Typing Patterns for Authentication

Kelson writes "NPR's Marketplace is reporting on a new authentication scheme. BioPassword tracks the way you type your password: how long each key is depressed, the time between keystrokes, and overall speed. When someone tries to log into your account, it compares the pattern to what it has on file. It only allows you in if both the password and patterns match. The technique has been around a while. World War II Morse code operators used it to determine whether a message was sent by an ally or an impostor."

Comments

Re:Reminds me of a story...

[ScrewMaster]

Short arms?

Long penis.

Re:Bad Idea

[goombah99]

This reminds me of the old joke about the two russian comrades that read in pravda how a new city in siberia needs engineers. The story says the city wants for nothing, the store shevles are stocked, the store clerks courteous, and there are no lines. But they know that sometime pravda is not isvestia (the truth) and it might be a trap. SO they agree that one of them will go and write back if the stories are true. but if it's a trap their mail will be searched to they agree on a code. If it is all lies the writer will write in red ink. and if true then in blue.

One day the letter arrives. It is in Blue ink. it raves about the luxury goods, and the stores of plenty. In fact says the writer, the only thing in short supply seems to be red ink.

The modern version would have the comrade unable to log in because all the keyboards were dvorak.

Re:Fist

[justinbach]

So now it makes a difference if I'm using my own computer or not? Or if I'm eating a bagel while logging in? Or if I have a hangover?

Man, I don't know about those circumstances, but I would welcome an online financial transaction system that's good enough to recognize whether or not I'm drunkenly typing in my credit card number after a night on the town. The combination of woot.com and a few too many beers has on more than one occasion proved fatal to both my self-respect and my checking account...as if two Roombas isn't enough as it is!

Re:Fist

[Anonymous Coward]

man, what an exciting life... getting drunk and buying stuff online! You're giving Keith Richards a run for his money...

Sharing Secrets

[NetSettler]

So now it makes a difference if...

Yeah, not only that, but imagine when you've forgotten something important and you call home to talk to your spouse to get it.

Spouse: What's your password?
You: It's "My name is my passport."
Spouse: That whole thing? That's a lot of letters. Ok, I'm typing it.
You: Are you in?
Spouse: Nope. It says I'm not typing it right. How do you type it?
You: Huh? Oh, right. I forgot. Lean heavy on the first n and the two y's. And pause slightly after every other space.
Spouse: It's still not working.
You: Did I mention that I'm slow to reach a y and then slow again for whatever character follows? It's quite a reach.
Spouse: Ok, I'll try. Nope. Not working.
You: Oh, right. And try to type it at 80 words per minute.
Spouse: I only type 20.
You: Never mind. I'll drive home and get the info. It'll be faster.

Re:Fist

[cyphercell]

Man if I was you, I would drink more before I stole money from myself. Two Roombas? When you're drunk? What the hell is wrong with renting a hotel room and puking in the pool? Or renting a limo to drive you out, without enough cash to get back? Or, hire a stripper to sneak into bed with your best friend and his wife, so you can buy him a beer the next night, then claim poverty on him. Dude, you need some alcoholism.

Re:Bad Idea

[bitt3n]

This will make it possible for a change of mood to deny your access to your own accounts. ..which will probably not help with the mood thing.

That's an easy problem to solve. Simply make sure to type your password the first time when you are in a horrible mood, and thereafter, repeatedly typing in your password will eventually result in a successful login.

+1 Clippy of awareness

[Scrameustache]

Oy. So now it makes a difference if I'm using my own computer or not? Or if I'm eating a bagel while logging in? Or if I have a hangover? Because my typing pattern is going to be different in each case. You appear to have a hangover,
while you were drunk, I intercepted the email you wrote to

• the girl from the office

would you like to read it again before it is sent?

[No] [Ignore] [Cancel]

Re:Fist

[isaac]

A Morse-operator's style was referred to as his "fist". This is referenced in Cryptonomicon.
I think this is a pretty nifty idea, and I'm surprised it hasn't been done before.

It won't be long before online fraudsters learn to copy users "fists."

Yes, I predict the internet will be awash in "fisting" websites within the fortnight.

-Isaac