User Authentication Method for Computer-based Online Testing by Analysis of Keystroke Timing at the Input of a Family Name

Abstract

Password character strings for a long-time use in the field of user authentication can be used by anyone as long as he or she can successfully impersonate a legitimate user. Therefore, user authentication method has been increasing through the combined use of passwords and other user authentication methods, and use of biometric authentication methods. However, these methods put too much burden on users and became too serious problem to ignore with the convenience degradation despite security enhancement. Therefore, we propose a user authentication method by analyzing keystroke timing. And the object of our analysis is a keystroke at the input of users' family name. A character string usually used is considered to be so easily input that it makes it possible to input in a stable rhythm and high reproducible fashion. Based on this hypothesis, we actually took a measurement of users' keystroke timing and could verify the difference according to users.