Continuous Authentication Protects From Physical Attacks on Mobile Terminals

No ratings

Presented at ISSAinternationalcon 2014 by

Ben Ayed

Scott Jenkins

The current standard method for validating a user’s identity for authentication on a mobile information system requires humans to manage long complex passwords, a smart card or a one-time password. Moreover, as long as the session remains active, typical systems incorporate no mechanisms to verify that the user originally authenticated is the user still in control of the keyboard. Continuous Authentication monitors the user to ensure that the user does not leave proximity of the mobile data terminal, and locks data in real-time. The added benefit is that the user needs to authenticate only once as long as he/she stays in proximity of the mobile data terminal.