Location-assured, multifactor authentication on smartphones via LTE communication

Torben Kuseler; Ihsan A. Lami; Hisham Al-Assam

doi:10.1117/12.2018027

28 May 2013 Location-assured, multifactor authentication on smartphones via LTE communication

Torben Kuseler, Ihsan A. Lami, Hisham Al-Assam

Proceedings Volume 8755, Mobile Multimedia/Image Processing, Security, and Applications 2013; 87550B (2013) https://doi.org/10.1117/12.2018027
Event: SPIE Defense, Security, and Sensing, 2013, Baltimore, Maryland, United States

Abstract

With the added security provided by LTE, geographical location has become an important factor for authentication to enhance the security of remote client authentication during mCommerce applications using Smartphones. Tight combination of geographical location with classic authentication factors like PINs/Biometrics in a real-time, remote verification scheme over the LTE layer connection assures the authenticator about the client itself (via PIN/biometric) as well as the client’s current location, thus defines the important aspects of “who”, “when”, and “where” of the authentication attempt without eaves dropping or man on the middle attacks. To securely integrate location as an authentication factor into the remote authentication scheme, client’s location must be verified independently, i.e. the authenticator should not solely rely on the location determined on and reported by the client’s Smartphone. The latest wireless data communication technology for mobile phones (4G LTE, Long-Term Evolution), recently being rolled out in various networks, can be employed to enhance this location-factor requirement of independent location verification. LTE’s Control Plane LBS provisions, when integrated with user-based authentication and independent source of localisation factors ensures secure efficient, continuous location tracking of the Smartphone. This feature can be performed during normal operation of the LTE-based communication between client and network operator resulting in the authenticator being able to verify the client’s claimed location more securely and accurately. Trials and experiments show that such algorithm implementation is viable for nowadays Smartphone-based banking via LTE communication.

Citation Download Citation

Torben Kuseler, Ihsan A. Lami, and Hisham Al-Assam "Location-assured, multifactor authentication on smartphones via LTE communication", Proc. SPIE 8755, Mobile Multimedia/Image Processing, Security, and Applications 2013, 87550B (28 May 2013); https://doi.org/10.1117/12.2018027

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available