 38 seconds on average (as estimated in our user study), with the advantage that unlike PINs or passwords, the scheme is secure under observation.

Recommendations

• A New Scheme for Deniable/Repudiable Authentication
• Authenticating Pervasive Devices with Human Protocols
• scientific article; zbMATH DE number 4197466
• A unified and generalized treatment of authentication theory

Cites work

• A fuzzy vault scheme
• A New Human Identification Protocol and Coppersmith’s Baby-Step Giant-Step Algorithm
• Can “Something You Know” Be Saved?
• Cryptanalysis of the Convex Hull Click Human Identification Protocol
• Functional encryption: definitions and challenges
• How Far Can We Go Beyond Linear Cryptanalysis?
• scientific article; zbMATH DE number 3862476 (Why is no real title available?)
• scientific article; zbMATH DE number 2081058 (Why is no real title available?)
• Human Identification Through Insecure Channel
• Practical human-machine identification over insecure channels

Cited in

(4)

• Assentication: user de-authentication and lunchtime attack mitigation with seated posture biometric
• When are identification protocols with sparse challenges safe? The case of the Coskun and Herley attack
• Mobile authentication. Problems and solutions
• Touch gestures based biometric authentication scheme for touchscreen mobile phones

This page was built for publication: BehavioCog: An Observation Resistant Authentication Scheme

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q5854425)