Smart glasses allow for gaze gesture passwords as a
hands-free form of mobile authentication. However, pupil
movements for password input are easily observed by
attackers, who thereby can derive the password. In this
paper we investigate closed-eye gaze gesture passwords with
EOG sensors in smart glasses. We propose an approach to
detect and recognize closed-eye gaze gestures, together
with a 7 and 9 character gaze gesture alphabet. Our
evaluation indicates good gaze gesture detection rates.
However, recognition is challenging specifically for
vertical eye movements with 71.2%-86.5% accuracy and
better results for opened than closed eyes. We further find
that closed-eye gaze gesture passwords are difficult to
attack from observations with 0% success rate in our
evaluation, while attacks on open eye passwords succeed
with 61%. This indicates that closed-eye gaze gesture
passwords protect the authentication secret significantly
better than their open eye counterparts.
@inproceedings{Findling_19_HidemyGaze, author = {Findling, Rainhard Dieter and Quddus, Tahmid and Sigg, Stephan}, booktitle = {Proc. {MoMM} 2019: 17th International Conference on Advances in Mobile Computing and Multimedia}, title = {Hide my Gaze with {EOG}! {T}owards Closed-Eye Gaze Gesture Passwords that Resist Observation-Attacks with Electrooculography in Smart Glasses}, year = {2019}, month = dec, number = { {In print}}, publisher = {ACM} }