Seeing-is-believing: using camera phones for human-verifiable authentication

Author

McCune, Jonathan M. ; Perrig, Adrian ; Reiter, Michael K.

Author_Institution

Carnegie Mellon Univ., Pittsburgh, PA, USA

fYear

2005

fDate

8-11 May 2005

Firstpage

110

Lastpage

124

Abstract

Current mechanisms for authenticating communication between devices that share no prior context are inconvenient for ordinary users, without the assistance of a trusted authority. We present and analyze seeing-is-believing, a system that utilizes 2D barcodes and camera-telephones to implement a visual channel for authentication and demonstrative identification of devices. We apply this visual channel to several problems in computer security, including authenticated key exchange between devices that share no prior context, establishment of a trusted path for configuration of a TCG-compliant computing platform, and secure device configuration in the context of a smart home.

Keywords

authorisation; bar codes; cameras; cryptography; mobile computing; mobile handsets; telecommunication security; 2D barcodes; TCG-compliant computing platform; authenticated key exchange; camera phones; camera-telephones; computer security; demonstrative device identification; human-verifiable authentication; secure device configuration; seeing-is-believing system; smart home; trusted path; visual channel; Authentication; Cameras; Communication system security; Computer displays; Computer security; Context; Mobile handsets; Printers; Public key cryptography; Smart homes;

fLanguage

English

Publisher

ieee

Conference_Titel

Security and Privacy, 2005 IEEE Symposium on

ISSN

1081-6011

Print_ISBN

0-7695-2339-0

Type

conf

DOI

10.1109/SP.2005.19

Filename

1425062