Publication Details

Download

Daniel Buschek, Alexander De Luca, Florian Alt
Improving Accuracy, Applicability and Usability of Keystroke Biometrics on Mobile Touchscreen Devices
In CHI '15: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems. Seoul, South Korea, April 18 - 23, 2015. ACM, New York, NY, USA.
doi: 10.1145/2702123.2702252 (bib)

Authentication methods can be improved by considering implicit, individual behavioural cues. In particular, verifying users based on typing behaviour has been widely studied with physical keyboards. On mobile touchscreens, the same concepts have been applied with little adaptations so far. This paper presents the first reported study on mobile keystroke biometrics which compares touch-specific features between three different hand postures and evaluation schemes. Based on 20.160 password entries from a study with 28 participants over two weeks, we show that including spatial touch features reduces implicit authentication equal error rates (EER) by 26.4 - 36.8% relative to the previously used temporal features. We also show that authentication works better for some hand postures than others. To improve applicability and usability, we further quantify the influence of common evaluation assumptions: known attacker data, training and testing on data from a single typing session, and fixed hand postures. We show that these practices can lead to overly optimistic evaluations. In consequence, we describe evaluation recommendations, a probabilistic framework to handle unknown hand postures, and ideas for further improvements.