Title
WristSpy: Snooping Passcodes in Mobile Payment Using Wrist-worn Wearables
Abstract
Mobile payment has drawn considerable attention due to its convenience of paying via personal mobile devices at anytime and anywhere, and passcodes (i.e., PINs or patterns) are the first choice of most consumers to authorize the payment. This paper demonstrates a serious security breach and aims to raise the awareness of the public that the passcodes for authorizing transactions in mobile payments can be leaked by exploiting the embedded sensors in wearable devices (e.g., smartwatches). We present a passcode inference system, WristSpy, which examines to what extent the user’s PIN/pattern during the mobile payment could be revealed from a single wrist-worn wearable device under different passcode input scenarios involving either two hands or a single hand. In particular, WristSpy has the capability to accurately reconstruct fine-grained hand movement trajectories and infer PINs/patterns when mobile and wearable devices are on two hands through building a Euclidean distance-based model and developing a training-free parallel PIN/pattern inference algorithm. When both devices are on the same single hand, a highly challenging case, WristSpy extracts multi-dimensional features by capturing the dynamics of minute hand vibrations and performs machine-learning based classification to identify PIN entries. Extensive experiments with 15 volunteers and 1600 passcode inputs demonstrate that an adversary is able to recover a user’s PIN/pattern with up to 92% success rate within 5 tries under various input scenarios.
Year
Venue
Keywords
2019
ieee international conference computer and communications
Online banking,Mobile handsets,Pins,Wearable sensors,Trajectory,Feature extraction
Field
DocType
ISSN
Mobile payment,Wearable computer,Computer science,Inference,Computer network,Mobile device,Human–computer interaction,Password,Wearable technology,Smartwatch,Payment
Conference
0743-166X
ISBN
Citations 
PageRank 
978-1-7281-0515-4
0
0.34
References 
Authors
0
5
Name
Order
Citations
PageRank
Chen Wang1716.39
Jian Liu228959.26
Xiaonan Guo385.27
Yan Wang481140.19
Yingying Chen52495193.14