Mobile Authentication

1. Front Matter

   Pages i-xiv

   PDF

2. The Big Picture

   • Markus Jakobsson

   Pages 1-3

3. The Benefits of Understanding Passwords

   • Markus Jakobsson, Mayank Dhiman

   Pages 5-24

4. Your Password is Your New PIN

   • Markus Jakobsson, Debin Liu

   Pages 25-36

5. Like Passwords: But Faster, Easier and More Secure

   • Markus Jakobsson, Ruj Akavipat

   Pages 37-56

6. Improved Visual Preference Authentication

   • Markus Jakobsson, Hossein Siadati

   Pages 57-72

7. How to Kill Spoofing

   • Markus Jakobsson, Hossein Siadati

   Pages 73-90

8. Can Biometrics Replace Passwords?

   • Markus Jakobsson

   Pages 91-100

9. Legacy Servers: Teaching Old Dogs New Tricks

   • Markus Jakobsson, Saman Gerami Moghaddam, Mohsen Sharifi

   Pages 101-105

10. Back Matter

    Pages 107-113

    PDF

Mobile Authentication: Problems and Solutions looks at human-to-machine authentication, with a keen focus on the mobile scenario. Human-to-machine authentication is a startlingly complex issue. In the old days of computer security-before 2000, the human component was all but disregarded. It was either assumed that people should and would be able to follow instructions, or that end users were hopeless and would always make mistakes. The truth, of course, is somewhere in between, which is exactly what makes this topic so enticing. We cannot make progress with human-to-machine authentication without understanding both humans and machines. Mobile security is not simply security ported to a handset. Handsets have different constraints than traditional computers, and are used in a different way. Text entry is more frustrating, and therefore, it is tempting to use shorter and less complex passwords. It is also harder to detect spoofing. We need to design with this in mind. We also need to determine how exactly to integrate biometric readers to reap the maximum benefits from them. This book addresses all of these issues, and more.

• Authentication
• Biometrics
• Bootstrapping PINs
• Legacy system integration
• Login
• Mobile
• PINs
• Password alternatives
• Password parsing
• Password reset
• Password strength
• Passwords
• Problems
• Spoofing

• PayPal, San Jose, USA

  Markus Jakobsson

Policies and ethics