|
While typing a string of characters – in a password, for example – every person exhibits a series of timing events – a “typing signature.” The measurement and comparison of user-specific typing rhythms is called keystroke dynamics.
The raw measurements of a user’s keystroke dynamics can be recorded from almost any keyboard to determine related metrics like dwell time (the time between key down and key up) and flight time (the time from “key down” to the next “key down” to the time between one “key up” and the next “key up”). These and other timing measures form a series of mathematical data representing a user’s typing pattern or signature. AdmitOne’s patent-pending techniques are used to compare this data to previous attempts and calculate a confidence score that the user is who they claim to be.
 Based on the successful capture and processing of five or six valid patterns of user keystroke dynamics (KD), a KD template representing the unique behavioral signature of the user is derived. For example, a KD template could be generated from a combination of userID and password Figure 1 represents the KD template for a user typing the password string “Admit1Security.” The graph is a partial representation of the template depicting a range of legitimate timing values for each keystroke within the password.
 For the “Admit1Security” password, more than 50 individual timings will be used to evaluate a user’s login attempt. Compare the partial samples below. In Figure 2, an imposter enters “Admit1Security,” which is compared to the KD template of the account owner. Based on the keystroke timings and pattern of the user’s typed string, the imposter is detected because his timings falls far outside the KD template. Uniquely Powerful Identification
Keystroke dynamics identifies a user independent of IP address, time of day, or device. Keystroke dynamics identifies users without the high false positive rates of other observed factors. Additionally, keystroke dynamics used in combination with other observed factors can automatically create user-specific profile that other engines would not recognize.
Maintain User Experience
Keystroke dynamics is able to identify a user without changing the user login procedures. For an online brand, keystroke dynamics improves brand reputation without degrading the brand experience. For mobile employees or partners, keystroke dynamics improves security without impacting productivity.
Keystroke dynamics' unique ability to identify an individual user provides the basis for unique solutions from AdmitOne Security. Learn more about Scout and Sentry in the solution section.
|
