SecureLock

SecureLock is a lockscreen for Android which improves the security of your cell phone. Watch this video tutorial for usage information: http://www.youtube.com/watch?v=qHzSe7IbsuU

Why is authentication on smartphones essential? An attacker can
- send E-mails and sms on your behalf
- read private data like the calendar, E-mails, sms, recent calls, look at taken pictures
- make calls or send sms with costs
- install malicious apps

SecureLock supports 4 authentication methods:
- GesturePuzzle
- NFC-Tag (if your device supports NFC)
- PIN
- Password

GesturePuzzle uses graphical passwords. Each password consists of a set of pictures and a gesture. For authentication you have to look in a specified area for the pictures of your passwords. When you have found the pictures of one of your passwords, draw the gesture of this password for authenticating. Caution: Don’t use a single vertical stroke as gesture – Android is not able to detect this as gesture (because it thinks you want to scroll)!

The NFC-Tag authentication is only available when you have a device with NFC hardware and NFC is on. Register an NFC-Tag which you want to use for authentication.

Please test each method before using it in real authentication and set a secure password as PUK which can be used when you have forgotten your authentication credentials!

How to use SecureLock:
- Install App
- Set an unsecure Android screen lock (e.g. Slide or None)
- Configure and activate at least 1 authentication method
- Press the home-key
- In the appearing dialog set SecureLock as default home-screen
- After disabling the screen lock, you have to authenticate

Features:
- Finder-Information
- Max. number of authentication attempts
- Lock time (time to wait when number of tries exceeded)
- Send SMS when number of tries exceeded
- Valid time (once authenticated, you don’t have to reauthenticate within this time)
- Emergency contacts (contacts which can be called without authentication e.g. emergency numbers or your wife)
- Attacker picture (take picture of attacker who wants to authenticate – only if front-camera is available)
- PUK (specify a PUK which can be used when you have forgotten your authentication credentials)

Permissions:
- android.permission.WRITE_EXTERNAL_STORAGE: Attacker pictures are stored on the external storage.
- android.permission.NFC: For NFC-Tag authentication method.
- android.permission.CAMERA: For taking attacker pictures.
- android.permission.CALL_PHONE: For emergency contacts.
- android.permission.CALL_PRIVILEGED: To call „real“ emergency numbers too (e.g. 911 or 112)
- android.permission.SEND_SMS: For sending an SMS when number of authentication tries exceeds.
- android.permission.RECEIVE_BOOT_COMPLETED: To ensure that you have to authenticate after rebooting your device.
- android.permission.READ_PHONE_STATE: Allows you to answer the phone without authentication.
- android.permission.GET_TASKS: To ensure that no other Apps can be in foreground without authentication.