Keystroke Authentication Using One-Class Classifier
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods based on keystroke dynamics require multiple users to type the same content for training two-class classifiers, which is unrealistic and poses security risks, especially when authenticating sensitive information.
Innovation Solution
A method that captures keystroke data, calculates feature values, and uses distance scores to authenticate users by averaging these scores and entering them into a classifier, allowing for successful verification without requiring multiple users to type the same content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If two-class classifier methods are used for authentication, then authentication accuracy is improved, but the requirement for multiple users to type the same content increases training complexity and security risks
Solution Approach 1:
The patent extracts and removes the requirement for multiple users to type the same content from the authentication process. Instead of using two-class classifiers that need training data from multiple users, the system uses one-class classifiers that only require data from a single user, thereby eliminating the training complexity and security risks associated with collecting multiple users' typing data while maintaining authentication accuracy
Solution Approach 2:
The patent introduces an intermediary approach by using one-class classifiers as a middle ground between simple distance-based methods and complex two-class classifiers. This intermediary solution maintains the accuracy benefits of two-class classifiers while avoiding their requirement for multiple users' training data, thus resolving the contradiction between accuracy and training complexity
2Measurement precision
If two-class classifier methods are used for authentication, then authentication accuracy is improved, but security risks increase due to requiring multiple users to type sensitive information
Solution Approach 1:
The patent removes the security vulnerability inherent in two-class classifier methods by eliminating the requirement to collect and store multiple users' typing data on sensitive information. By using one-class classifiers that only need a single user's enrollment data, the system maintains authentication accuracy while eliminating the security risks associated with handling multiple users' sensitive information
Solution Approach 2:
The patent converts the potential harm of requiring multiple users to type sensitive information into a benefit by using one-class classifiers. The system achieves comparable or better authentication accuracy without the security risks, effectively turning the limitation into an advantage by reducing the attack surface and data protection requirements
3Reliability
If enrollment templates and authentication templates are created and compared using distance-based methods, then user identity verification is achieved, but the process requires significant computational resources and time
Solution Approach 1:
The patent applies preliminary action by pre-processing the enrollment data during user registration to create optimized one-class classifier models. This preliminary preparation reduces the computational burden during actual authentication, allowing for faster verification while maintaining reliability. The system pre-calculates and stores necessary statistical parameters, enabling rapid comparison during authentication without requiring significant real-time computational resources
Data Source
AI summary
A method for authenticating a user is provided that includes capturing, by a computing device, key stroke data generated as a result of a user typing content into the computing device, and calculating feature values from the key stroke data. The method also includes calculating distance scores from the feature values and average distance scores from the distance scores, and entering the average distance scores into a classifier. The user is successfully authenticated when the classifier verifies the identity of the user.


