Jan Halámek believes there is a better method to securing electronic devices – and it relies on our own sweat.
Halámek, an assistant professor of chemistry at the University at Albany, has released a concept paper in ChemPhysChem that proposes a new biometric-based authentication approach for unlocking mobile and wearable devices, such as smart phones and smart watches.
The approach relies on analyzing skin secretions – or sweat – to build an amino acid profile that is unique to the devices' owner. The profile would be stored within the device and used for identification purposes each time an attempt to unlock is made.
"We are developing a new form of security that could completely change the authentication process for electronic devices," Halámek said. "Using sweat as an identifier cannot be easily mimicked/hacked by potential intruders. It's close to full-proof."
Skin secretions contain many small molecules - or metabolites – that can each be targeted for authentication analysis.
To build a profile, the device would first have a "monitoring period" in which it would continuously measure its owner's sweat levels at various times of the day. For example, those who work overnight shifts would have a vastly different profile at 2 a.m. than those who work day shifts. Other factors, including age, biological sex, race and physiological state of the individual would also play a role.
Once the profile is developed, the owner would be identified once holding the device/wearing it.
The approach would not only improve on current authentication methods, but also help people with certain disabilities, who may be unable to move their fingers in a specific position to open the device or have a caretaker who is unlocking the device without permission. The device owner would also not have to remember a passcode.
"The current forms of authentication have proven to be less than ideal," Halámek said. "Passwords and pins can easily be seen over someone's shoulder and there are many internet tutorials on how to create a fingerprint mold that is capable of opening a device. There's also issues with facial recognition, which often times does not work correctly."
Halámek has tested the analysis in his lab with success. The next step is to collaborate with an engineer who can help with implementation.
His co-authors on the paper are Vladimir Privman, a professor at Clarkson University, and UAlbany graduate student Juliana Agudelo.
Halámek's new concept paper is his first that focuses on cybersecurity, but adds to a growing portfolio of research that involves testing biomarkers to catch criminals.
Over the last two years, Halámek and his research team have been featured in dozens of media outlets across the globe for their forensic discoveries.
By testing compounds within physical evidence left behind at a crime scene– like fingerprints or blood residue – Halámek and his team can identify key characteristics of culprits within minutes and without DNA testing. This includes their age range, sex and ethnicity.
"It's all about the biomarkers when you're looking for the attributes of a person," said Halámek. "It's pure chemistry."
Halámek's forensic research is ongoing through numerous collaborations on campus and with researchers from other universities around the nation. His lab was also recently awarded with a three-year grant through the Department of Justice/National Institute of Justice to continue developing their fingerprint analysis.
Explore further: Chemist's technique can identify a fingerprint as male or female
Juliana Agudelo et al. Promises and Challenges in Continuous Tracking Utilizing Amino Acids in Skin Secretions for Active Multi-Factor Biometric Authentication for Cybersecurity, ChemPhysChem (2017). DOI: 10.1002/cphc.201700044