SCR-Auth: Secure Call Receiver Authentication on Smartphones Using Outer Ear Echoes

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Sun, Xiping, Chen, Jing, He, Kun, He, Zhixiang, Du, Ruiying, Feng, Yebo, Zhao, Qingchuan, Wu, Cong
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866917888533725184
author Sun, Xiping
Chen, Jing
He, Kun
He, Zhixiang
Du, Ruiying
Feng, Yebo
Zhao, Qingchuan
Wu, Cong
author_facet Sun, Xiping
Chen, Jing
He, Kun
He, Zhixiang
Du, Ruiying
Feng, Yebo
Zhao, Qingchuan
Wu, Cong
contents Receiving calls is one of the most universal functions of smartphones, involving sensitive information and critical operations. Unfortunately, to prioritize convenience, the current call receiving process bypasses smartphone authentication mechanisms (e.g., passwords, fingerprint recognition, and face recognition), leaving a significant security gap. To address this issue, we propose SCR-Auth, a secure call receiver authentication scheme for smartphones that leverages outer ear echoes. It sends inaudible acoustic signals through the earpiece speaker to actively sense the call receiver's outer ear structure and records the resulting echoes using the top microphone. These echoes are then analyzed to extract unique outer ear biometric information for authentication. It operates implicitly, without requiring extra hardware or imposing additional burden. Comprehensive experiments conducted under diverse conditions demonstrate SCR-Auth's effectiveness and security, showing an average balanced accuracy of 96.95% and resilience against potential attacks.
format Preprint
id arxiv_https___arxiv_org_abs_2404_15000
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle SCR-Auth: Secure Call Receiver Authentication on Smartphones Using Outer Ear Echoes
Sun, Xiping
Chen, Jing
He, Kun
He, Zhixiang
Du, Ruiying
Feng, Yebo
Zhao, Qingchuan
Wu, Cong
Cryptography and Security
Receiving calls is one of the most universal functions of smartphones, involving sensitive information and critical operations. Unfortunately, to prioritize convenience, the current call receiving process bypasses smartphone authentication mechanisms (e.g., passwords, fingerprint recognition, and face recognition), leaving a significant security gap. To address this issue, we propose SCR-Auth, a secure call receiver authentication scheme for smartphones that leverages outer ear echoes. It sends inaudible acoustic signals through the earpiece speaker to actively sense the call receiver's outer ear structure and records the resulting echoes using the top microphone. These echoes are then analyzed to extract unique outer ear biometric information for authentication. It operates implicitly, without requiring extra hardware or imposing additional burden. Comprehensive experiments conducted under diverse conditions demonstrate SCR-Auth's effectiveness and security, showing an average balanced accuracy of 96.95% and resilience against potential attacks.
title SCR-Auth: Secure Call Receiver Authentication on Smartphones Using Outer Ear Echoes
topic Cryptography and Security
url https://arxiv.org/abs/2404.15000