Abstract:Traditional one-time authentication mechanisms cannot authenticate smartphone users' identities throughout the session – the concept of using behavioral-based biometrics captured by the built-in motion sensors and touch data is a candidate to solve this issue. Many studies proposed solutions for behavioral-based continuous authentication; however, they are still far from practicality and generality for real-world usage. To date, no commercially deployed implicit user authentication scheme exists because most of those solutions were designed to improve detection accuracy without addressing real-world deployment requirements. To bridge this gap, we tackle the limitations of existing schemes and reach toward developing a more practical implicit authentication scheme, dubbed MotionID, based on a one-class detector using behavioral data from motion sensors when users touch their smartphones. Compared with previous studies, our work addresses the following challenges: 1 Global mobile average to dynamically adjust the sampling rate for sensors on any device and mitigate the impact of using sensors' fixed sampling rate; 2 Over-all-apps to authenticate a user across all the mobile applications, not only on-specific application; 3 Single-device-evaluation to measure the performance with multiple users' (i.e., genuine users and imposters) data collected from the same device; 4 Rapid authentication to quickly identify users' identities using a few samples collected within short durations of touching (1–5 s) the device; 5 Unconditional settings to collect sensor data from real-world smartphone usage rather than a laboratory study. To show the feasibility of MotionID for those challenges, we evaluated the performance of MotionID with ten users' motion sensor data on five different smartphones under various settings. Our results show the impracticality of using a fixed sampling rate across devices that most previous studies have adopted. MotionID is able to authenticate users with an F1-score up to 98.5% for some devices under practical requirements and an F1-score up to roughly 90% when considering the drift concept and rapid authentication settings. Finally, we investigate time efficiency, power consumption, and memory usage considerations to examine the practicality of MotionID.

Sensor Data Normalization Among Heterogeneous Smartphones for Implicit Authentication

ToAuth: Towards Automatic Near Field Authentication for Smartphones

Context-Aware Implicit Authentication of Smartphone Users Based on Multi-Sensor Behavior

Performance Evaluation of Implicit Smartphones Authentication Via Sensor-Behavior Analysis.

Implicit Authentication with Sensor Normalization and Multi-Modal Domain Adaption Based on Mobile Crowd Sensing.

Modeling interactive sensor-behavior with smartphones for implicit and active user authentication

Sensor-based implicit authentication through learning user physiological and behavioral characteristics

Performance Analysis of Multi-Motion Sensor Behavior for Active Smartphone Authentication

Implicit Smartphone User Authentication with Sensors and Contextual Machine Learning

Multi-sensor authentication to improve smartphone security

User Authentication Using Motion Sensor Data from Both Wearables and Smartphones.

A Novel Smartphone Identity Authentication Mechanism.

PresSafe: Barometer-Based On-Screen Pressure-Assisted Implicit Authentication for Smartphones

Jensen-Shannon Divergence Based Secure Authentication Method on Smart Phones

Sensor-Based Continuous Authentication Using Cost-Effective Kernel Ridge Regression

Implicit Identity Authentication Mechanism Based on Smartphone Touch Dynamics

MotionID: Towards practical behavioral biometrics-based implicit user authentication on smartphones

Using Feature Fusion Strategies in Continuous Authentication on Smartphones

Security, Privacy, and Anonymity in Computation, Communication, and Storage

An Authentication Method Based on User Specific Behavior

Enhancing smartphone security with human centric bimodal fallback authentication leveraging sensors