사용자의 행위와 습관에 기반한 안전한 스마트폰 인증 방법
A Secure Authentication Method for Smart Phone based on User’s Behaviour and Habits
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
This paper proposes a smart phone authentication method based on user's behavior and habit that is an authentication method against shoulder surfing attack and brute force attack. As smart phones evolve not only storage of personal data but also a key means of financial services, the importance of personal information security in smart phones is growing. When user authentication of smart phone, pattern authentication method is simple to use and memorize, but it is prone to leak and vulnerable to attack. Using the features of the smart phone pattern method of the user, the pressure applied when touching the touch pad with the finger, the size of the area touching the finger, and the time of completing the pattern are used as feature vectors and applied to user authentication security. First, a smart phone user models and stores three parameter values as prototypes for each section of the pattern. Then, when a new authentication request is made, the feature vector of the input pattern is obtained and compared with the stored model to decide whether to approve the access to the smart phone. The experimental results confirm that the proposed technique shows a robust authentication security using subjective data of smart phone user based on habits and behaviors.
Abstract
This paper proposes a smart phone authentication method based on user's behavior and habit that is an authentication method against shoulder surfing attack and brute force attack. As smart phones evolve not only storage of personal data but also a key means of financial services, the importance of personal information security in smart phones is growing. When user authentication of smart phone, pattern authentication method is simple to use and memorize, but it is prone to leak and vulnerable to attack. Using the features of the smart phone pattern method of the user, the pressure applied when touching the touch pad with the finger, the size of the area touching the finger, and the time of completing the pattern are used as feature vectors and applied to user authentication security. First, a smart phone user models and stores three parameter values as prototypes for each section of the pattern. Then, when a new authentication request is made, the feature vector of the input pattern is obtained and compared with the stored model to decide whether to approve the access to the smart phone. The experimental results confirm that the proposed technique shows a robust authentication security using subjective data of smart phone user based on habits and behaviors.
참고문헌 (13)
- N. Clarke, "Acceptance of Subscriber Authentication Methods For Mobile Telephony Device", Computer & Security, 21(3), pp.220~228 (2002)
- H. Zhang, "Model construction and authentication algorithm of virtual keystroke dynamics for smart phone users", 2016 IEEE International Conference on Systems, Man, and Cybernetics, pp.000171~000175 (2016)
- M. Trojahn, "Toward mobile authentiction with keystroke dynamics on mobile phones and tablets", 27th International Conference on Advanced Information Networking and Applications Workshops, pp.697~702 (2013)
- K. D. Rajat, "User Authentication Based on Keystroke Dynamics", IETE Journal of Research, 60(3), pp.229~239 (2014)
- S. Hwang, "Mobile User Authentication using Keystroke Dynamics Analysis", Conference Korea Operations Research And Management Society, pp.652~655 (2006)
- T. Shari, "Biometric authentication on a mobile device: a study of user effort, error and task disruption", Proceedings of the 28th Annual Computer Security Applications Conference, pp.159~168 (2012)
- J. S. A-Falconi, "ECG Authentication for Mobile Devices", IEEE Transactions on Instrumentation and Measurement, 65(Issue. 3), pp.591~600 (2016)
- Y. Zheng, "A Usable Authentication System Based on Personal Voice Challenge", Proceeding of 2016 International Conference on Advanced Cloud and Big Data, pp.194~199 (2016)
- 고태형, "한국어 획 기반 그래피컬 패스워드 기법에 관한 연구", 정보보호학회논문지, 22(2), pp.189~200 (2012), 한국정보보호학회
- W. Hu, "The security analysis of graphical passwords", Proceedings of 2010 International Conference on Communications and Intelligence Information Security, pp.200~203 (2010)
- H. Gao, "A new graphical password scheme resistanct to shoulder-surfing", Proceedings of International Conference on Cyberworlds, pp.194~199 (2010)
- L. Ballard, "Evaluating the Security of Handwriting Biometrics", Proceedings of 10th International Workshop on Frontiers in Handwriting Recognition, pp.461~466 (2006)
- A. Buriro, "Hold and Sign: A Novel Behavioral Biometrics for Smartphone User Authentication", Proceedings of 2016 IEEE Security and Privacy Workshops, pp.276~285 (2016)