Designing leakage-resilient password entry on head-mounted smart wearable glass devices

• Main Authors: LI, Yan, CHENG, Yao, MENG, Wenzhi, LI, Yingjiu, DENG, Robert H.
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2020
• Subjects: Password; Smart glasses; Eavesdropping; Usability; Authentication; Password entry; anti-eavesdropping; head-mounted device; usability and security; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/5299; https://ink.library.smu.edu.sg/context/sis_research/article/6302/viewcontent/Design_Leakage_Res_Password_Entry_2020_av.pdf
• Institution: Singapore Management University

With the boom of Augmented Reality (AR) and Virtual Reality (VR) applications, head-mounted smart wearable glass devices are becoming popular to help users access various services like E-mail freely. However, most existing password entry schemes on smart glasses rely on additional computers or mobile devices connected to smart glasses, which require users to switch between different systems and devices. This may greatly lower the practicability and usability of smart glasses. In this paper, we focus on this challenge and design three practical anti-eavesdropping password entry schemes on stand-alone smart glasses, named gTapper, gRotator and gTalker. The main idea is to break the correlation between the underlying password and the interaction observable to adversaries. In our IRB-approved user study, these schemes are found to be easy-to-use without additional hardware under various test conditions, where the participants can enter their passwords within moderate time, at high accuracy, and in various situations.