关键词: 隐式身份认证, 移动终端, 用户行为, 访问控制, 信息安全

Abstract: The implicit authentication for mobile devices transparently and continuously authenticates users by monitoring information such as mobile devices environment and user behavior, which can enhance the availability and security of existing authentication mechanisms. This paper introduces the research of implicit authentication schemes. Firstly, the local and network-based architecture is introduced. Secondly, five types of data collection methods are summarized. Thirdly, user identification classification algorithms are introduced, which based on machine learning and so on. The correctness of each algorithm is analyzed and compared. Finally, two types of access control mechanisms are summarized, and the mimicry attacks and privacy leaks of implicit authentication are discussed.

Key words: implicit authentication, mobile device, user behavior, access control, information security