Title
SecuriCast: zero-touch two-factor authentication using WebBluetooth.
Abstract
Simple username/password logins are widely used on the web, but are susceptible to multiple security issues, such as database leaks, phishing, and password re-use. Two-factor authentication is one way to mitigate these issues, but suffers from low user acceptance due to (perceived) additional effort. We introduce SecuriCast, a method to provide two-factor authentication using WebBluetooth as a secondary channel between an unmodified web browser and the user's smart-phone. Depending on the usage scenario and the desired level of security, no device switch and only minimal additional interaction is required from the user. We analyse SecuriCast based on the framework by Bonneau et al., briefly report on results from a user study with 30 participants demonstrating performance and perceived usability of SecuriCast, and discuss possible attack scenarios and extensions.
Year
DOI
Keywords
2019
10.1145/3319499.3328225
WebBluetooth, Bluetooth Low Energy, BTLE, two-factor authentication, TFA, smartphone, smartwatch
DocType
ISBN
Citations 
Conference
978-1-4503-6745-5
0
PageRank 
References 
Authors
0.34
0
3
Name
Order
Citations
PageRank
Thomas Dressel100.34
Eik List211113.70
Florian Echtler333731.35