Rhythm Authentication Using Multi-Touch Technology:A New Method of Biometric Authentication

Abstract

A keystroke authentication method has a relatively low cost, yet it is more powerful and easier to use than other biometric authentication methods. However, traditional keystroke authentication has many weaknesses and is easily exploited by malicious actors. Malicious attacks can include shoulder surfing attacks, eavesdropping attacks and key-logger attacks. When users try to access their computer or portable device by using a keystroke authentication method, the users must push the correct buttons with the correct rhythm in order to be authenticated. If the users make several failed authentication attempts, the system will lock their account. This results in, the users often employing a simple password and rhythm for accessing their account which further increases the risk of a malicious attack.

This research proposes a new method of a biometric authentication by using multi-touch technique on a touchpad which is embedded on a laptop computer combined with the concept of traditional keystroke authentication. The users can register their rhythm using their fingers on the touchpad as a biometric authentication method. An attacker will have difficulties conducting a shoulder surfing attack this is because the user has no need to type in their password and can use one hand to cover the other hand which is used to make their rhythm for the touch authentication. Furthermore, the process is extremely fast, thus further reducing the chance of a shoulder surfing attack. An eavesdropping attack is also rendered useless since the touchpad can register touch data which is inaudible. Even though some users may not be vigilant and make tapping sounds, an eavesdropper cannot know how many or which of fingers were used on the touchpad to make one beat.

The research results show that the proposed multi-touch rhythm authentication performs better than the traditional keystroke method and provides better security, usability, and faster authentication.