Cited by 105User Authentication and Security SystemsBiometric Identification and SecurityAdvanced Authentication Protocols Security

Security, Privacy, and Usability in Continuous Authentication: A Survey

Open access
Baig, Ahmed Fraz, Eskeland, Sigurd·2021·Sensors

Abstract

Continuous authentication has been proposed as a possible approach for passive and seamless user authentication, using sensor data comprising biometric, behavioral, and context-oriented characteristics. Since these are personal data being transmitted and are outside the control of the user, this approach causes privacy issues. Continuous authentication has security challenges concerning poor matching rates and susceptibility of replay attacks. The security issues are mainly poor matching rates and the problems of replay attacks. In this survey, we present an overview of continuous authentication and comprehensively discusses its different modes, and issues that these modes have related to security, privacy, and usability. A comparison of privacy-preserving approaches dealing with the privacy issues is provided, and lastly recommendations for secure, privacy-preserving, and user-friendly continuous authentication.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.3390/s21175967

Cites

167 of 167 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • In Prime MotorX's network layer, encrypted sensor data is subjected to replay attacks.

    “On the other hand, when the data is encrypted, the attacker launches a Traffic Analysis attack [72], utilizing Wireshark [73], and a Replay attack [74], with the target being the encrypted data.”

    From A Critical Overview of Industrial Internet of Things Security and Privacy Issues Using a Layer-Based Hacking Scenario (2023) · cites this paper as [73]

    Section 4.3 (page unavailable) says continuous-authentication methods are susceptible to replay attacks, giving forged fingerprints as an example. It does not say that encrypted sensor data is replayed at the network layer or address Prime MotorX, so it supports the general attack type but not the claimed target or setting. (LLM, conf=0.82)

    Experimental — accuracy not yet measured
  • In Prime MotorX's network layer, encrypted sensor data is subjected to traffic analysis attacks.

    “On the other hand, when the data is encrypted, the attacker launches a Traffic Analysis attack [72], utilizing Wireshark [73], and a Replay attack [74], with the target being the encrypted data.”

    From A Critical Overview of Industrial Internet of Things Security and Privacy Issues Using a Layer-Based Hacking Scenario (2023) · cites this paper as [73]

    Section 4.2 discusses authentication data transmitted to a server, and Section 4.3 discusses replay attacks, but neither addresses traffic analysis of encrypted sensor data. Searches for “traffic analysis,” “encrypted sensor data,” “Wireshark,” and “Prime MotorX” found no passage supporting the point attributed to this source by [72]. (LLM, conf=0.73)

    Experimental — accuracy not yet measured

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 3

  1. Vapnik, V. Statistical Learning Theory New York; Wiley: New York, NY, USA, 1998.
  2. Room, C. Confusion Matrix. Mach. Learn. 2019, 6, 27.
  3. Feng, T.; Yang, J.; Yan, Z.; Tapia, E.M.; Shi, W. Tips: Context-aware implicit user identification using touch screen in uncontrolled environments. In Proceedings of the 15th Workshop on Mobile Computing Systems and Applications, Santa Barbara, CA, USA, 26-27 February 2014; pp. 1-6.

Cited by

Sorted by citations

Authors
Baig, A. F., & Eskeland, S.
Affiliations
Norwegian Computing Center (NO)
Corresponding author
Baig, Ahmed Fraz
Venue
Sensors
Publisher
MDPI AG
Published
2021-09-06
Volume
21
Issue
17
Pages
5967
ISSN
1424-8220 (ISSN-L)
OpenAlex
W3197878201
Cited by
98
References
165
Citations by year
2026: 18 · 2025: 25 · 2024: 22 · 2023: 17 · 2022: 14 · 2021: 2
FWCI
2.10
Type
journal article
Language
en
Open access
Locations
  • Sensors (publishedVersion, cc-by)
  • PubMed Central (publishedVersion, cc-by)
  • PubMed (publishedVersion)
  • DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
Funders
H2020 Marie Skłodowska-Curie Actions (860315)
Topics
  • Physical Sciences › Computer Science › Information Systems › User Authentication and Security Systems
  • Physical Sciences › Computer Science › Signal Processing › Biometric Identification and Security
  • Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
Keywords
continuous authentication, passive authentication, biometric sensors, behavioral biometrics, context-aware authentication, privacy preservation, replay attacks, match rate, usability, security (computing)
MeSH terms
Biometry, Confidentiality, Computer Security, Telemedicine, Privacy

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review