EyeDecrypt — Private Interactions in Plain Sight

Abstract

We introduce EyeDecrypt, a novel technology for privacy-preserving human-computer interaction. EyeDecrypt allows only authorized users to decipher data shown on a display, such as an electronic screen or plain printed material; in the former case, the authorized user can then interact with the system (e.g., by pressing buttons on the screen), without revealing the details of the interaction to others who may be watching or to the system itself.The user views the decrypted data on a closely-held personal device, such as a pair of smart glasses with a camera and heads-up display, or a smartphone. The data is displayed as an image overlay on the personal device, which we assume cannot be viewed by the adversary. The overlay is a form of augmented reality that not only allows the user to view the protected data, but also to securely enter input into the system by randomizing the input interface.EyeDecrypt consists of three main components: a visualizable encryption scheme; a dataglyphbased visual encoding scheme for the ciphertexts generated by the encryption scheme; and a randomized input and augmented reality scheme that protects user inputs without harming usability. We describe all aspects of EyeDecrypt, from security definitions, constructions and analysis, to implementation details of a prototype developed on a smartphone.

Verticals in 5G MEC-Use Cases and Security Challenges

“…Of course, the least privilege rule is always worth implementing in the context of proper rendering. Finally, to protect display, content hiding methods (e.g., [265]) and visual cryptography (e.g., [266]) can be deployed.…”

Involving Humans in the Cryptographic Loop: Introduction and Threat Analysis of EEVEHAC

“…The second part of EEVEHAC is an end-to-end visualizably encrypted channel. For this purpose, EEVE-HAC implements EyeDecrypt (Forte et al, 2014). The original model consists of a user's personal device with the app installed, a server and an adversary.…”

“…Despite the promising developments on individual components that try to make cryptography more human friendly, there has not been a complete system that combines all the needed aspects for an encrypted communications channel. In this paper we introduce and provide a threat analysis of EEVEHAC (Endto-End Visualizable Encrypted and Human Authen-ticated Channel), a system that combines Human Authenticated Key Exchange (HAKE) (Boldyreva et al, 2017) and a visualizable encryption scheme (Forte et al, 2014). Even though these concepts have been studied in former papers, no papers discussing them as an integrated system have been published.…”

A High‐Quality Authenticatable Visual Secret Sharing Scheme Using SGX

“…Thus, the decryption process is computation-free. This feature makes VCS particularly suitable for human-computer interaction scenarios with limited computing or networks, such as ATM [6,7] and electronic voting [8].…”