Publikations-Information

Download

Mohamed Khamis, Florian Alt, Mariam Hassib, HASH(0x55767b2028d0), Regina Hasholzner, Andreas Bulling
GazeTouchPass: Multimodal Authentication Using Gaze and Touch on Mobile Devices
In CHI EA '16: Proceedings of the 2016 CHI Conference Extended Abstracts on Human Factors in Computing Systems. May 10, 2016. Association for Computing Machinery, New York, NY, USA. (bib)

We propose a multimodal scheme, GazeTouchPass, that combines gaze and touch for shoulder-surfing resistant user authentication on mobile devices. GazeTouchPass allows passwords with multiple switches between input modalities during authentication. This requires attackers to simultaneously observe the device screen and the user's eyes to find the password. We evaluate the security and usability of GazeTouchPass in two user studies. Our findings show that GazeTouchPass is usable and significantly more secure than single-modal authentication against basic and even advanced shoulder-surfing attacks.