Harmonized authentication based on ThumbStroke dynamics on touch screen mobile phones
Harmonized authentication based on ThumbStroke dynamics on touch screen mobile phones
复制标题
DOI：
10.1016/j.dss.2016.09.007
复制
发表时间：
2016-12
期刊：
影响因子：
--
通讯作者：
Lina Zhou;Yin Kang;Dongsong Zhang;Jianwei Lai
中科院分区：
文献类型：
--
作者：
Lina Zhou;Yin Kang;Dongsong Zhang;Jianwei Lai
触摸屏移动的电话在工作和日常生活中的普遍和普遍使用已经在这些设备上产生了越来越多的隐私和敏感信息。因此，对提高移动的电话的安全性的需求不断增加。移动的用户认证技术的最新进展主要集中在入口点认证。虽然登录后的连续认证已经引起了越来越多的研究人员的关注，以前的研究都没有解决移动的用户认证在这两个阶段同时进行。此外，现有的认证系统都受到安全性和可用性之间的共同权衡。为了解决上述局限性，我们提出了基于ThumbStroke动态（HATS）的协调身份验证，支持入口点和登录后的移动的用户身份验证。HATS集成了基于密码、手势、手势和触摸动态的身份验证方法，以解决单个方法对某些安全攻击的脆弱性。此外，HATS支持与触摸屏移动的电话的基于单手拇指敲击的交互，以提高认证系统的可用性。我们通过控制实验室实验经验性地评估了HATS。结果提供了强有力的证据表明，HATS提高了安全性和可用性的移动的用户认证相比，基于动态的用户认证。
The pervasive and prevalent use of touch screen mobile phones in both work and daily life has generated more and more private and sensitive information on those devices. Accordingly, there is an ever-increasing need to improve the security of mobile phones. Recent advances in mobile user authentication technologies mainly focus on entry-point authentication. Although post-log-in continuous authentication has attracted increasing attention from researchers, none of the previous studies addressed mobile user authentication at both stages simultaneously. In addition, extant authentication systems are subject to the common trade-off between security and usability. To address the above limitations, we propose Harmonized Authentication based on ThumbStroke dynamics (HATS) that supports both entry-point and post-log-in mobile user authentication. HATS integrates password, gesture, keystroke, and touch dynamics-based authentication methods to address the vulnerabilities of individual methods to certain security attacks. Moreover, HATS supports one-handed thumb stroke-based interaction with touch screen mobile phones to improve the usability of authentication systems. We empirically evaluated HATS through controlled lab experiments. The results provide strong evidence that HATS improved both security and usability of mobile user authentication compared with keystroke dynamics based user authentication.