Two factor authentication using EEG augmented passwords

TL;DR

This paper explores using affordable EEG devices for user authentication by combining passwords with mental states, creating a two-phase system that enhances security and practicality.

Contribution

It introduces a novel two-phase authentication method that integrates mental states with passwords using inexpensive EEG devices, addressing prior limitations.

Findings

Successful verification with low-cost EEG devices

Enhanced security through mental state integration

Feasibility of practical EEG-based authentication

Abstract

The current research with EEG devices in the user authentication context has some deficiencies that address expensive equipment, the requirement of laboratory conditions and applicability. In this paper we address this issue by using widely available and inexpensive EEG device to verify its capability for authentication. As a part of this research, we developed two phase authentication that enables users to enhance their password with the mental state by breaking the password into smaller, marry them with mental state, and generate one time pad for a secure session.