loading...
Deterring Password Sharing: User Authentication via Fuzzy c-Means Clustering Applied to Keystroke Biometric Data
Colima, M?xico September 20-September 24
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ENC.2004.1342604Fifth Mexican International Conferenc ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Salvador Mandujano, Instituto Tecnológico y de Estudios Superiores de Monterrey
Rogelio Soto, Instituto Tecnológico y de Estudios Superiores de Monterrey
This paper describes a clustering-based system to enhance user authentication by applying fuzzy techniques to biometric data in order to deter password sharing. Fuzzy c-Means is used to train personal, per-keyboard profiles based on the keystroke dynamics of users when entering passwords on a keyboard. These profiles use DES encryption taking the actual passwords as key and are read at logon time by the access control mechanism in order to further validate the identity of the user. Fuzzy values obtained from membership functions applied to the input (i.e., keystroke latencies) are compared against profile values, and a match, within a certain precision threshold ?, will grant access to the user. With this technique, even when user A shares password P_A with user B, B will still be denied access unless he is capable of mimicking the keystroke dynamics of A. We describe the motivation, design, and implementation of a prototype whose results indicate the accuracy level and feasibility of the approach.
Citation:
Salvador Mandujano, Rogelio Soto, "Deterring Password Sharing: User Authentication via Fuzzy c-Means Clustering Applied to Keystroke Biometric Data," enc, pp.181-187, Fifth Mexican International Conference in Computer Science (ENC'04), 2004
Usage of this product signifies your acceptance of the Terms of Use.