Providing continuous authentication and non-repudiation security services

Secure user authentication is a crucial service for many systems and applications, especially when the data stored and the functionalities offered are highly confidential or critical. In those situations, traditional, single-occurrence, authentication mechanisms can be inadequate to face intrusions: no checks are performed after login, and even if they were repeated, frequently asking for passwords or secrets would reduce system usability. Biometric continuous authentication, instead, is emerging as viable alternative that can guarantee reliable and transparent verification for the whole session: the traits can be repeatedly acquired without the user active participation. In addition, another security service that it can offer is non-repudiation, thus providing irrefutable evidence of system usage, hard-or better, impossible-to deny. The paper focuses on biometric continuous authentication and non-repudiation, and it presents a preliminary solution based on a specific case study. This article constitutes the current research direction of the author and describes challenges and the future works that the student aims to perform in the next years.