Li Yanyan, Xie Mengjun, Bian Jiang
University of Arkansas at Little Rock.
University of Florida.
IEEE Conf Commun Netw Secur. 2016 Oct;2016:1-9. doi: 10.1109/CNS.2016.7860464. Epub 2017 Feb 23.
Many studies have been conducted to apply behavioral biometric authentication on/with mobile devices and they have shown promising results. However, the concern about the verification accuracy of behavioral biometrics is still common given the dynamic nature of behavioral biometrics. In this paper, we address the accuracy concern from a new perspective-behavior segments, that is, segments of a gesture instead of the whole gesture as the basic building block for behavioral biometric authentication. With this unique perspective, we propose a new behavioral biometric authentication method called SegAuth, which can be applied to various gesture or motion based authentication scenarios. SegAuth can achieve high accuracy by focusing on each user's distinctive gesture segments that frequently appear across his or her gestures. In SegAuth, a time series derived from a gesture/motion is first partitioned into segments and then transformed into a set of string tokens in which the tokens representing distinctive, repetitive segments are associated with higher genuine probabilities than those tokens that are common across users. An overall genuine score calculated from all the tokens derived from a gesture is used to determine the user's authenticity. We have assessed the effectiveness of SegAuth using 4 different datasets. Our experimental results demonstrate that SegAuth can achieve higher accuracy consistently than existing popular methods on the evaluation datasets.
许多研究致力于将行为生物特征认证应用于移动设备,并且已经取得了令人瞩目的成果。然而,鉴于行为生物特征的动态特性,对行为生物特征验证准确性的担忧仍然普遍存在。在本文中,我们从一个新的视角——行为片段来解决准确性问题,即使用手势的片段而非整个手势作为行为生物特征认证的基本构建块。基于这一独特视角,我们提出了一种名为SegAuth的新型行为生物特征认证方法,该方法可应用于各种基于手势或动作的认证场景。SegAuth通过关注每个用户在其手势中频繁出现的独特手势片段,能够实现较高的准确性。在SegAuth中,首先将从手势/动作中导出的时间序列划分为片段,然后转换为一组字符串令牌,其中表示独特、重复片段的令牌比那些在用户之间普遍存在的令牌具有更高的真实概率。根据从一个手势导出的所有令牌计算出的总体真实分数用于确定用户的真实性。我们使用4个不同的数据集评估了SegAuth的有效性。我们的实验结果表明,在评估数据集上,SegAuth始终能够比现有的流行方法实现更高的准确性。