{"id":338928,"date":"2017-04-21T06:28:01","date_gmt":"2017-04-20T22:28:01","guid":{"rendered":"http:\/\/techcrunch.com\/?p=1479564"},"modified":"2017-04-21T06:28:01","modified_gmt":"2017-04-20T22:28:01","slug":"ambient-noise-could-be-your-next-multi-factor-authentication-token","status":"publish","type":"post","link":"https:\/\/people.utm.my\/asmawisham\/ambient-noise-could-be-your-next-multi-factor-authentication-token\/","title":{"rendered":"Ambient noise could be your next multi-factor authentication token"},"content":{"rendered":"

<\/p>\n

We\u2019re all pretty used to two-factor authentication now, and it isn\u2019t much of an inconvenience to have to type in a four-digit code when you log in from a new location. But some Swiss security researchers came up with a smart way to authenticate<\/a> without even that tiny amount of work: ambient noise.<\/p>\n

The idea behind multi-factor authentication is basically making sure that a login is by the actual user, not an impersonator or hacker. Sending a code to a second device owned by the user is one way to check, but it\u2019s far from the only option.<\/p>\n

Futurae<\/a> is a spin-off company from the Swiss Federal Institute of Technology Zurich \u2014 ETHZ in Swiss \u2014 that uses the environment itself as an authentication token in a piece of software it calls Sound-Proof.<\/p>\n

\"\"<\/a>When a service wants to do an authentication check, it queries the device attempting to log in and the user\u2019s personal device, probably a smartphone. It records 3 seconds of audio on each and compares them; if the two are substantially similar, the conclusion is that the user is in the same place as the device logging in, and therefore it must be legitimate, and the login proceeds.<\/p>\n

For example, if the same part of the same song was playing in the background for both devices, or speech with the same peaks or words, that would be okay. But if the phone heard only birdsong and the laptop heard a crowd of voices, that would be a no go. The company claims it works if your phone is in your pocket, your bag or even an adjoining room.<\/p>\n

If it\u2019s totally quiet, ultrasound can be used in place of background noise, with the login-requesting device firing off a series of chirps inaudible to the human ear but able to be picked up by the app on the phone.<\/p>\n

Naturally all this is compared strictly on the waveform level and the sounds sampled never leave the device.<\/p>\n

Sure, it isn\u2019t going to replace numerical tokens or dongles altogether, but it could be used as an additional factor or risk assessment technique.<\/p>\n

Futurae recently won 130,000 Swiss francs (which are almost exactly equivalent to U.S. dollars right now) from the local Venture Kick<\/a> competition; the company plans to use the cash to bring Sound-Proof from demo form to commercial product.<\/p>\n

Featured Image: Getty Images \/ Mike Powles<\/small><\/p>\n","protected":false},"excerpt":{"rendered":"

\"\" We’re all pretty used to two-factor authentication now, and it isn’t much of an inconvenience to have to type in a four-digit code when you log in from a new location. But some Swiss security researchers came up with a smart way to authenticate without even that tiny amount of work: ambient noise. Read More<\/a><\/p>\n

\n<\/img><\/a> <\/img><\/a> <\/img><\/a> <\/img><\/a> <\/img><\/a> <\/img><\/a>\n<\/div>\n

\"\"\/ <\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[59,66,26],"class_list":["post-338928","post","type-post","status-publish","format-standard","hentry","category-technology","tag-media","tag-techcrunch","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/338928","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=338928"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/338928\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=338928"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=338928"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=338928"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}