@inproceedings{2b10e417f3ed47a6a62ebe248cc13c0d,
title = "A new secure authentication scheme for web login using BLE smart devices",
abstract = "Existing user authentication schemes used for login to a website are incapable of handling recent phishing attacks such as real time (RT) / control relay (CR) man in the middle (MITM) attack and attacks launched via covertly installed malicious browser extensions (MEs). Two factor authentication schemes such as Google 2 Step verification, SAASPASS, QR code, graphical password and push notification based login schemes can be compromised using RT / CR MITM phishing attacks. Hardware token based schemes are safe but the extra cost of the hardware token makes them unattractive to users. Therefore, there is a need to develop new authentication schemes which are hard for an attacker to compromise but easy for users to understand and utilize. This paper analyzes existing authentication schemes to identify the research gaps and then proposes a secure authentication scheme which uses Bluetooth Low Energy (BLE, BT 4.0+ version) devices for user identification and which can handle RT/CR MITM phishing attacks, attacks launched via malicious browser extensions and app spoofing via attackers. The proposed scheme is location/client system independent and is secure from Bluetooth address spoofing attacks.",
keywords = "Authentication, BLE, Bluetooth, Login, Malicious browser extension, Phishing",
author = "Gaurav Varshney and Manoj Misra and Pradeep Atrey",
note = "Publisher Copyright: {\textcopyright} 2017 IEEE.; 11th IEEE International Conference on Anti-Counterfeiting, Security, and Identification, ASID 2017 ; Conference date: 27-10-2017 Through 29-10-2017",
year = "2017",
month = jul,
day = "2",
doi = "10.1109/ICASID.2017.8285751",
language = "English",
series = "Proceedings of the International Conference on Anti-Counterfeiting, Security and Identification, ASID",
publisher = "IEEE Computer Society",
pages = "95--98",
editor = "Jianyang Zhou and Donghui Guo and Jiyang Dong",
booktitle = "Proceedings of 2017 11th IEEE International Conference on Anti-Counterfeiting, Security, and Identification, ASID 2017",
}