Seeing-is-believing: Using camera phones for human-verifiable authentication

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2005, Pages 110-124

  McCune, Jonathan M ^a   Perrig, Adrian ^a   Reiter, Michael K ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CAMERA PHONES; VISUAL CHANNELS;

COMPUTATION THEORY; SECURITY OF DATA;

CAMERAS;

EID: 27544489075     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (52)

1. CoolTown. http://www.cooltown.com/, Nov. 2004.
2. Trusted Computing Group. http://www.trustedcoraputinggroup.org/, Nov. 2004.
3. B. Balacheff, L. Chen, S. Pearson, D. Plaquin, and G. Proudler. Trusted Computing Platforms - TCPA Technology in Context. Prentice Hall, 2003.
4. D. Balfanz, D. Smetters, P. Stewart, and H. C. Wong. Talking to strangers: Authentication in ad-hoc wireless networks. In Proceedings of the Symposium on Network and Distributed Systems Security (NDSS), Feb. 2002.
5. M. Bellare, A. Boldyreva, A. Desai, and D. Pointcheval. Key-privacy in public-key encryption. In Proceedings of Advances in Cryptology (ASIACRYPT), 2001.
6. S. Bellovin and M. Merrit. Augmented encrypted key exchange: a password-based protocol secure against dictionary atttacks and password file compromise. In Proceedings of the ACM Conference on Computer and Communications Security (CCS), pages 244-250, 1993.
7. S. M. Bellovin and M. Merrit. Encrypted key exchange: Password-based protocols secure against dictionary attacks. In Proceedings of the IEEE Symposium on Security and Privacy, pages 72-84, 1992.
8. V. Boyko, P. MacKenzie, and S. Patel. Provably secure password authentication and key exchange using Diffie-Hellman. In Proceedings of Advances in Cryptology (EUROCRYPT, pages 156-171, 2000.
9. M. Burnside, D. Clarke, B. Gassend, T. Kotwal, M. Burnside, S. Devadas, and R. Rivest. The untrusted computer problem and camera-based authentication. In Proceedings of Pervasive Computing (Pervasive), Aug. 2002.
10. F. Dawson and T. Howes. RFC2426: vCard MIME directory profile, http://www.faqs.org/rfcs/rfc2426.html, Sept. 1998.
11. T. Dierks and C. Alien. RFC 2246: The TLS protocol: Version 1.0. http://www.faqs.org/rfcs/rfc2246.html, Jan. 1999.
12. W. Diffie and M. E. Hellman. New directions in cryptography. IEEE Trans. Inform. Theory, IT-22:644-654, Nov. 1976.
13. S. Dohrmann and C. Ellison. Public key support for collaborative groups. In Proceedings of the PKI Research Workshop, Apr. 2002.
14. A. O. Freier, P. Karlton, and P. C. Kocher. The SSL protocol: Version 3.0. http://wp.netscape.com/eng/ss13/draft302.txt, Nov. 1996.
15. E. Gieseke and J. McLaughlin. Secure web authentication with mobile phones using keyed hash authentication. CSCI E 170 Final Project, Harvard University Extension, Jan. 2005.
16. I. Goldberg. Visual key fingerprint code, http://www.cs.berkeley.edu/ iang/visprint.c, 1996.
17. J. C. Haartsen. The Bluetooth radio system. IEEE Personal Communications Magazine, pages 28-36, 2000.
18. S. R. Hanna. Configuring security parameters in small devices, draft-hanna-zeroconf-seccfg-00.txt, July 2002.
19. D. Harkins and D. Carrel. RFC2409: The Internet key exchange (IKE). http://www.faqs.org/rfcs/rfc2409.html, Nov. 1998.
20. T. Howes and M. Smith. RFC2426: MIME content-type for directory information, http://www.faqs.org/rfcs/rfc2425.html, Sept. 1998.
21. P. Jones. RFC3174: US secure hash algorithm 1 (SHA-1). http://www.faqs.org/rfcs/rfc3174.html, Sept. 2001.
22. P. Kam. Reed-solomon encoding/decoding, http://www.ka9q.net/code/fee/, 2002.
23. L. M. Kohnfelder. Towards a practical public-key cryptosystem. B.Sc thesis, MIT Departement of Electrical Engineering, 1978.
24. M. G. Kuhn. Optical time-domain eavesdropping risks of crt displays. In Proceedings of the IEEE Symposium on Security and Privacy, May 2002.
25. M. G. Kuhn and R. J. Anderson. Soft tempest: Hidden data transmission using electromagnetic emanations. In Proceedings of the Information Hiding Workshop (IHW), pages 124-142, Apr. 1998.
26. A. K. Lenstra and E. R. Verheul. Selecting cryptographic key sizes. Journal of Cryptology, 14(4):255-293, 2001.
27. R. Levien. PGP snowflake. Personal communication, 1996.
28. P. MacKenzie, S. Patel, and R. Swaminathan. Password authenticated key exchange based on RSA. In Proceedings of Advances in Cryptology (ASIACRYPT), pages 599-613, 2000.
29. A. Madhavapeddy, D. Scott, R. Sharp, and E. Upton. Using camera-phones to enhance human-computer interaction. In Proceedings of Ubiquitous Computing (Adjunct Proceedings: Demos), 2004.
30. A. Madhavapeddy, D. Scott, R. Sharp, and E. Upton. Using visual tags to bypass bluetooth device discovery. In Proceedings of the ACM Mobile Computing and Communications Review (MC2R), Jan. 2005.
31. S. P. Miller, C. Neuman, J. I. Schiller, and J. H. Saltzer. Kerberos authentication and authorization system. In Project Athena Technical Plan, page section E.2.1, 1987.
32. A. Perrig and D. Song. Hash visualization: A new technique to improve real-world security. In Proceedings of the Workshop on Cryptographic Techniques and E-Commerce (CrypTEC), pages 131-138, July 1999.
33. I. S. Reed and G. Solomon. Polynomial codes over certain finite fields. Journal of the Society for Industrial and Applied Mathematics, 1960.
34. M. Rohs and B. Gfeller. Using camera-equipped mobile phones for interacting with real-world objects. Proceedings of Advances in Pervasive Computing, pages 265-271, Apr. 2004.
35. S. Ross, J. Hill, M. Chen, A. D. Joseph, D. Culler, and E. Brewer. A composable framework for secure multi-modal access to Internet services from post-PC devices. In Mobile Networks and Applications (Special Issue: Selected papers from WMCSA 2000), pages 389-406, Oct. 2002.
36. RVSI Acuity CiMatrix. Data matrix barcodes, http://www.rvsi.com/ acuitycimatrix/index.htm, 2005.
37. P. Rysavy. General packet radio service (GPRS). GSM Data Today, Sept. 1998.
38. R. Sailer, X. Zhang, T. Jaeger, and L. van Doom. Design and implementation of a TCG-based integrity measurement architecture. In Proceedings of the USENIX Security Symposium, 2004.
39. S. Saroiu, S. D. Gribble, and H. M. Levy. Measurement and analysis of spyware in a university environment. In Proceedings of the Symposium on Networked Systems Design and Implementation (NSDI), Mar. 2004.
40. J. S. Shapiro, J. Vanderburgh, E. Northup, and D. Chizmadia. Design of the EROS trusted window system. In Proceedings of the USENIX Security Symposium, pages 165-178, 2004.
41. F. Stajano and R. Anderson. The resurrecting duckling: Security issues for ad-hoc wireless networks. In Proceedings of the Security Protocols Workshop, 1999.
42. J. G. Steiner, C. Neuman, and J. I. Schiller. Kerberos: An authentication service for open network systems. Manuscript, Mar. 1988.
43. Symbol Technologies. PDF417. http://www.pdf417.com/, Feb. 2005.
44. A. Thoukydides. SIS file format. http://homepage.ntlworld.com/thouky/ software/psifs/sis.html, 2004.
45. Trusted Computing Group. Trusted platform module main specification, Part 1: Design principles, Part 2: TPM structures, Part 3: Commands, http://www.trustedcomputinggroup.org, Oct. 2003. Version 1.2, Revision 62.
46. J. D. Tygar and A. Whitten. WWW electronic commerce and Java Trojan horses. In Proceedings of the USENIX Workshop on Electronic Commerce, pages 243-250, Nov. 1996.
47. United Parcel Service. MaxiCode. http://www.maxicode.com/, Feb. 2005.
48. S. Capkun, J. Hubaux, and L. Buttyán. Mobility helps security in ad hoc networks. In Proceedings of the ACM Symposium on Mobile Ad Hoc Networking and Computing (MobiHoc), June 2003.
49. S. Woodside. Read real-world hyperlinks with a camera phone, http://semacode.org/,Feb. 2005.
50. M. Wu, S. Garfinkel, and R. Miller. Secure web authentication with mobile phones. http://dimacs.rutgers.edu/Workshops/Tools/abstract-wu-garfinkel-miller. %pdf.
51. T. Wu. The secure remote password protocol. In Proceedings of the Network and Distributed System Security Symposium (NDSS), Feb. 1999.
52. P. Zimmermann. The Official PGP User's Guide. MIT Press, 1995.