Channels

10:36 AM
Connect Directly
RSS
E-Mail
50%
50%

Touchscreen Smudges Said to Pose Security Risk

Researchers at the University of Pennsylvania have brought to light the potential dangers of touchscreen smudges in a paper released yesterday.

Researchers at the University of Pennsylvania have brought to light the potential dangers of touchscreen smudges in a paper released yesterday.According to the paper, residual fingerprint oils on smartphones can be used to determine passwords, such as a PIN used to access a mobile banking account.

The researchers conducted several experiments using cameras to photograph Android phones. "Using photographs taken under a variety of lighting and camera positions ... in many situations full or partial pattern recovery is possible, even with smudge 'noise' from simulated application usage or distortion caused by incidental clothing contact," the report says.

Not only could researchers see clearly the pattern of a user's finger over the phone screen, but they could easily determine the direction of the smudges and therefore pick up the sequence of the pattern.

What should banks do to protect their mobile banking customers from smudge fraud? The report concludes that password patterns should be strengthened, especially for Android phones.

Some banks are experimenting with extra authentication measures, such as temporary passwords sent to a cell phone and only usable for a very short period of time. Such measures could help prevent "passive" attacks, where the criminal doesn't have access to the phone itself. But if the phone is stolen, another security layer may be needed.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Bank Systems & Technology Newsletters
White Papers
Current Issue
Bank Systems & Technology
BS&T's 2014 Elite 8 executives are leading their banks to success, whether it involves leveraging the cloud, modernizing core systems, or transforming into digital enterprises.
Slideshows
Video
Bank Systems & Technology Radio
Archived Audio Interviews
Join Bank Systems & Technology Associate Editor Bryan Yurcan, and guests Karen Massey and Jerry Silva from IDC Financial Insights, for a conversation about the firm's 11th annual FinTech rankings.