A graphical-based password keystroke dynamic authentication system for touch screen handheld mobile devices

详细信息	查看全文 | 推荐本文 |

• 作者：Ting-Yi Chang^a ; ^{tychang@cc.ncue.edu.tw}  ; [Author Vitae] ; Cheng-Jung Tsai^b ; ^{cjtsai@cc.ncue.edu.tw}  ; [Author Vitae] ; Jyun-Hao Lin^a  ; [Author Vitae]
• 关键词：User authentication ; Keystroke dynamics authentication ; Keystroke feature ; Graphical-based password authentication
• 刊名：Journal of Systems and Software
• 出版年：2012
• 期刊代码：80_01641212
• 类别：cp
• 出版时间：May, 2012
• 卷：85
• 期：5
• 页码：1157-1165
• 文件大小：744 K

摘要

Since touch screen handheld mobile devices have become widely used, people are able to access various data and information anywhere and anytime. Most user authentication methods for these mobile devices use PIN-based (Personal Identification Number) authentication, since they do not employ a standard QWERTY keyboard for conveniently entering text-based passwords. However, PINs provide a small password space size, which is vulnerable to attacks. Many studies have employed the KDA (Keystroke Dynamic-based Authentication) system, which is based on keystroke time features to enhance the security of PIN-based authentication. Unfortunately, unlike the text-based password KDA systems in QWERTY keyboards, different keypad sizes or layouts of mobile devices affect the PIN-based KDA system utility. This paper proposes a new graphical-based password KDA system for touch screen handheld mobile devices. The graphical password enlarges the password space size and promotes the KDA utility in touch screen handheld mobile devices. In addition, this paper explores a pressure feature, which is easy to use in touch screen handheld mobile devices, and applies it in the proposed system. The experiment results show: (1) EER is 12.2%in the graphical-based password KDA proposed system. Compared with related schemes in mobile devices, this effectively promotes KDA system utility; (2) EER is reduced to 6.9%when the pressure feature is used in the proposed system. The accuracy of authenticating keystroke time and pressure features is not affected by inconsistent keypads since the graphical passwords are entered via an identical size (50 mm 脳 60 mm) human-computer interface for satisfying the lowest touch screen size and a GUI of this size is displayed on all mobile devices.