Identify and Verify Users Based on How They Type

LinucksGirl writes to share an IBM DeveloperWorks article that shows how to support user verification through keystroke-dynamics processing by modifying the GNOME Display Manager (GDM). You can create and store a one-way encrypted hash of your keystroke patterns when entering your user name. The article shows how to add code to GDM to read current keystroke patterns and permit a user to log in when the characteristics are a match. An interesting idea to be sure but I know I certainly am not that consistent when I type, so I'm skeptical of how well this may work.

inconsistent

[flynt]

An interesting idea to be sure but I know I certainly am not that consistent when I type, so I'm skeptical of how well this may work.

That's precisely what some statistical methods are designed to do, find patterns about the inconsistencies. I haven't read this proposal, so can't comment more, but 'leaning' in the presence of variation is basically what modern statistics is all about.

Re:Oww I broke a finger...

[shawn(at)fsu]

3 alone doesn't protect from shoulder surfing. While someone can look at my eye all day it's going to be difficult for most people do get my retina scan. 1, while it is a subset of 2, is supposed to be something you can't accidentally misplace, or more importantly it's supposed to be something some nefarious person can't take from you. I agree with GP you need all three.