Anti-Phishing by Smart Mobile Device

Abstract

Phishing is a popular technique to thieve user's authentication information, especially password. The key issue is that it is difficult for user to distinguish fake login user interface (LUI) from normal LUI. This paper introduces a novel method to anti-phish by smart device. In our method, a smart device pre-stores feature information of LUI. Before entering authentication information, a plug-in of Web browser at host side will verify the validation of LUI according to pre-stored LUI information. Bluetooth provides a communication channel between the plug-in and the smart device. Furthermore, the smart device can automatically fill the field of user ID and password to the LUI if LUI passes the verification of smart mobile device. Compared with other solutions, this solution can greatly improve the security of authentication.