A Portable Single Sign-On System with Keystroke Dynamic Authentication

• Activity Number: 360
• Type: Contributed
• Date/Time: Tuesday, August 3, 2010 : 10:30 AM to 12:20 PM
• Sponsor: Biometrics Section
• Author(s): Po-Chin Chuang and Dongher Shih and Minghung Shih*+
• Companies: National Yunlin University of Science and Technology and National Yunlin University of Science and Technology and North Carolina State University
• Keywords: keystroke dynamics ; user authentication ; single sign-on

Abstract

Password verification is the most common and convenient authenticated mechanism in Internet. As the growing of Internet services, people have to manage multiple passwords. Although single sign-on and federated identity management was proposed to overcome the shortcoming of this heavy burden. However, there still exist some gaps and security issues. Thus, we have proposed a portable single sign-on system and application environment that reduces the burden of manage many different passwords of user. User can use only one specified password authenticated by keystroke dynamics to support designation of passwords and applies controls on application access to data on that basis. Automatic form filling approach and statistical method for keystroke dynamic authentication are used. Experimental results show that our prototype has a fair false rejection rate and false acceptance rate.