A Proposed Password-Free Authentication Scheme Based on a Hybrid Vein-Keystroke Approach

Abstract

The traditional static password-based authentication schemes are insufficient to fully protect user privacy. They suffer from various usability and security issues which are usually utilized by online criminals to obtain users' passwords and control their accounts. In 2014 more than 4.9 million Gmail accounts have been compromise and published online. As a response to such incidents security researchers have started to investigates other alternative authentication methods. Currently there is a growing body of research to improve user authentication based on physiological and behavioral biometrics. In this paper we review the literature and discuss several related studies. Additionally, we propose the use of free-password authentication scheme using vein recognition at the login stage and keystroke dynamics as a continuous authentication during the user session.