Continuous Remote Mobile Identity Management Using Biometric Integrated Touch-Display
Tao Feng, Ziyi Liu, Bogdan Cărbunar, Dainis Boumber, Weidong Larry Shi · 2012
While enriching the user experiences, the development of mobile devices and applications introduces new security and privacy vulnerabilities for the remote services accessed by mobile device users. A trusted and usable authentication architecture for mobile devices is thus in high demand. In this paper,we leverage a unified structure, consisting of transparent TFT based fingerprint sensors, touchscreen, and display, to propose a novel identity management mechanism that authenticates usersof touch based mobile devices for accessing the local devices and remote services. Our solution differs from the previous one time and enforced authentication approaches through two novel features: (i) user transparent authentication process, requiring neither password nor extra login steps and (ii) continuous identity management based on fingerprint biometric, where each user-to-device touch interaction is used toward authentication.Moreover, we introduce two different security scenarios, one for local identity management, and the second extended solution for remote identity management. Finally we employ TRUST (Trust Reinforcement based on Unified Structural Touch-display) to solve the identity challenge in cyber space.