Pulse-response: Exploring human body impedance for biometric recognition

Journal article

Biometric characteristics are often used as a supplementary component in user authentication and identification schemes. Many biometric traits, both physiological and behavioral, offering a wider range of security and stability, have been explored. We propose a new physiological trait based on the human body’s electrical response to a square pulse signal, called pulse-response, and analyze how this biometric characteristic can be used to enhance security in the context of two example applications: (1) an additional authentication mechanism in PIN entry systems and (2) a means of continuous authentication on a secure terminal. The pulse-response biometric recognition is effective because each human body exhibits a unique response to a signal pulse applied at the palm of one hand and measured at the palm of the other. This identification mechanism integrates well with other established methods and could offer an additional layer of security, either on a continuous basis or at log-in time.We build a proof-of-concept prototype and perform experiments to assess the feasibility of pulse-response for biometric authentication. The results are very encouraging, achieving an equal error rate of 2% over a static dataset and 9% over a dataset with samples taken over several weeks. We also quantize resistance to attack by estimating individual worst-case probabilities for zero-effort impersonation in different experiments.

Authors: Martinovic, I; Rasmussen, K; Roeschlin, M; Tsudik, G

• Publication status: Published
• Peer review status: Peer reviewed
• Publisher: Association for Computing Machinery
• Journal: ACM Transactions on Privacy and Security
• Volume: 20
• Issue: 2
• Pages: 1-31
• Publication date: 2017-05-28
• Acceptance date: 2017-03-01
• DOI: 10.1145/3064645
• EISSN: 2471-2574
• ISSN: 2471-2566
• Keywords: secure man-machine interaction; biometric recognition; Biometric authentication; user identification; continuous authentication; secure PIN entry; physiological trait; biometrics; secure computer terminal