Securing mobile access with interactive image code and image key encryption

Abstract

In this paper, we propose a novel anti-phishing scheme, image code-based anti-phishing scheme (ICAP), for securing mobile access through an image code. The proposed scheme can protect mobile users from phishing attack and side-glance attack which are threats to mobile environment. The proposed scheme employs the image code as the interaction between a mobile device and a server. This image code can maintain the quality of user-interface and protect the user from the side-glance attack. The proposed scheme basically uses the quick response code, which is a famous image code and has the human-unreadable property. Moreover, we propose two novel algorithms based on image code to improve our basic scheme; image key encryption, and image code identity-based encryption. The proposed scheme can choose one of two algorithms for its objective, and each algorithm has its own advantage. Image key encryption is a symmetric algorithm that can improve the transmission and encryption delay and reduces the power consumption. Image code identity-based encryption is an identity-based encryption algorithm which has the advantage of identity-based encryption. Our implementation result shows that our ICIP scheme can defend the phishing attack and side-glance attack, and shows the superiority of delay, power consumption, and accuracy. Copyright (C) 2016 John Wiley & Sons, Ltd.