Keystroke Dynamics-Based Authentication Using Unique Keypad

Authentication methods using personal identification number (PIN) and unlock patterns are widely used in smartphone user authentication. However, these authentication methods are vulnerable to shoulder-surfing attacks, and PIN authentication, in particular, is poor in terms of security because PINs...

Full description

Bibliographic Details
Main Authors: Maro Choi, Shincheol Lee, Minjae Jo, Ji Sun Shin
Format: Article
Language:English
Published: MDPI AG 2021-03-01
Series:Sensors
Subjects:
Online Access:https://www.mdpi.com/1424-8220/21/6/2242
id doaj-48a36f054b6d4e97b33dd68301ca4d7f
record_format Article
spelling doaj-48a36f054b6d4e97b33dd68301ca4d7f2021-03-24T00:03:44ZengMDPI AGSensors1424-82202021-03-01212242224210.3390/s21062242Keystroke Dynamics-Based Authentication Using Unique KeypadMaro Choi0Shincheol Lee1Minjae Jo2Ji Sun Shin3Department of Computer and Information Security, Sejong University, Seoul 05006, KoreaDepartment of Computer and Information Security, and Convergence Engineering for Intelligent Drone, Sejong University, Seoul 05006, KoreaDepartment of Computer and Information Security, Sejong University, Seoul 05006, KoreaDepartment of Computer and Information Security, Sejong University, Seoul 05006, KoreaAuthentication methods using personal identification number (PIN) and unlock patterns are widely used in smartphone user authentication. However, these authentication methods are vulnerable to shoulder-surfing attacks, and PIN authentication, in particular, is poor in terms of security because PINs are short in length with just four to six digits. A wide range of research is currently underway to examine various biometric authentication methods, for example, using the user’s face, fingerprint, or iris information. However, such authentication methods provide PIN-based authentication as a type of backup authentication to prepare for when the maximum set number of authentication failures is exceeded during the authentication process such that the security of biometric authentication equates to the security of PIN-based authentication. In order to overcome this limitation, research has been conducted on keystroke dynamics-based authentication, where users are classified by analyzing their typing patterns while they are entering their PIN. As a result, a wide range of methods for improving the ability to distinguish the normal user from abnormal ones have been proposed, using the typing patterns captured during the user’s PIN input. In this paper, we propose unique keypads that are assigned to and used by only normal users of smartphones to improve the user classification performance capabilities of existing keypads. The proposed keypads are formed by randomly generated numbers based on the Mersenne Twister algorithm. In an attempt to demonstrate the superior classification performance of the proposed unique keypad compared to existing keypads, all tests except for the keypad type were conducted under the same conditions in earlier work, including collection-related features and feature selection methods. Our experimental results show that when the filtering rates are 10%, 20%, 30%, 40%, and 50%, the corresponding equal error rates (EERs) for the proposed keypads are improved by 4.15%, 3.11%, 2.77%, 3.37% and 3.53% on average compared to the classification performance outcomes in earlier work.https://www.mdpi.com/1424-8220/21/6/2242authenticationkeystroke dynamicsmachine learningsmartphoneunique keypad
collection DOAJ
language English
format Article
sources DOAJ
author Maro Choi
Shincheol Lee
Minjae Jo
Ji Sun Shin
spellingShingle Maro Choi
Shincheol Lee
Minjae Jo
Ji Sun Shin
Keystroke Dynamics-Based Authentication Using Unique Keypad
Sensors
authentication
keystroke dynamics
machine learning
smartphone
unique keypad
author_facet Maro Choi
Shincheol Lee
Minjae Jo
Ji Sun Shin
author_sort Maro Choi
title Keystroke Dynamics-Based Authentication Using Unique Keypad
title_short Keystroke Dynamics-Based Authentication Using Unique Keypad
title_full Keystroke Dynamics-Based Authentication Using Unique Keypad
title_fullStr Keystroke Dynamics-Based Authentication Using Unique Keypad
title_full_unstemmed Keystroke Dynamics-Based Authentication Using Unique Keypad
title_sort keystroke dynamics-based authentication using unique keypad
publisher MDPI AG
series Sensors
issn 1424-8220
publishDate 2021-03-01
description Authentication methods using personal identification number (PIN) and unlock patterns are widely used in smartphone user authentication. However, these authentication methods are vulnerable to shoulder-surfing attacks, and PIN authentication, in particular, is poor in terms of security because PINs are short in length with just four to six digits. A wide range of research is currently underway to examine various biometric authentication methods, for example, using the user’s face, fingerprint, or iris information. However, such authentication methods provide PIN-based authentication as a type of backup authentication to prepare for when the maximum set number of authentication failures is exceeded during the authentication process such that the security of biometric authentication equates to the security of PIN-based authentication. In order to overcome this limitation, research has been conducted on keystroke dynamics-based authentication, where users are classified by analyzing their typing patterns while they are entering their PIN. As a result, a wide range of methods for improving the ability to distinguish the normal user from abnormal ones have been proposed, using the typing patterns captured during the user’s PIN input. In this paper, we propose unique keypads that are assigned to and used by only normal users of smartphones to improve the user classification performance capabilities of existing keypads. The proposed keypads are formed by randomly generated numbers based on the Mersenne Twister algorithm. In an attempt to demonstrate the superior classification performance of the proposed unique keypad compared to existing keypads, all tests except for the keypad type were conducted under the same conditions in earlier work, including collection-related features and feature selection methods. Our experimental results show that when the filtering rates are 10%, 20%, 30%, 40%, and 50%, the corresponding equal error rates (EERs) for the proposed keypads are improved by 4.15%, 3.11%, 2.77%, 3.37% and 3.53% on average compared to the classification performance outcomes in earlier work.
topic authentication
keystroke dynamics
machine learning
smartphone
unique keypad
url https://www.mdpi.com/1424-8220/21/6/2242
work_keys_str_mv AT marochoi keystrokedynamicsbasedauthenticationusinguniquekeypad
AT shincheollee keystrokedynamicsbasedauthenticationusinguniquekeypad
AT minjaejo keystrokedynamicsbasedauthenticationusinguniquekeypad
AT jisunshin keystrokedynamicsbasedauthenticationusinguniquekeypad
_version_ 1724205472297254912