{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T09:34:14Z","timestamp":1761989654746,"version":"build-2065373602"},"reference-count":38,"publisher":"MDPI AG","issue":"13","license":[{"start":{"date-parts":[[2022,6,27]],"date-time":"2022-06-27T00:00:00Z","timestamp":1656288000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"MIUR under the program \u201cDepartments of Excellence (2018\u20132022)\u2014Precise-CPS\u201d"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Personal Identification Numbers (PINs) are widely used today for user authentication on mobile devices. However, this authentication method can be subject to several attacks such as phishing, smudge, and side-channel. In this paper, we increase the security of PIN-based authentication by considering behavioral biometrics, specifically the smartphone movements typical of each user. To this end, we propose a method based on anomaly detection that is capable of recognizing whether the PIN is inserted by the smartphone owner or by an attacker. This decision is taken according to the smartphone movements, which are recorded during the PIN insertion through the built-in motion sensors. For each digit in the PIN, an anomaly score is computed using Machine Learning (ML) techniques. Subsequently, these scores are combined to obtain the final decision metric. Numerical results show that our authentication method can achieve an Equal Error Rate (EER) as low as 5% in the case of 4-digit PINs, and 4% in the case of 6-digit PINs. Considering a reduced training set, composed of solely 50 samples, the EER only slightly worsens, reaching 6%. The practicality of our approach is further confirmed by the low processing time required, on the order of fractions of milliseconds.<\/jats:p>","DOI":"10.3390\/s22134857","type":"journal-article","created":{"date-parts":[[2022,6,28]],"date-time":"2022-06-28T00:07:02Z","timestamp":1656374822000},"page":"4857","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Augmented PIN Authentication through Behavioral Biometrics"],"prefix":"10.3390","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9855-5906","authenticated-orcid":false,"given":"Matteo","family":"Nerini","sequence":"first","affiliation":[{"name":"Department of Electrical and Electronic Engineering, Imperial College London, London SW7 2AZ, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9266-4880","authenticated-orcid":false,"given":"Elia","family":"Favarelli","sequence":"additional","affiliation":[{"name":"Department of Electrical, Electronic and Information Engineering (DEI), University of Bologna, 40136 Bologna, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8782-8318","authenticated-orcid":false,"given":"Marco","family":"Chiani","sequence":"additional","affiliation":[{"name":"Department of Electrical, Electronic and Information Engineering (DEI), University of Bologna, 40136 Bologna, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2022,6,27]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Von Zezschwitz, E., De Luca, A., Brunkow, B., and Hussmann, H. (2015, January 18\u201323). Swipin: Fast and secure pin-entry on smartphones. Proceedings of the 33rd Annual ACM Conference on Human Factors in Computing Systems, Seoul, Korea.","DOI":"10.1145\/2702123.2702212"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Von Zezschwitz, E., Koslow, A., De Luca, A., and Hussmann, H. (2013, January 19\u201322). Making graphic-based authentication secure against smudge attacks. Proceedings of the 2013 International Conference on Intelligent User Interfaces, Santa Monica, CA, USA.","DOI":"10.1145\/2449396.2449432"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"75","DOI":"10.1109\/TIFS.2018.2843353","article-title":"Sensor-Based Mobile Web Cross-Site Input Inference Attacks and Defenses","volume":"14","author":"Zhao","year":"2018","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"465","DOI":"10.1109\/COMST.2017.2779824","article-title":"Systematic Classification of Side-Channel Attacks: A Case Study for Mobile Devices","volume":"20","author":"Spreitzer","year":"2018","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"291","DOI":"10.1007\/s10207-017-0369-x","article-title":"Stealing PINs via mobile sensors: Actual risk versus user perception","volume":"17","author":"Mehrnezhad","year":"2018","journal-title":"Int. J. Inf. Secur."},{"key":"ref_6","unstructured":"Wang, C., Guo, X., Wang, Y., Chen, Y., and Liu, B. (June, January 30). Friend or foe?: Your wearable devices reveal your personal PIN. Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security, Xi\u2019an, China."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Berend, D., Bhasin, S., and Jungk, B. (2018, January 27\u201330). There Goes Your PIN: Exploiting Smartphone Sensor Fusion Under Single and Cross User Setting. Proceedings of the 13th International Conference on Availability, Reliability and Security, Hamburg, Germany.","DOI":"10.1145\/3230833.3232826"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Guerar, M., Verderame, L., Migliardi, M., and Merlo, A. (2019, January 12\u201314). 2GesturePIN: Securing PIN-Based Authentication on Smartwatches. Proceedings of the 2019 IEEE 28th International Conference on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE), Napoli, Italy.","DOI":"10.1109\/WETICE.2019.00074"},{"key":"ref_9","first-page":"621","article-title":"Using screen brightness to improve security in mobile social network access","volume":"15","author":"Guerar","year":"2016","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"115","DOI":"10.1016\/j.cose.2017.01.008","article-title":"DRAW-A-PIN: Authentication using finger-drawn PIN on touch devices","volume":"66","author":"Memon","year":"2017","journal-title":"Comput. Secur."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Bours, P., and Masoudian, E. (2014, January 27\u201328). Applying keystroke dynamics on one-time pin codes. Proceedings of the 2nd International Workshop on Biometrics and Forensics, Valletta, Malta.","DOI":"10.1109\/IWBF.2014.6914254"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Ivannikova, E., David, G., and H\u00e4m\u00e4l\u00e4inen, T. (2017, January 3\u20136). Anomaly detection approach to keystroke dynamics based user authentication. Proceedings of the 2017 IEEE Symposium on Computers and Communications (ISCC), Heraklion, Greece.","DOI":"10.1109\/ISCC.2017.8024638"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"377","DOI":"10.1109\/TBIOM.2020.3003988","article-title":"Fast Free-Text Authentication via Instance-Based Keystroke Dynamics","volume":"2","author":"Ayotte","year":"2020","journal-title":"IEEE Trans. Biom. Behav. Identity Sci."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"1998","DOI":"10.1109\/COMST.2016.2537748","article-title":"Authentication of Smartphone Users Using Behavioral Biometrics","volume":"18","author":"Alzubaidi","year":"2016","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Li, G., and Bours, P. (2018, January 26\u201328). A Novel Mobilephone Application Authentication Approach based on Accelerometer and Gyroscope Data. Proceedings of the 2018 International Conference of the Biometrics Special Interest Group (BIOSIG), Darmstadt, Germany.","DOI":"10.23919\/BIOSIG.2018.8553503"},{"key":"ref_16","unstructured":"Bo, C., Zhang, L., Li, X.Y., Huang, Q., and Wang, Y. (October, January 30). SilentSense: Silent User Identification via Touch and Movement Behavioral Biometrics. Proceedings of the 19th Annual International Conference on Mobile Computing & Networking, Miami, FL, USA."},{"key":"ref_17","unstructured":"Yang, J., Li, Y., and Xie, M. (2015, January 23\u201327). Motionauth: Motion-based authentication for wrist worn smart devices. Proceedings of the 2015 IEEE International Conference on Pervasive Computing and Communication Workshops (PerCom Workshops), St. Louis, MO, USA."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Lewis, A., Li, Y., and Xie, M. (2016, January 17\u201319). Real time motion-based authentication for smartwatch. Proceedings of the 2016 IEEE Conference on Communications and Network Security (CNS), Philadelphia, PA, USA.","DOI":"10.1109\/CNS.2016.7860521"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Mondol, M.A.S., Emi, I.A., Preum, S.M., and Stankovic, J.A. (2017, January 18\u201321). User authentication using wrist mounted inertial sensors. Proceedings of the 2017 16th ACM\/IEEE International Conference on Information Processing in Sensor Networks (IPSN), Pittsburgh, PA, USA.","DOI":"10.1145\/3055031.3055063"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Mare, S., Markham, A.M., Cornelius, C., Peterson, R., and Kotz, D. (2014, January 18\u201321). Zebra: Zero-effort bilateral recurring authentication. Proceedings of the 2014 IEEE Symposium on Security and Privacy, Berkeley, CA, USA.","DOI":"10.1109\/SP.2014.51"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"294","DOI":"10.1109\/TBIOM.2020.2997004","article-title":"Wrist in Motion: A Seamless Context-Aware Continuous Authentication Framework Using Your Clickings and Typings","volume":"2","author":"Li","year":"2020","journal-title":"IEEE Trans. Biom. Behav. Identity Sci."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Ehatisham-ul Haq, M., Azam, M.A., Loo, J., Shuang, K., Islam, S., Naeem, U., and Amin, Y. (2017). Authentication of smartphone users based on activity recognition and mobile sensing. Sensors, 17.","DOI":"10.3390\/s17092043"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Yao, S., Hu, S., Zhao, Y., Zhang, A., and Abdelzaher, T. (2017, January 3\u20137). Deepsense: A unified deep learning framework for time-series mobile sensing data processing. Proceedings of the 26th International Conference on World Wide Web Conferences Steering Committee, Perth, Australia.","DOI":"10.1145\/3038912.3052577"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"165","DOI":"10.1109\/TBIOM.2019.2918307","article-title":"Continuous Authentication of Smartphones Based on Application Usage","volume":"1","author":"Mahbub","year":"2019","journal-title":"IEEE Trans. Biom. Behav. Identity Sci."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"190","DOI":"10.1109\/TBIOM.2021.3050036","article-title":"Anomaly Detection With Convolutional Autoencoders for Fingerprint Presentation Attack Detection","volume":"3","author":"Kolberg","year":"2021","journal-title":"IEEE Trans. Biom. Behav. Identity Sci."},{"key":"ref_26","unstructured":"Google (2022, May 27). Android Developers Website. Available online: https:\/\/developer.android.com\/guide\/topics\/sensors."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Favarelli, E., Testi, E., and Giorgetti, A. (2019, January 16\u201318). One Class Classifier Neural Network for Anomaly Detection in Low Dimensional Feature Spaces. Proceedings of the 2019 13th International Conference on Signal Processing and Communication Systems (ICSPCS), Gold Coast, Australia.","DOI":"10.1109\/ICSPCS47537.2019.9008633"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1109\/TIM.2020.3038288","article-title":"Machine Learning for Automatic Processing of Modal Analysis in Damage Detection of Bridges","volume":"70","author":"Favarelli","year":"2021","journal-title":"IEEE Trans. Instrum. Meas."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Favarelli, E., Testi, E., Pucci, L., and Giorgetti, A. (2019, January 16\u201318). Anomaly Detection Using WiFi Signal of Opportunity. Proceedings of the 2019 13th International Conference on Signal Processing and Communication Systems (ICSPCS), Gold Coast, Australia.","DOI":"10.1109\/ICSPCS47537.2019.9008700"},{"key":"ref_30","first-page":"2825","article-title":"Scikit-learn: Machine Learning in Python","volume":"12","author":"Pedregosa","year":"2011","journal-title":"J. Mach. Learn. Res."},{"key":"ref_31","unstructured":"Bishop, C.M. (2006). Pattern Recognition and Machine Learning, Springer."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"433","DOI":"10.1002\/wics.101","article-title":"Principal component analysis","volume":"2","author":"Abdi","year":"2010","journal-title":"Wiley Interd. Rev. Comp. Stat."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"1299","DOI":"10.1162\/089976698300017467","article-title":"Nonlinear Component Analysis as a Kernel Eigenvalue Problem","volume":"10","author":"Smola","year":"1998","journal-title":"Neural Comp."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"1443","DOI":"10.1162\/089976601750264965","article-title":"Estimating the support of a high-dimensional distribution","volume":"13","author":"Platt","year":"2001","journal-title":"Neural Comput."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"1207","DOI":"10.1162\/089976600300015565","article-title":"New support vector algorithms","volume":"12","author":"Smola","year":"2000","journal-title":"Neural Comput."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Watt, J., Borhani, R., and Katsaggelos, A.K. (2016). Machine Learning Refined, Cambridge University Press.","DOI":"10.1017\/CBO9781316402276"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"783","DOI":"10.1016\/S0893-6080(99)00032-5","article-title":"Improving support vector machine classifiers by modifying kernel functions","volume":"12","author":"Amari","year":"1999","journal-title":"Neural Netw."},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Breunig, M.M., Kriegel, H.P., Ng, R.T., and Sander, J. (2000, January 15\u201318). LOF: Identifying density-based local outliers. Proceedings of the 2000 ACM SIGMOD International Conference on Management of Data, Dallas, TX, USA.","DOI":"10.1145\/342009.335388"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/13\/4857\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T23:39:14Z","timestamp":1760139554000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/13\/4857"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6,27]]},"references-count":38,"journal-issue":{"issue":"13","published-online":{"date-parts":[[2022,7]]}},"alternative-id":["s22134857"],"URL":"https:\/\/doi.org\/10.3390\/s22134857","relation":{},"ISSN":["1424-8220"],"issn-type":[{"type":"electronic","value":"1424-8220"}],"subject":[],"published":{"date-parts":[[2022,6,27]]}}}