Touch logger resistant mobile authentication scheme using multimodal sensors

Abstract

The PIN that is widely used for various services in mobile devices is highly vulnerable to attacks such as shoulder surfing. Various schemes have been proposed to solve this vulnerability of the PIN. However, despite the enhanced security of existing schemes, usability such as authentication time and error rate has decreased. In this paper, we propose a new scheme called PassWindow that allows enter a PIN securely through a window moving on the virtual keypad. PassWindow provides improved usability in the mobile devices and prevents shoulder-surfing attacks at the same time. We also propose an input method using multimodal sensors. This method strengthens the security against recording attacks and touch logger attacks. © 2014 Springer-Verlag Berlin Heidelberg.