Recent studies have shown how motion-based biometrics can be used as a form of user authentication and identification without requiring any human cooperation. This category of behavioural biometrics deals with the features we learn in our life as a result of our interaction with the environment and nature. This modality is related to change in human behaviour over time. The developments in these methods aim to amplify continuous authentication such as biometrics to protect their privacy on user devices. Various Continuous Authentication (CA) systems have been proposed in the literature. They represent a new generation of security mechanisms that continuously monitor user behaviour and use this as the basis to re-authenticate them periodically throughout a login session. However, these methods usually constitute a single classification model which is used to identify or verify a user. This work proposes an algorithm to blend behavioural biometrics with multi-factor authentication (MFA) by introducing a two-step user verification algorithm that verifies the user's identity using motion-based biometrics and complements the multi-factor authentication, thus making it more secure and flexible. This two-step user verification algorithm is also immune to adversarial attacks, based on our experimental results which show how the rate of misclassification drops while using this model with adversarial data.
翻译:最近的研究显示,以运动为基础的生物鉴别技术如何在不需要任何人类合作的情况下用作一种用户认证和识别形式; 此类行为生物鉴别方法涉及我们通过与环境和自然的相互作用而在生活中学习的特征; 这一模式与人类长期行为的变化有关; 这些方法的发展旨在扩大持续认证,如生物鉴别技术,以保护其在用户装置上的隐私; 文献中提出了各种持续持续认证系统; 它们是新一代安全机制,不断监测用户行为,并以此为基础在整个登录过程中定期重新校正它们; 然而,这些方法通常构成一种单一的分类模式,用来识别或核查用户; 这项工作提出一种算法,将行为生物鉴别技术与多要素认证相结合,方法是采用两步使用用户核查算法,用基于运动的生物鉴别技术来验证用户身份,补充多要素认证,从而使其更加安全和灵活。 这种两步用户核查算法也能够避免对抗性攻击, 其基础是我们的实验结果, 表明如何使用这种数据对抗性分析率,同时使用这种模型来证明误判数据。