Sensor-Based Implicit Authentication of Smartphone Users

• Published in: 2017 47th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN) pp. 309 - 320
• Main Authors: Wei-Han Lee, Lee, Ruby B.
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.06.2017
• Subjects: Accelerometers; Authentication; Biomedical monitoring; Global Positioning System; Machine Learning; Privacy; Security; Sensor phenomena and characterization; Sensor systems; Sensors; Smartphone; Smartwatch
• ISSN: 2158-3927
• DOI: 10.1109/DSN.2017.21

Authentication of smartphone users is important because a lot of sensitive data is stored in the smartphone and the smartphone is also used to access various cloud data and services. However, smartphones are easily stolen or co-opted by an attacker. Beyond the initial login, it is highly desirable to re-authenticate end-users who are continuing to access security-critical services and data. Hence, this paper proposes a novel authentication system for implicit, continuous authentication of the smartphone user based on behavioral characteristics, by leveraging the sensors already ubiquitously built into smartphones. We propose novel context-based authentication models to differentiate the legitimate smartphone owner versus other users. We systematically show how to achieve high authentication accuracy with different design alternatives in sensor and feature selection, machine learning techniques, context detection and multiple devices. Our system can achieve excellent authentication performance with 98.1% accuracy with negligible system overhead and less than 2.4% battery consumption.