Context-Aware Authentication System for Mobile Devices Using Behavioral Biometrics and Machine Learning

2026

Full text Open access: Gold Metadata (CSL-JSON)
DOI 10.1016/j.procs.2026.04.140
Data confidence 70 medium
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

Ensuring mobile device security is critically important in the context of increasing threats of unauthorized access to confidential data. Traditional authentication methods, such as password protection, PIN codes, and biometric systems, have significant limitations: they can be compromised through social engineering, brute-force attacks, or bypassed if the device is already unlocked. This paper presents an innovative approach to access control based on continuous analysis of contextual characteristics of user behavior. A cross-platform mobile application based on Flutter framework has been developed, integrated with Firebase cloud infrastructure, which collects, processes, and analyzes behavioral patterns of device owners. The system collects parameters such as temporal usage characteristics, geospatial data, network connection parameters, and device interaction profiles. Based on the collected data, a machine learning model is trained that can identify anomalous device usage patterns in real-time. Experimental validation with 25 volunteers over 30 days, collecting 12,500+ sessions, demonstrated that the Random Forest-based system achieves 93.7% accuracy with F1-score of 0.919 and AUC-ROC of 0.965 in detecting unauthorized access while minimizing false positive triggers to 5.8%.