BreathPrint: Breathing acoustics-based user authentication

• Main Authors: CHAUHAN, Jagmohan, HU, Yining, SEREVIRATNE, Suranga, MISRA, Archan, SEREVIRATNE, Aruna, LEE, Youngki
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2017
• Subjects: Authentication; Breathing gestures; Security; Usability; Databases and Information Systems; Information Security; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/3792; https://ink.library.smu.edu.sg/context/sis_research/article/4794/viewcontent/mobisys17_paper18_av.pdf
• Institution: Singapore Management University

We propose BreathPrint, a new behavioural biometric signature based on audio features derived from an individual's commonplace breathing gestures. Specifically, BreathPrint uses the audio signatures associated with the three individual gestures: sniff, normal, and deep breathing, which are sufficiently different across individuals. Using these three breathing gestures, we develop the processing pipeline that identifies users via the microphone sensor on smartphones and wearable devices. In BreathPrint, a user performs breathing gestures while holding the device very close to their nose. Using off-the-shelf hardware, we experimentally evaluate the BreathPrint prototype with 10 users, observed over seven days. We show that users can be authenticated reliably with an accuracy of over 94% for all the three breathing gestures in intra-sessions and deep breathing gesture provides the best overall balance between true positives (successful authentication) and false positives (resiliency to directed impersonation and replay attacks). Moreover, we show that this breathing sound based biometric is also robust to some typical changes in both physiological and environmental context, and that it can be applied on multiple smartphone platforms. Early results suggest that breathing based biometrics show promise as either to be used as a secondary authentication modality in a multimodal biometric authentication system or as a user disambiguation technique for some daily lifestyle scenarios.