Keystroke Dynamic Authentication in Mobile Cloud Computing

Abstract

One of the important challenges in Mobile Cloud Computing (MCC) is related to the authentication of users. There is increasing demand for suitable authentication method for accessing to the shared information via the Internet through Cloud Service Provider (CSP). Personal identification number is the most common mechanism for authentication in mobile devices; however it is not secure way for authenticating users. This work presents a method of authentication which able to identify users based on Keystroke Dynamic Authentication (KDA). Furthermore, keystrokes duration is considered as an attribute for measuring keystrokes of mobile's users. This paper proposed strong method of authentication in the password authentication scheme by combining it with keystroke authentication, which is a type of behavioral biometric mechanism. Experimental results show, the proposed method can work 97.014% correctly, due to the keystroke duration of each user depends on their behavioral characteristic and it can be measured up to milliseconds. On the other hand, if unauthorized person knows the username and password of legal user can not gain access rights because of difference between their keystroke duration. Therefore, it is hard for an attacker to pretend as an owner, and this method enhances the security of authentication in MCC

Intrusion detection techniques for mobile cloud computing in heterogeneous 5G

“…An important mechanism category is biometric authentication that examines users by identifying individual features , such as physical characteristics and behaviors . This approach is a complementary support for password‐based verifications, which can provide a secure end users access.…”

Keystroke Dynamics Authentication in Cloud Computing

“…• Keystroke Static authentication (KSA): The user is asked to type several times a fixed text, like a password in order to build his profile or template. During the identification stage, the user is supposed to provide the same string captured during his enrollment to verify if this way of typing matches the model stored or not (Babaeizadeh et al, 2014;Bours & Mondal, 2015) • Keystroke Dynamic authentication (KDA): The user is required to provide a free text to create his templates. It isn't important what he is typing, but how he is typing it, so the user didn't need to remember his password every time when access to the system (Babaeizadeh et al, 2014;Bours & Mondal, 2015) Multimodal Biometric Systems…”