Keystroke Dynamics on a Device with Touch Screen
Uno Andre Johansen · NORA - Norwegian Open Research Archives · 2012
Keystroke Dynamics has been heavily researched over many years. Despite the large activity there are few real world implementations using Keystroke Dynamics as an authentication mechanism. The change in how internet banks are accessed, from using personal computers to using smart phones, in combination with the increasing burden for people to remember many passwords, has increased the need for stronger or enhanced authentication mechanisms. We look at the suitability of using keystroke dynamics as an additional feature to enhance security of authentication, when using a smart phone having a touch screen as input method. Both performance issues and security issues are investigated. We are going in depth on keystroke data analysis, where we look at why some methods perform better than others. The change in security, as a result of change in the physical/environmental factors are also addressed. The results show that keystroke dynamics on a smart phone are more resilient against certain attacks than keystroke dynamics on a personal computer. We proved this by building a device capable of imitate someone’s typing characteristics, and explained why the same task is difficult against keystroke dynamics on a smart phone. Further, we got good results from using new features available from a touch screen, and we also improved the performance of some detectors using a technique that adapts the standard deviation to skewed distributions.