A changeable personal identification number‐based keystroke dynamics authentication system on smart phones

J Ambient Intell Human Comput

Tan

et al. 2019

Mobile devices, particularly the touch screen mobile devices, are increasingly used to store and access private and sensitive data or services, and this has led to an increased demand for more secure and usable security services, one of which is user authentication. Currently, mobile device authentication services mainly use a knowledge-based method, e.g. a PIN-based authentication method, and, in some cases, a fingerprint-based authentication method is also supported. The knowledgebased method is vulnerable to impersonation attacks, while the fingerprint-based method can be unreliable sometimes. To overcome these limitations and to make the authentication service more secure and reliable for touch screen mobile device users, we have investigated the use of touch dynamics biometrics as a mobile device authentication solution by designing, implementing and evaluating a touch dynamics authentication method. This paper describes the design, implementation, and evaluation of this method, the acquisition of raw touch dynamics data, the use of the raw data to obtain touch dynamics features, and the training of the features to build an authentication model for user identity verification. The evaluation results show that by integrating the touch dynamics authentication method into the PIN-based authentication method, the protection levels against impersonation attacks is greatly enhanced. For example, if a PIN is compromised, the success rate of an impersonation attempt is drastically reduced from 100% (if only a 4-digit PIN is used) to 9.9% (if both the PIN and the touch dynamics are used).

Section: Related Workcontrasting

confidence: 99%

“…The work reported in (Chang et al 2015) was somewhat unique. The authors proposed a method to allow subjects to change their PINs without rebuilding the authentication model.…”

Section: Related Workmentioning

confidence: 97%

Strengthen user authentication on mobile devices by using user’s touch dynamics pattern

J Ambient Intell Human Comput

Tan

et al. 2019

“…The work reported in (Chang et al, 2015) was rather unique. The author proposed a method to allow subjects to change their PINs without rebuilding the classification model.…”

Section: Performance Investigationmentioning

confidence: 96%

TDAS: a touch dynamics based multi-factor authentication solution for mobile devices

Teoh

et al. 2016

IJPCC

The use of mobile devices in handling our daily activities that involve the storage or access of sensitive data (e.g. on-line banking, paperless prescription services, etc.) is becoming very common. These mobile electronic services typically use a knowledge-based authentication method to authenticate a user (claimed identity). However, this authentication method is vulnerable to several security attacks. To counter the attacks and to make the authentication process more secure, this paper investigates the use of touch dynamics biometrics in conjunction with a PIN-based authentication method, and demonstrates its benefits in terms of strengthening the security of authentication services for mobile device. Design/methodology/approach The investigation has made use of three light-weighted matching functions and a comprehensive reference dataset collected from 150 subjects. Findings The investigative results show that, with this multi-factor authentication approach, even when the PIN is exposed, as much as 9 out of 10 impersonation attempts can be successfully identified. It has also been discovered that the accuracy performance can be increased by combining different feature data types and by increasing the input string length. Originality/value The novel contributions of this paper are twofold. Firstly, it describes how a comprehensive experiment is set up to collect touch dynamics biometrics data, and the set of collected data is being made publically available, which may facilitate further research in the problem domain. Secondly, the paper demonstrates how the dataset may be used to strengthen the protection of resources that are accessible via mobile devices.

“…The work reported in [6] was somewhat unique. The authors proposed a method to allow subjects to change their PINs without rebuilding the authentication model.…”

Section: Related Workmentioning

confidence: 98%

Sensing Your Touch: Strengthen User Authentication via Touch Dynamic Biometrics

2019 International Conference on Information and Communication Technology Convergence (ICTC)

Tan

et al. 2019

Mobile devices are increasingly used to store private and sensitive data, and this has led to an increased demand for more secure and usable authentication services. Currently, mobile device authentication services mainly use a knowledge-based method, e.g. a PIN-based authentication method, and, in some cases, a fingerprint-based authentication method is also supported. The knowledge-based method is vulnerable to impersonation attacks, while the fingerprintbased method can be unreliable sometimes. To make the authentication service more secure and reliable for mobile device users, this paper describes our efforts in investigating the benefits of integrating a touch dynamics authentication method into a PIN-based authentication method. It describes the design, implementation and evaluation of this method. Experimental results show that this approach can significantly reduce the success rate of impersonation attempts; in the case of a 4-digit PIN, the success rate is reduced from 100% (if only the PIN is used) to 9.9% (if both the PIN and the touch dynamics are used).