Acoustic Keystroke Authentication Using AI Fingerprint Scoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password-based authentication systems are vulnerable to acoustic side channel hacking techniques, allowing malicious actors to retrieve passwords and gain unauthorized access to sensitive data.
Innovation Solution
Implement an acoustic fingerprinting system using generative AI to verify user identity by capturing keystroke parameters such as pressure, velocity, and sound patterns, converting them into discreet notes, and comparing these against a database of authorized user profiles to assign a similarity score.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If acoustic side channel hacking is used to retrieve passwords, then password retrieval capability is improved, but system security deteriorates
Solution Approach 1:
The patent converts the harmful acoustic information that attackers use to retrieve passwords into a beneficial authentication feature. By capturing keystroke acoustic parameters and transforming them into acoustic fingerprints, the system turns the same acoustic channel that enables attacks into a mechanism for verifying user identity and preventing unauthorized access.
Solution Approach 2:
Instead of using acoustic information solely for password retrieval (the attacker's approach), the patent inverts the approach by using acoustic information for password verification and authentication. The system captures acoustic parameters during legitimate typing and compares them against stored acoustic fingerprints to authenticate users, effectively reversing the utility of acoustic side channel information from an attack vector to a security defense mechanism.
2Measurement precision
If keystroke parameters are captured and analyzed, then authentication accuracy is improved, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary acoustic fingerprinting module that acts as a mediator between the keystroke capture system and the authentication system. This module processes raw acoustic parameters, extracts distinctive features, and transforms them into acoustic fingerprints for comparison, thereby simplifying the overall system architecture while maintaining high authentication accuracy.
Solution Approach 2:
The patent replaces complex mechanical or hardware-based authentication mechanisms with an acoustic analysis system. By using acoustic parameter capture and processing, the system achieves precise authentication without requiring additional physical security devices or complex mechanical verification systems, thereby reducing overall device complexity while maintaining or improving authentication accuracy.
Data Source
AI summary
An acoustic fingerprinting system includes an initial request from an authentic user. The input comprises a password with a plurality of keys. A smart sensor measures sounds associated with the keys. The smart sensor converts the sounds into notes that correspond to the keys. The notes may be stored in a database. There may be a second request from a user to access the system. The second request may include a second input of the password. The second input may include a sound associated with the keys of the password. The sounds may be converted to second notes. The second notes may be compared to the notes stored in the database. The user may be assigned a score based on the comparison. In the event that the score is greater than a predetermined number, the user may be granted access to the system.