Towards Continuous and Passive Authentication via Touch Biometrics: An Experimental Study on Smartphones

Hui Xu, Yangfan Zhou, Michael R. Lyu

Symposium On Usable Privacy and Security · 2014 · 158 citations · 27 references

Concepts

TL;DR

Current smartphones lack continuous authentication, creating security risks as attackers can bypass screen locks. The study aims to develop and evaluate a continuous, passive authentication system using touch biometrics, modeling multiple touch data types and investigating their distinctiveness and permanence. The authors implemented a touch‑based authentication model that requires no additional hardware, and evaluated it in a one‑month experiment with over 30 users. The experiment results confirm that touch biometrics can serve as a promising method for continuous and passive authentication.

Abstract

Current smartphones generally cannot continuously authenticate users during runtime. This poses severe security and privacy threats: A malicious user can manipulate the phone if bypassing the screen lock. To solve this problem, our work adopts a continuous and passive authentication mechanism based on a user’s touch operations on the touchscreen. Such a mechanism is suitable for smartphones, as it requires no extra hardware or intrusive user interface. We study how to model multiple types of touch data and perform continuous authentication accordingly. As a first attempt, we also investigate the fundamentals of touch operations as biometrics by justifying their distinctiveness and permanence. A onemonth experiment is conducted involving over 30 users. Our experiment results verify that touch biometrics can serve as a promising method for continuous and passive authentication.

References

27