Abstract:Traditional one-time authentication mechanisms cannot authenticate smartphone users' identities throughout the session – the concept of using behavioral-based biometrics captured by the built-in motion sensors and touch data is a candidate to solve this issue. Many studies proposed solutions for behavioral-based continuous authentication; however, they are still far from practicality and generality for real-world usage. To date, no commercially deployed implicit user authentication scheme exists because most of those solutions were designed to improve detection accuracy without addressing real-world deployment requirements. To bridge this gap, we tackle the limitations of existing schemes and reach toward developing a more practical implicit authentication scheme, dubbed MotionID, based on a one-class detector using behavioral data from motion sensors when users touch their smartphones. Compared with previous studies, our work addresses the following challenges: 1 Global mobile average to dynamically adjust the sampling rate for sensors on any device and mitigate the impact of using sensors' fixed sampling rate; 2 Over-all-apps to authenticate a user across all the mobile applications, not only on-specific application; 3 Single-device-evaluation to measure the performance with multiple users' (i.e., genuine users and imposters) data collected from the same device; 4 Rapid authentication to quickly identify users' identities using a few samples collected within short durations of touching (1–5 s) the device; 5 Unconditional settings to collect sensor data from real-world smartphone usage rather than a laboratory study. To show the feasibility of MotionID for those challenges, we evaluated the performance of MotionID with ten users' motion sensor data on five different smartphones under various settings. Our results show the impracticality of using a fixed sampling rate across devices that most previous studies have adopted. MotionID is able to authenticate users with an F1-score up to 98.5% for some devices under practical requirements and an F1-score up to roughly 90% when considering the drift concept and rapid authentication settings. Finally, we investigate time efficiency, power consumption, and memory usage considerations to examine the practicality of MotionID.

Motion-senor Behavior Analysis for Continuous Authentication on Smartphones

Performance Analysis of Multi-Motion Sensor Behavior for Active Smartphone Authentication

Touch-interaction Behavior for Continuous User Authentication on Smartphones

Modeling interactive sensor-behavior with smartphones for implicit and active user authentication

Towards Continuous and Passive Authentication via Touch Biometrics: An Experimental Study on Smartphones.

Performance Analysis of Motion-Sensor Behavior for User Authentication on Smartphones

MMAuth: A Continuous Authentication Framework on Smartphones Using Multiple Modalities

Multi-source Interactive Behavior Analysis for Continuous User Authentication on Smartphones.

Performance Evaluation of Implicit Smartphones Authentication Via Sensor-Behavior Analysis.

Who is Using the Phone? Representation-Learning-Based Continuous Authentication on Smartphones

CT-Auth: Capacitive Touchscreen-Based Continuous Authentication on Smartphones

Performance Analysis of Touch-Interaction Behavior for Active Smartphone Authentication.

BehaveSense: Continuous Authentication for Security-Sensitive Mobile Apps Using Behavioral Biometrics

An HMM-based Multi-sensor Approach for Continuous Mobile Authentication

Unobservable Re-authentication for Smartphones.

Multi-sensor authentication to improve smartphone security

MotionID: Towards practical behavioral biometrics-based implicit user authentication on smartphones

Touchalytics: On the Applicability of Touchscreen Input as a Behavioral Biometric for Continuous Authentication

Deep Learning Approaches for Continuous Authentication Based on Activity Patterns Using Mobile Sensing

SilentSense

Continuous Mobile Authentication Using Touchscreen Gestures