BioTouchPass2：使用时间对齐循环神经网络的触摸屏密码生物识别
BioTouchPass2: Touchscreen Password Biometrics Using Time-Aligned Recurrent Neural Networks
摘要：
密码仍然每天用于各种应用程序。然而，在许多情况下，它们本身并不足够安全。这项工作通过双因素身份验证增强了密码场景，要求用户绘制密码的每个字符，而不是像往常一样键入它们。本研究的主要贡献如下：i）我们提出了新颖的MobileTouchDB公共数据库，在无监督的移动场景中获得，在位置，姿势和设备方面没有限制。该数据库包含超过64 K的在线字符样本，由217名用户使用94种不同的智能手机型号和多达6个采集会话执行。ii）我们对所提出的方法进行了完整的分析，同时考虑了传统的认证系统，如动态时间规整（DTW）和基于循环神经网络（RNNs）的新方法。此外，我们提出了一种新的方法命名为时间对齐的循环神经网络（TA-RNNs）。这种方法结合了DTW和RNN的潜力，可以训练更强大的系统来抵御攻击。使用MobileTouchDB和电子BioDigitDB数据库进行了完整的分析所提出的方法。我们提出的TA-RNN系统优于现有技术，实现了最终2.38%的相等出错率，仅使用4位密码和每个字符一个训练样本。这些结果鼓励部署我们提出的方法相比，传统的基于类型的密码系统的攻击将有100%的成功率在相同的冒名顶替者的情况下。
英文摘要：
Passwords are still used on a daily basis for all kind of applications. However, they are not secure enough by themselves in many cases. This work enhances password scenarios through two-factor authentication asking the users to draw each character of the password instead of typing them as usual. The main contributions of this study are as follows: i) We present the novel MobileTouchDB public database, acquired in an unsupervised mobile scenario with no restrictions in terms of position, posture, and devices. This database contains more than 64K on-line character samples performed by 217 users, with 94 different smartphone models, and up to 6 acquisition sessions. ii) We perform a complete analysis of the proposed approach considering both traditional authentication systems such as Dynamic Time Warping (DTW) and novel approaches based on Recurrent Neural Networks (RNNs). In addition, we present a novel approach named Time-Aligned Recurrent Neural Networks (TA-RNNs). This approach combines the potential of DTW and RNNs to train more robust systems against attacks. A complete analysis of the proposed approach is carried out using both MobileTouchDB and e-BioDigitDB databases. Our proposed TA-RNN system outperforms the state of the art, achieving a final 2.38% Equal Error Rate, using just a 4-digit password and one training sample per character. These results encourage the deployment of our proposed approach in comparison with traditional typed-based password systems where the attack would have 100% success rate under the same impostor scenario.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
