키스트로크 다이나믹스가 적용된 볼륨버튼 기반의 패스워드 인증 기법
Password Authentication Based On Volume Button Applied Keystroke Dynamics
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
본 논문에서는 행동기반인증의 일종인 키스트로크 다이나믹스가 적용된 볼륨버튼 기반의 사용자 인증기법을 제안한다. 키스트로크 다이나믹스는 다수의 사용자가 동일한 패스워드를 입력하더라도 각 개인마다 다른 리듬을 가진다는 점을 특징으로 한다. 실험은 20명의 학생들을 대상으로 985개의 데이터 샘플을 수집하여 진행하였으며, Euclidean Distance를 사용하여 데이터를 분류하였다. 볼륨 버튼 입력 순서와 대응되는 키 입력 시간 간격간의 평균값을 추출하여 임계값을 적용하여 반복 실험한 결과, 4.25%의 가장 낮은 EER의 결과를 얻었다. 키보드를 기반으로 실험을 진행한 기존의 키스트로크 다이나믹스 연구들의 EER과 비교했을 경우 비교적 좋은 성능 측정 결과를 보이며, 볼륨 버튼 기반 인증의 스마트폰 사용자 인증으로 사용 적합함을 보였다. 또한, 제안하는 기법은 별도로 하드웨어 장치를 필요로 하지 않고 모바일 기기에 기본으로 장착된 볼륨버튼만으로 쉽게 패스워드를 인증 할 수 있으며, 누군가 패스워드를 엿보더라도 인증된 사용자의 정확한 리듬까지 따라 하기 어렵다는 점을 이용하여 어깨너머 공격에 대응하였다.
Abstract
In this paper, we propose a user authentication method based on volume button applied keystroke dynamics which is a kind of behavior based authentication. Keystroke Dynamics features different rhythms for each individual, even though multiple users enter the same password. The experiment was conducted by collecting 985 data samples from 20 students and classifying the data using Euclidean Distance. We obtained the lowest EER of 4.25% by extracting the average value between the volume button input sequence and the corresponding key input time interval and applying the threshold value repeatedly. Compared with the EER of the existing keystroke dynamics researches based on the keyboard, it showed relatively good performance measurement results and showed that it is suitable to use as a smartphone user authentication for the volume button based authentication. In addition, the method we proposed does not require a hardware device, but can easily authenticate the password with volume button installed in the mobile device. Also, defends against shoulder surfing attack by taking advantage of the fact that it is difficult for someone to follow the exact rhythm of an authorized user, even if they steal a password.
참고문헌 (20)
- 강필성, "자유로운 문자열의 키스트로크 다이나믹스를 활용한 사용자 인증 연구", 산업공학(IE interfaces), 25(3), pp.290~299 (2012), 대한산업공학회
- R. Spillane, "Keyboard Apparatus for Personal Identification", IBM Technical Disclosure Bulletin, 17(3346) (1975)
- A. H. Lashkari, "Shoulder Surfing attack in graphical password authentication", International Journal of Computer Science and Information Security, 6(2) (2009)
- T. Takada, "FakePointer: An Authentication Scheme for Improving Security against Peeping Attacks Using Video Cameras", Proceeding of International Conference on Mobile Ubiquitous Computing, Systems, Services and Technologies (2008)
- "Apple iPhone 5S: 7 New Features of the Seventh Generation iPhone" (2013)[URL]
- Javier Galbally, "Biometric Antispoofing Methods: A Survey in Face Recognition", IEEE Access, 2, pp.1530~1552 (2014)
- Heather Crawford, "Keystroke Dynamics: Characteristics and Opportunities", Proceeding of IEEE annual International Conference on Privacy, Security and Trust (2010)
- G. Peng, "Continuous Authentication With Touch Behavioral Biometrics and Voice on Wearable Glasses", IEEE Transactions on Human-Machine Systems, 47(3), pp.404~416 (2017)
- G. Xiao, "Secure behavioral biometric authentication with leap motion", Proceeding of International Symposium on Digital Forensic and Security (ISDFS) (2016)
- N. Zheng, "You are how you touch: User verification on smartphones via tapping behaviors", Proceeding of 22nd International Conference on Network Protocols (2014)
- G. Pahuja, "Biometric authentication & identification through behavioral biometrics:A survey", Proceeding of International Conference on Cognitive Computing and Information Processing (CCIP) (2015)
- A. Buchoux, "Deployment of keystroke analysis on a smartphone", Proceeding of 6th Australian Information Security Management Conference, pp.1~7 (2008)
- M. J. Coakley, "Keystroke Biometric Studies with Short Numeric Input on Smartphones", Proceeding of 8th International Conference on Biometrics Theory, Applications and Systems (BTAS) (2016)
- M. R. Rajput, "IRIS biometrics survey 2010 2015", Proceeding of International Conference on Recent Trends in Electronics Information & Communication Technology (RTEICT), pp.2028~2033 (2016)
- P. S. Teh, "A survey on touch dynamics authentication on mobile devices", Computers and Security, 59, pp.210~235 (2016)
- W. Meng, "Surveying the Development of Biometric User Authentication on Mobile Phones", International Journal of IEEE Communications Survey & Tutorials, 17(3), pp.1268~1293 (2015)
- H. M. Thang, "Gait identification using accelerometer on mobile phone", Proceeding of International Conference on Control, Automation and Information Sciences (ICCAIS), pp.344~348 (2012)
- M. Frank, "Touchalytics: On the Applicability of Touchscreen Input as a Behavioral Biometric for Continuous Authentication", IEEE Transactions on Information Forensics and Security, 8, pp.136~148 (2013)