Keystroke Authentication Using One-Class Classifier

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing user authentication methods based on keystroke dynamics require multiple users to type the same content for training two-class classifiers, which is unrealistic and poses security risks, especially when authenticating sensitive information.

Innovation Solution

A method that captures keystroke data, calculates feature values, and uses distance scores to authenticate users by averaging these scores and entering them into a classifier, allowing for successful verification without requiring multiple users to type the same content.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If two-class classifier methods are used for authentication, then authentication accuracy is improved, but the requirement for multiple users to type the same content increases training complexity and security risks

Engineering Contradiction:
Improveauthentication accuracyVSAvoidtraining complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent extracts and removes the requirement for multiple users to type the same content from the authentication process. Instead of using two-class classifiers that need training data from multiple users, the system uses one-class classifiers that only require data from a single user, thereby eliminating the training complexity and security risks associated with collecting multiple users' typing data while maintaining authentication accuracy

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces an intermediary approach by using one-class classifiers as a middle ground between simple distance-based methods and complex two-class classifiers. This intermediary solution maintains the accuracy benefits of two-class classifiers while avoiding their requirement for multiple users' training data, thus resolving the contradiction between accuracy and training complexity

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If two-class classifier methods are used for authentication, then authentication accuracy is improved, but security risks increase due to requiring multiple users to type sensitive information

Engineering Contradiction:
Improveauthentication accuracyVSAvoidsecurity risks
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent removes the security vulnerability inherent in two-class classifier methods by eliminating the requirement to collect and store multiple users' typing data on sensitive information. By using one-class classifiers that only need a single user's enrollment data, the system maintains authentication accuracy while eliminating the security risks associated with handling multiple users' sensitive information

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent converts the potential harm of requiring multiple users to type sensitive information into a benefit by using one-class classifiers. The system achieves comparable or better authentication accuracy without the security risks, effectively turning the limitation into an advantage by reducing the attack surface and data protection requirements

Inventive Principle:
Principle #22Blessing in disguise (Convert harm into benefit)

3Reliability

If enrollment templates and authentication templates are created and compared using distance-based methods, then user identity verification is achieved, but the process requires significant computational resources and time

Engineering Contradiction:
Improveidentity verificationVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-processing the enrollment data during user registration to create optimized one-class classifier models. This preliminary preparation reduces the computational burden during actual authentication, allowing for faster verification while maintaining reliability. The system pre-calculates and stores necessary statistical parameters, enabling rapid comparison during authentication without requiring significant real-time computational resources

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11669604B2Methods and systems for authenticating a user
Publication Date: 2023.06.06 DAON TECH
  • US11669604B2 patent drawing
  • US11669604B2 patent drawing
  • US11669604B2 patent drawing

AI summary

A method for authenticating a user is provided that includes capturing, by a computing device, key stroke data generated as a result of a user typing content into the computing device, and calculating feature values from the key stroke data. The method also includes calculating distance scores from the feature values and average distance scores from the distance scores, and entering the average distance scores into a classifier. The user is successfully authenticated when the classifier verifies the identity of the user.