Biometric authentication and authorisation infrastructures [Elektronische Ressource] / vorgelegt von Matthias Olden

BIOMETRIC AUTHENTICATION AND AUTHORISATION INFRASTRUCTURES Dissertation zur Erlangung des Grades eines Doktors der Wirtschaftswissenschaften eingereicht an der Wirtschaftswissenschaftlichen Fakultät der Universität Regensburg vorgelegt von Dipl. Wirt.Inf. Matthias Olden Berichterstatter Prof. Dr. Dieter Bartmann Prof. Dr. Günther Pernul Regensburg, den 21. Oktober 2008 PREFACE Nowadays, replacing traditional authentication methods with authentication and authorization infrastructures (AAIs) comes down to trading several passwords for one “master password”, which allows users to access all services in a federation. Having only one password may be comfortable for the user, but it also raises the interest of potential impostors, who may try to overcome the weak security that a single password provides. A solution to this issue would be a more factor AAI, combining the password with a biometric method of authentication that can work on the internet. The model presented in this work is based on typing behaviour biometrics, which can recognize a user by the way he types (Bartmann 2007). This biometric method uses the keyboard as a sensor and is a pure software solution that can function in a web browser. Due to the fact that biometrics do not require any knowledge based features (like passwords), biometric AAIs based on typing behaviour are comfortable for the user.