Exploring the feasibility to authenticate users of web and cloud services using a brain-computer interface (BCI)

Abstract

Business has come to a point whereby there is a substantial reliance on computing devices. People using machines need to be identified by who they are and not what they know or have. Real identity is the individual. Biometrics is the way to go if this is to be achieved. The biometric is a statistical measurement of biological data; be it physical, chemical or electric. Brain Computer Interface (BCI) is a maturing technology, becoming more affordable, easier to use and integrate with computing devices. With the increasing need of the internet based services (web and cloud services), it has become paramount for identification technologies to get close to natural means of identification, and biometrics offers this mechanism because it is a genuine identity of an individual. Therefore, this work aims to explore the feasibility that computer systems can use brain signals as a biometric method for authentication for web and cloud services users through a brain-computer interface (BCI). Though the main aim of this study is not to create a perfect solution, yet use the prototype as a suggestion to spur and provoke identification mechanisms to catch on in this direction. This study has been validated using the electroencephalography (EEG) scans using the Emotiv’s 5-channel EEG headset and recording devices and the survey of the 52 volunteers participated in the study. As the same brain signals authentication can be used for all services irrespective of service or provider, therefore, it can be an ideal candidate for the Biometrics-as-a-Service (BaaS). The brain scan can be stored once at the BaaS provider and would be used by all service providers for all services. It can also be combined with other authentication methods to have multi-factor authentication (MFA) for improved security.