Keystroke Dynamics-Based Authentication Using Unique Keypad

Abstract

Authentication methods using personal identification number (PIN) and unlock patterns are widely used in smartphone user authentication. However, these authentication methods are vulnerable to shoulder-surfing attacks, and PIN authentication, in particular, is poor in terms of security because PINs are short in length with just four to six digits. A wide range of research is currently underway to examine various biometric authentication methods, for example, using the user’s face, fingerprint, or iris information. However, such authentication methods provide PIN-based authentication as a type of backup authentication to prepare for when the maximum set number of authentication failures is exceeded during the authentication process such that the security of biometric authentication equates to the security of PIN-based authentication. In order to overcome this limitation, research has been conducted on keystroke dynamics-based authentication, where users are classified by analyzing their typing patterns while they are entering their PIN. As a result, a wide range of methods for improving the ability to distinguish the normal user from abnormal ones have been proposed, using the typing patterns captured during the user’s PIN input. In this paper, we propose unique keypads that are assigned to and used by only normal users of smartphones to improve the user classification performance capabilities of existing keypads. The proposed keypads are formed by randomly generated numbers based on the Mersenne Twister algorithm. In an attempt to demonstrate the superior classification performance of the proposed unique keypad compared to existing keypads, all tests except for the keypad type were conducted under the same conditions in earlier work, including collection-related features and feature selection methods. Our experimental results show that when the filtering rates are 10%, 20%, 30%, 40%, and 50%, the corresponding equal error rates (EERs) for the proposed keypads are improved by 4.15%, 3.11%, 2.77%, 3.37% and 3.53% on average compared to the classification performance outcomes in earlier work.

Siloxene/PVDF Composite Nanofibrous Membrane for High‐Performance Triboelectric Nanogenerator and Self‐Powered Static and Dynamic Pressure Sensing Applications

“…The input timing features such as press time, hold time, total duration, and inter key timing convey unique characteristics for user identification. [30,35,57] The elapsed time in between each successive key (such as 1-4, 4-2, and 2-3) to complete a 4-digit passcode "1423" and the total duration of the keypress were also analyzed 80 number of trials for each user. Figure S9 in the Supporting Information shows the plot of the time intervals for each user which includes total duration and the elapsed time between each keypress.…”

“…[ 9 ] These days, finger touch password‐based electronic access and user authentication systems are highly admired in daily human activities for personalized securities at home/business and activity control applications, which are more user‐friendly and prosaic. [ 30,31 ] However, weak passwords are highly susceptible thus imposing security threats. The pressure sensing‐based password verification has been contrived as one of the reliable approaches.…”

Behavioral Biometrics: Past, Present and Future

“…Keystroke dynamics data can be collected by typing standard or non-standard passwords. Features extracted from the raw data that represent the typing patterns are used to create a unique profile for each user and to authorize those users later to resources [8][9][10]. It can also be used to recognize the emotions of a person [11].…”

Data-driven behavioural biometrics for continuous and adaptive user verification using Smartphone and Smartwatch

“…Continuous authentication offers a layer of protection to the service provider, which is utilised to increase usability in most circumstances [28]. As it is shown in the user verification model, the process of verifying the identity of the user is multi-step and can be time-consuming depending on the configuration of the underlying system.…”