Continuous Authentication via Bluetooth and Mobile Devices
DOI:
https://doi.org/10.21467/proceedings.7.6.12Abstract
Passwords are often insecure and easily forgotten, and current passwordless authentication methods, such as bio- metrics and hardware authenticators, come with additional costs and only offer one-time authentication. This creates vulnerabilities when users leave their computers unlocked. ProxyAuth, an open-source continuous authentication system, addresses these issues by using an Android phone as a hardware authenticator. The system continuously authenticates and de-authenticates the user based on their proximity to the computer, detected through Bluetooth bandwidth analysis. When the user moves away from the computer, the system locks, ensuring security without requiring additional hardware. ProxyAuth aims to provide a secure, cost-effective, and convenient alternative to traditional password- based authentication methods.
References
[1] Verizon, “2017 data breach investigations report,” Verizon, Report, 2017.
[2] HYPR, “New password study by hypr finds 78% of people had to reset a password they forgot in past 90 days,” HYPR, Dec 2019. [Online] Available: https://www.hypr.com/hypr-password-study-findings/.
[3] S. Palfy, “How much do passwords cost your business?”InfoSecurity Magazine, June 2018. [Online]. Available:https://www.infosecurity-magazine.com/opinions/how-much-passwords-cost/
[4] Microsoft, “Password-less protection: Reduce your risk exposure with password alternatives,” Microsoft, Report, 2018.
[5] P. C. V. Oorschot, Computer Security and the Internet: Tools and Jewels. Springer, 2020.
[6] E. Technologies, “Xyloc solutions overview,” Product Brochure, Ensure Technologies, 2009. [Online]. Available: https://www.ensuretech.com/wp-content/uploads/2011/08/xyloc-overview-brochure.pdf
[7] Apple, “How to unlock your mac with your apple watch,” https://support.apple.com/en-ca/HT206995, Apple, Oct 2019.
[8] N. Lock, “A new way to lock your mac. just walk away,” https://nearlock.me/press, Near Lock, 2015. [Online]. Available: https://nearlock.me/press
[9] S. Mare, A. M. Markham, C. Cornelius, R. Peterson, and D. Kotz, “Zebra: Zero-effort bilateral recurring authentication,” in 2014 IEEE Symposium on Security and Privacy, 2014, pp. 705–720.
[10] C. Schwingenschlogl and A. Heigl, “Development of a service discovery architecture for the bluetooth radio system,” 09 2000.
Downloads
Published
Issue
Section
License
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
