Publication Details

Download

Mohamed Khamis, Florian Alt, Mariam Hassib, Emanuel von Zezschwitz, Regina Hasholzner, Andreas Bulling
GazeTouchPass: Multimodal Authentication Using Gaze and Touch on Mobile Devices
In CHI '16 EA: Extended Abstracts of the 34th SIGCHI Conference on Human Factors in Computing Systems. San Jose, CA, USA, May 7 - 12, 2016. ACM, New York, NY, USA. (bib)

We propose a multimodal scheme, GazeTouchPass, thatcombines gaze and touch for shoulder-surfing resistantuser authentication on mobile devices. GazeTouchPassallows passwords with multiple switches between inputmodalities during authentication. This requires attackersto simultaneously observe the device screen and the userseyes to find the password. We evaluate the security and us-ability of GazeTouchPass in two user studies. Our findingsshow that GazeTouchPass is usable and significantly moresecure than single-modal authentication against basic andeven advanced shoulder-surfing attacks.