TapLock: Exploit finger tap events for enhancing attack resilience of smartphone passwords

Hongji Yang; Lin Chen; Kaigui Bian; Yang Tian; Fan Ye; Wei Yan; Tong Zhao; Xiaoming Li

doi:10.1109/ICC.2015.7249465

TapLock: Exploit finger tap events for enhancing attack resilience of smartphone passwords

Hongji Yang
, Lin Chen
, Kaigui Bian
, Yang Tian
, Fan Ye
, Wei Yan
, Tong Zhao
, Xiaoming Li

Electrical Engineering

Peking University
Yale University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

8 Scopus citations

Abstract

In this paper, we present TapLock as a smartphone password system that exploits the finger tap events on capacitive touch screens for increasing the password's resilience to shoulder-surfing attacks (where the password input by a user can be easily observed by a bystander over the user's shoulder). TapLock captures the size and the axis length of the finger touch area on the phone screen for creating a password, which cannot be easily observed by a shoulder surfer. Our user study shows that TapLock has several advantages over existing smartphone password systems, including its strong attack resilience, small authentication delay, and haptic input feedback that improves the usability.

Original language	English
Title of host publication	2015 IEEE International Conference on Communications, ICC 2015
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	7139-7144
Number of pages	6
ISBN (Electronic)	9781467364324
DOIs	https://doi.org/10.1109/ICC.2015.7249465
State	Published - Sep 9 2015
Event	IEEE International Conference on Communications, ICC 2015 - London, United Kingdom Duration: Jun 8 2015 → Jun 12 2015

Publication series

Name	IEEE International Conference on Communications
Volume	2015-September
ISSN (Print)	1550-3607

Conference

Conference	IEEE International Conference on Communications, ICC 2015
Country/Territory	United Kingdom
City	London
Period	06/8/15 → 06/12/15

Access to Document

10.1109/ICC.2015.7249465

Cite this

Yang, H., Chen, L., Bian, K., Tian, Y., Ye, F., Yan, W., Zhao, T., & Li, X. (2015). TapLock: Exploit finger tap events for enhancing attack resilience of smartphone passwords. In 2015 IEEE International Conference on Communications, ICC 2015 (pp. 7139-7144). Article 7249465 (IEEE International Conference on Communications; Vol. 2015-September). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICC.2015.7249465

@inproceedings{7bebfee91b3d4a27bda05b67845ab33e,

title = "TapLock: Exploit finger tap events for enhancing attack resilience of smartphone passwords",

abstract = "In this paper, we present TapLock as a smartphone password system that exploits the finger tap events on capacitive touch screens for increasing the password's resilience to shoulder-surfing attacks (where the password input by a user can be easily observed by a bystander over the user's shoulder). TapLock captures the size and the axis length of the finger touch area on the phone screen for creating a password, which cannot be easily observed by a shoulder surfer. Our user study shows that TapLock has several advantages over existing smartphone password systems, including its strong attack resilience, small authentication delay, and haptic input feedback that improves the usability.",

author = "Hongji Yang and Lin Chen and Kaigui Bian and Yang Tian and Fan Ye and Wei Yan and Tong Zhao and Xiaoming Li",

note = "Publisher Copyright: {\textcopyright} 2015 IEEE.; IEEE International Conference on Communications, ICC 2015 ; Conference date: 08-06-2015 Through 12-06-2015",

year = "2015",

month = sep,

day = "9",

doi = "10.1109/ICC.2015.7249465",

language = "English",

series = "IEEE International Conference on Communications",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "7139--7144",

booktitle = "2015 IEEE International Conference on Communications, ICC 2015",

}

Yang, H, Chen, L, Bian, K, Tian, Y, Ye, F, Yan, W, Zhao, T & Li, X 2015, TapLock: Exploit finger tap events for enhancing attack resilience of smartphone passwords. in 2015 IEEE International Conference on Communications, ICC 2015., 7249465, IEEE International Conference on Communications, vol. 2015-September, Institute of Electrical and Electronics Engineers Inc., pp. 7139-7144, IEEE International Conference on Communications, ICC 2015, London, United Kingdom, 06/8/15. https://doi.org/10.1109/ICC.2015.7249465

TapLock: Exploit finger tap events for enhancing attack resilience of smartphone passwords. / Yang, Hongji; Chen, Lin; Bian, Kaigui et al.
2015 IEEE International Conference on Communications, ICC 2015. Institute of Electrical and Electronics Engineers Inc., 2015. p. 7139-7144 7249465 (IEEE International Conference on Communications; Vol. 2015-September).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - TapLock

T2 - IEEE International Conference on Communications, ICC 2015

AU - Yang, Hongji

AU - Chen, Lin

AU - Bian, Kaigui

AU - Tian, Yang

AU - Ye, Fan

AU - Yan, Wei

AU - Zhao, Tong

AU - Li, Xiaoming

PY - 2015/9/9

Y1 - 2015/9/9

N2 - In this paper, we present TapLock as a smartphone password system that exploits the finger tap events on capacitive touch screens for increasing the password's resilience to shoulder-surfing attacks (where the password input by a user can be easily observed by a bystander over the user's shoulder). TapLock captures the size and the axis length of the finger touch area on the phone screen for creating a password, which cannot be easily observed by a shoulder surfer. Our user study shows that TapLock has several advantages over existing smartphone password systems, including its strong attack resilience, small authentication delay, and haptic input feedback that improves the usability.

AB - In this paper, we present TapLock as a smartphone password system that exploits the finger tap events on capacitive touch screens for increasing the password's resilience to shoulder-surfing attacks (where the password input by a user can be easily observed by a bystander over the user's shoulder). TapLock captures the size and the axis length of the finger touch area on the phone screen for creating a password, which cannot be easily observed by a shoulder surfer. Our user study shows that TapLock has several advantages over existing smartphone password systems, including its strong attack resilience, small authentication delay, and haptic input feedback that improves the usability.

UR - https://www.scopus.com/pages/publications/84953709744

U2 - 10.1109/ICC.2015.7249465

DO - 10.1109/ICC.2015.7249465

M3 - Conference contribution

AN - SCOPUS:84953709744

T3 - IEEE International Conference on Communications

SP - 7139

EP - 7144

BT - 2015 IEEE International Conference on Communications, ICC 2015

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 8 June 2015 through 12 June 2015

ER -

Yang H, Chen L, Bian K, Tian Y, Ye F, Yan W et al. TapLock: Exploit finger tap events for enhancing attack resilience of smartphone passwords. In 2015 IEEE International Conference on Communications, ICC 2015. Institute of Electrical and Electronics Engineers Inc. 2015. p. 7139-7144. 7249465. (IEEE International Conference on Communications). doi: 10.1109/ICC.2015.7249465

TapLock: Exploit finger tap events for enhancing attack resilience of smartphone passwords

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this