T. Dressel, E. List, F. Echtler SecuriCast: Zero-Touch Two-Factor Authentication using WebBluetooth? EICS '19 - Proceedings of the ACM SIGCHI Symposium on Engineering Interactive Computing Systems (bib)
	Simple username/password logins are widely used on the web, but are susceptible to multiple security issues, such as database leaks, phishing, and password re-use. Two-factor authentication is one way to mitigate these issues, but suffers from low user acceptance due to (perceived) additional effort. We introduce SecuriCast?, a method to provide two-factor authentication using WebBluetooth? as a secondary channel between an unmodified web browser and the user's smart-phone. Depending on the usage scenario and the desired level of security, no device switch and only minimal additional interaction is required from the user. We analyse SecuriCast? based on the framework by Bonneau et al., briefly report on results from a user study with 30 participants demonstrating performance and perceived usability of SecuriCast?, and discuss possible attack scenarios and extensions.
	This material is presented to ensure timely dissemination of scholarly and technical work. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each authors copyright. In most cases, these works may not be reposted without the explicit permission of the copyright holder.