AN INTEGRATED APPROACH FOR AUTHENTICATION AND ACCESS CONTROL WITH SMARTPHONES

Abstract

With the enhancement in technology, people are relying more on mobile devices for accessing social media sites, online shopping or financial transactions. These devices are smart but the methods of authentication are password- or biometric- based, which make the authentication process either frustrating or expensive in terms of cost and computation. Weak passwords, and the absence of authentication mechanisms in mobile devices cause breach of security and privacy of the user data in case of physical theft. In order to mitigate this problem, we study an integrated approach that utilizes smartphone sensor data, network data, and usage data, in authentication schemes and access control mechanisms with smartphones. The proposed scheme switches between the implicit and explicit authentication depending on the usage patterns of the smartphone, at different time intervals of the day. Based on that, an access control mechanism has been proposed. We have also investigated how different weighting techniques play a role in determining the priority towards the sensor selection for user authentication. The proposed approach was tested on a publicly available dataset. The results show that our approach is viable and effective for authentication along with access control using smartphones.