@inproceedings{45d9fd3ab67d47b683db4d9bcf0cda89,
title = "SecuriCast: Zero-touch two-factor authentication using WebBluetooth",
abstract = "Simple username/password logins are widely used on the web, but are susceptible to multiple security issues, such as database leaks, phishing, and password re-use. Two-factor authentication is one way to mitigate these issues, but suffers from low user acceptance due to (perceived) additional effort. We introduce SecuriCast, a method to provide two-factor authentication using WebBluetooth as a secondary channel between an unmodified web browser and the user's smart-phone. Depending on the usage scenario and the desired level of security, no device switch and only minimal additional interaction is required from the user. We analyse SecuriCast based on the framework by Bonneau et al., briefly report on results from a user study with 30 participants demonstrating performance and perceived usability of SecuriCast, and discuss possible attack scenarios and extensions.",
keywords = "Bluetooth low energy, BTLE, Smartphone, Smartwatch, TFA, Two-factor authentication, WebBluetooth",
author = "Thomas Dressel and Eik List and Florian Echtler",
year = "2019",
month = jun,
day = "18",
doi = "10.1145/3319499.3328225",
language = "English",
series = "Proceedings of the ACM SIGCHI Symposium on Engineering Interactive Computing Systems, EICS 2019",
booktitle = "Proceedings of the ACM SIGCHI Symposium on Engineering Interactive Computing Systems, EICS 2019",
publisher = "Association for Computing Machinery",
address = "United States",
note = "11th ACM SIGCHI Symposium on Engineering Interactive Computing Systems, EICS 2019 ; Conference date: 18-06-2019 Through 21-06-2019",
}