Behavioural Biometrics for Authentication

用于身份验证的行为生物识别技术

• 批准号: 2067587
• 金额: --
• 依托单位: University of Oxford
• 依托单位国家: 英国
• 项目类别: Studentship
• 财政年份: 2018
• 资助国家: 英国
• 起止时间: 2018 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=studentship-2067587
• 关键词: Behavioural; Biometrics; Authentication

The research project aims at investigating the feasibility of using various behavioral biometrics in authentication scenarios. This field of study focuses on establishing uniquely identifying patterns in human activity such as keystroke, mouse and touchscreen dynamics as well as voice, gait and cognitive behaviour. This is typically a non-invasive method for authentication as it does not require users to learn how to operate a particular system or remember unique passcodes and phrases. Furthermore, there are no active steps required for authentication but rather it is a seamless integration with the regular operation of the system. Often authentication systems based on behavioural biometrics can be used as a multifactor safeguard in conjunction with other more traditional cybersecurity measures. Despite being a somewhat well research area with some apparently successful projects currently there are few successful commercial systems employing the technology. The goal of the research is to design, develop and test novel systems for authentication based on behavioural biometrics and close the gap between promising research and practical applications. For instance, developing a continuous authentication model based on phone usage patterns such as touchscreen gestures and gyroscope micro movements in space. Another aspect of the project focuses on identifying problems in past research in the area and some of the reasons it tends to be unsuitable for practical use. For example, the reported sample sizes in some of the studies might not be large enough to accurately represent the population using such systems. Finally, there are unique privacy challenges stemming from the use of highly accurate authentication systems based on behavioural biometrics. One way to maliciously employ this technology is to create unique fingerprints for users which can then be exploited for tracking behaviour and identity throughout multiple non-connected systems. It also might be possible to reveal personal information about users through their behaviour patterns. Gender, age and cultural groups could exert specific traits which might be detectable by the technology described above. This project falls within the ESPRC Cybersecurity research area.

该研究项目旨在调查在身份验证场景中使用各种行为生物识别技术的可行性。该研究领域的重点是建立人类活动的独特识别模式，如手势，鼠标和触摸屏动态以及语音，步态和认知行为。这通常是一种非侵入性的身份验证方法，因为它不需要用户学习如何操作特定的系统或记住唯一的密码和短语。此外，认证不需要主动步骤，而是与系统的常规操作无缝集成。通常，基于行为生物识别的认证系统可以与其他更传统的网络安全措施一起用作多因素保障。尽管这是一个相当不错的研究领域，有一些明显成功的项目，但目前很少有成功的商业系统采用该技术。该研究的目标是设计、开发和测试基于行为生物特征的新型身份验证系统，并缩小有前途的研究与实际应用之间的差距。例如，开发基于手机使用模式（如触摸屏手势和陀螺仪在空间中的微移动）的连续身份验证模型。该项目的另一个方面侧重于确定该领域过去研究中存在的问题，以及它往往不适合实际使用的一些原因。例如，某些研究报告的样本量可能不够大，无法准确代表使用此类系统的人群。最后，使用基于行为生物识别的高度准确的认证系统也带来了独特的隐私挑战。恶意利用这项技术的一种方法是为用户创建唯一的指纹，然后利用这些指纹在多个非连接系统中跟踪行为和身份。它也有可能通过用户的行为模式来揭示他们的个人信息。性别、年龄和文化群体可以表现出特定的特征，这些特征可以通过上述技术检测出来。该项目福尔斯ESPRC网络安全研究领域。