Understandingphone sensor and app data for enhancing security
- 1. Understanding Smartphone Sensor and App Data for Enhancing the Security of Secret Questions Abstract: Many web applications provide secondary authentication methods, i.e., secret questions (or password recovery questions), to reset the account password when a user’s login fails. However, the answers to many such secret questions can be easily guessed by an acquaintance or exposed to a stranger that has access to public online tools (e.g., online social networks); moreover, a user may forget her/his answers long after creating the secret questions. Today’s prevalence of smart phones has granted us new opportunities to observe and understand how the personal data collected by Smartphone sensors and apps can help create personalized secret questions without violating the users’ privacy concerns. In this paper, we present a Secret-Question based Authentication system, called “Secret- QA” that creates a set of secret questions on basic of people’s Smartphone usage. We develop a prototype on Android smart phones, and evaluate the security of the secret questions by asking the acquaintance/stranger who participate in our user study to guess the answers with and without the help of online tools; meanwhile, we observe the questions’ reliability by asking participants to answer their own questions. Our experimental results reveal that the secret questions related to motion sensors, calendar, app installment, and part of legacy app usage history (e.g., phone calls) have the best memorability for users as well as the highest robustness to attacks.
- 2. Main Architecture: SYSTEM DESIGN: Existing System: In existing system the application will be having common security level question that won’t merge with the mobile data or application data. So that the ease of entering app was more. The attacker can easily make guess attack on those questions. Disadvantage: Less Security. Easy Questions to answer. Headache to user.
- 3. Lack of accuracy. Proposed System: In proposed system, the application will be having security question based on their application data and sensor data which are stored in the local database. This makes the attacker a difficult job to crack the security level and reach the application. Advantage: More secure. Reduce headache on user. More Accurate. Can store more important data. Modules Involved: Understanding smart phones sensor data and app data for enhancing the security of particular application. This project three modules. They are 1. Personal Details. 2. Banking.
- 4. 3. Monitor Phone. 1. Personal Details: Here the user needs to enter the personal details that were only known by them. Forexample their star signs, their blood group, their lucky number ECT... These details are stored in database from which the security questions are raised. Since the personal details are converted as security questions it will be difficult for attacker to guess the answer. 2. Monitor Phone. Next Module is monitoring our mobile phone data in order to increase the security. This process was separated into 3 phases. Application data, Phone status and battery status. Monitoring Battery Status
- 5. Monitoring Phone Status Monitoring Applicationsinstalled Monitoring ParticularApplication
- 6. 3. Banking: Once the user get pass mark in his security level he can enter into the banking application. Result Page
- 8. SYSTEM SPECIFICATION: HARDWARE REQUIREMENTS: System : Pentium IV 2.4 GHz. Hard Disk : 40 GB. Floppy Drive : 1.44 Mb. Monitor : 14’ Colour Monitor. Mouse : Optical Mouse. Ram : 512 Mb. SOFTWARE REQUIREMENTS: Operating system : Windows 7 Ultimate. Coding Language : Java. Front-End : Eclipse. Data Base : Sqlite Manger. CONCLUSION: In this paper, we present a Secret-Question based Authentication system, called “Secret-QA”, and conduct a user study to understand how much the personal data collected by Smartphone sensors and apps can help improve the security of secret questions without violating the users’ privacy. We create a set of questions based on the data related to sensors and apps, which reflect the users’ short-term activities and Smartphone usage. We measure the reliability of these questions by
- 9. asking participants to answer this question, as well as launching the acquaintance/stranger guessing attacks with and without help of online tools, and we are considering establishing a probabilistic model based on a large scale of user data to characterize the security of the secret questions. In our experiment, the secret questions related to motion sensors, calendar, app installment, and part of legacy apps (call) have the best performance in terms of memorability and the attack resilience, which outperform the conventional secret-question based approaches that are created based on a user’s long-term history/information.