Survey of Biometric Authentication for E-assessment
Abstract— Problems of impersonation and other malpractices
of various degrees have continued to mar the electronic-
assessment (e-assessment) of students at various levels. The use of
traditional methods of password and token passing for identity
management and control has failed to provide acceptable solution
to these problems, due to their susceptibility to theft and various
forms of violations. The failure of these and other methods in
identity management has propelled the emergence of different
biometric-based systems as solutions. The biometric systems use
naturally endowed traits which include fingerprint, face, iris,
voice, etc. for more reliable human identification and
authentication. In this paper, various biometric modes are
discussed along with their application within the domain of e-
assessment.
Keywords—E-assessment; Biometrics; Multimodal Biometrics
I. INTRODUCTION
Traditionally, the assessment process has been considered a
high stake process and the inclusion of one or more proctors
throughout the assessment process has been one of the means
of ensuring that the assessment is conducted in a credible
manner. Proctors, also known as invigilators, are present to
address security concerns during an assessment. The C.I.A
(Confidentiality, Integrity, and Availability) security goals [1]
which are meant to prevent the compromise of assets in
computer network systems are applicable to the summative e-
assessment. Apart from the hardware and software used for the
purpose of an e-assessment, the student undergoing the e-
assessment too is an asset and certain threats are posed by this
asset. These threats include, an illegal or unauthorized
candidate taking an e-assessment, the dissimulation of identity
detail, and the abuse, or misuse of authenticity detail [2].
Due to the aforementioned threats posed by a student, the C.I.A.
goals though sufficient to protect hardware and data used for
the e-assessment, will not adequately address the threats posed
by the student; and thus three other goals for the summative e-
assessment process can be deduced [2]:
 Presence – Physical and online presence, which
defines the state of an entity being in a particular
environment.
 Identity – The ability to distinguish one entity from
another
 Authentication – Preventing the misuse of identity
detail.
In an effort to guard against the aforementioned threats and
achieve the goals of Presence, Identity, and Authentication,
several techniques have been proposed with the use of
biometrics for the authentication of learners in an e-assessment.
The main purpose of this paper is to discuss various biometric
modes and their application for e-assessment. This paper is
arranged as follows; Section 2 a general overview of
biometrics, Section 3 biometrics performance measures,
Section 4 multimodal biometrics, Section 5 applications of
biometrics for e-assessment, Section 6 Challenges and open
issues.
II. BIOMETRICS
Historically, human identification of persons has been done
through various means, including visual identification, gait
recognition, fingerprint matching, presentation of access cards,
usernames and passwords, etc. Biometrics is the ability to
identify and authenticate an individual using one or more of
their behavioral or physical or chemical characteristics [3]. A
biometric recognition system relies on who you are or what you
do [4]. Physical biometric characteristics include face,
fingerprint, retina, iris, etc., characteristics. Behavioral
biometric characteristics includes gait recognition, keystroke
dynamics, mouse dynamics, etc. Chemical biometrics
characteristics involves the use of human DNA to identify a
person. A biometric system is a pattern-recognition system. The
biometric system aims to recognize a person based on a feature
vector deduced from physiological or behavioral characteristic
that the person possesses.
Biometrics recognition entails enrollment, authentication or
identification tasks. Enrollment associates an identity with a
biometric characteristic. In verification, an enrolled individual
can proffer an identity and the system will be responsible for
verifying the authenticity of the proffered identity based on his/
her biometric feature. An identification system identifies an
enrolled individual based on their biometric characteristics
without the individual having to claim an identity. Biometric
recognition has become a principal method of human
identification and verification.
Any human traits can serve as a biometric characteristic
provided it satisfies the measurement requirements of:
universality - each person should have the characteristic,
distinctiveness - any two persons should be different in terms
of the characteristic, permanence - the characteristic should not
change drastically over a short period of time, collectability -
the characteristic should be quantitatively measurable, and for
practical purposes, in addition, performance - meet accuracy,
speed, and resource requirements, acceptability - accepted by
the intended population, and circumvention – not easily
hoodwinked [4, 5]. These seven measurement parameters are
used to determine the usefulness of a biometric. For the e-
assessment domain, the most important five of these are
universality, distinctiveness, permanence, collectability, and
circumvention.
Tables 1 and 2 show some physiological biometrics and
behavioral biometrics respectively and how they measured
against these five parameters, on the scale of LOW (L) –
MEDIUM (M) – HIGH (H).
Table 1 Physiological biometric modes rating based on five characteristics [5]
 database, correlation is used. The correlation r can be
determined by equation 1 [8]:

Distinctiveness

Circumvention
Collectability
∑𝑛𝑖=1(𝑘𝑖 ∗ 𝑡𝑖 )

Universality

Permanence
𝑟= (1)
√(∑𝑛𝑖=1(𝑘𝑡2 ) ∗ ∑𝑛𝑖=1(𝑡𝑡2 ))

Biometric Where
𝑘 = 𝑣𝑒𝑐𝑡𝑜𝑟 𝑜𝑓 𝑙𝑒𝑛𝑔𝑡ℎ 𝑛 𝑠𝑡𝑜𝑟𝑖𝑛𝑔 𝑡ℎ𝑒 𝑓𝑙𝑖𝑔ℎ𝑡 𝑡𝑖𝑚𝑒 𝑜𝑓 𝑡ℎ𝑒
Fingerprint H H M M H 𝑠𝑡𝑜𝑟𝑒𝑑 𝑡𝑒𝑚𝑝𝑙𝑎𝑡𝑒
Palmprint H H M M M 𝑡 = 𝑣𝑒𝑐𝑡𝑜𝑟 𝑜𝑓 𝑙𝑒𝑛𝑔𝑡ℎ 𝑛 𝑠𝑡𝑜𝑟𝑖𝑛𝑔 𝑡ℎ𝑒 𝑓𝑙𝑖𝑔ℎ𝑡 𝑡𝑖𝑚𝑒 𝑏𝑒𝑡𝑤𝑒𝑒𝑛
𝑘𝑒𝑦𝑠𝑡𝑟𝑜𝑘𝑒𝑠 𝑜𝑓 𝑎 𝑏𝑖𝑜𝑚𝑒𝑡𝑟𝑖𝑐 𝑠𝑎𝑚𝑝𝑙𝑒
Retina H H H L L
Iris H H H M L B. Mouse dynamics
Face H M M H L Mouse dynamics, like keystroke dynamics, is a behavioral
biometric and is also captured non-intrusively as a learner
interact with the computer (uses the mouse). Any mouse action
Table 2 Behavioural biometric modes rating based on five characteristics [5]
can be classified into one of four categories [9]:
 Mouse-Move – Any general motion of the mouse
Distinctiveness

Circumvention

 Drag-and-Drop – A mouse down action followed

Collectability
Universality

Permanence

by a mouse up action
 Point-and-Click – A mouse motion followed by a
single or double click
Biometric
 Silence – No motion
Signature H M L H M
Mouse actions are measured within 45⁰ angles of a circle.
Gait L M L H L This implies a maximum of 8 directions in which a mouse
Device Use L M L H L movement can occur.

Typing/Keystroke H M L H M Complexities associated with the use of non-standard

Voice H M
Behavioral biometrics generally suffer from low permanence
[6]. A learner’s keystroke dynamics can change drastically
within a short period of time as the learners gets accustomed to
the keyboard being used. Also anxiety or nervousness can have
an effect on the keystroke dynamics during an e-assessment.
These measurement requirements for biometric characteristics
are necessarily to be considered in determining their suitability
for a given application domain.
Next we identify some behavioral and physical biometrics and
discuss how they are used.
A. Keystroke dynamics
The keystroke dynamics biometric aims to obtain biometric
data as a learner types on the computer keyboard. In order to
authentication a learner using the keystroke biometrics the
following metrics are considered: typing speed, keystroke seek
time, flight time, characteristic errors, and characteristic
sequences [7]. The time between keystrokes is known as a
diagraph and is a vital part of the keystroke biometric data. In
matching the keystroke data obtained with templates in a
computer equipment for authentication are eliminated with the
M H M use of keystroke and mouse dynamics.
C. Fingerprint biometrics
The fingerprint is the most widely used biometric [10]. The
fingerprint biometric owes its popularity largely to its
uniqueness. A fingerprint is made up of ridges, furrows and
minutiae [11]. These three contribute to the uniqueness of the
fingerprint.
An array of fingerprint sensors are in use today that are
capable of capturing the fingerprint biometric and authenticating
a person based on analysis of the ridges and furrows which make
the fingerprint distinct. These devices are used for enrolment and
template matching [12]. Electro-optical sensors are used to
capture an image of the fingerprint and can be fitted with light
emitting polymers which can in turn be embedded into devices
such as a mouse [13].
D. Facial biometrics
Previously, facial biometrics relied on 2D images which meant
the individual being authenticated had to face a camera directly
to be able to capture the biometric. Technology has since
evolved enabling cameras to accurately identify individuals in
a crowded area. [14] describes 3D facial recognition as a more
accurate and therefore reliable approach to facial biometrics.
[15] identify some features of the face that is measured by a 3D
facial recognition system which are curves of the eye socket,
curves of the nose, and curves of the chin.
The authentication of a person by facial biometrics is a
nonintrusive process and can be done transparently. The
enrollee may not even be aware that the authentication process
is ongoing [16].
Algorithms have been developed which aim to detect a face and
track features of the face for the purpose of identification and
authentication. The Kanade-Lucas-Tomasi (KLT) algorithm is
one such algorithm. Images of the face can be obtained by a
camera and are represented as vectors.
The facial biometric can be computed by finding the mean
Eigenvector. The Kanade-Lucas-Tomasi (KLT) algorithm is one
such algorithm. Images of the face can be obtained by a camera
and are represented as vectors.
The mean vector of the images being examined is given
equation 2 [17]:
𝑁 In order to implement near absolute security within an
𝜇 = ∑ 𝑥𝑖 (2)
𝑖=1
Where:
𝑋 = (𝑥1 , 𝑥2 , … . , 𝑥𝑖 , … . , 𝑥𝑁 ) represents a 𝑛 × 𝑁 data matrix
N = number of facial images being examined
𝑥𝑖 = a vector with dimension n made up of an 𝑝 × 𝑞 image
𝑛 = 𝑝 × 𝑞.
III. PERFORMANCE MEASUREMENTS
According to [4], Two samples of the same biometric from a
single individual—e.g. two samples of the same fingerprint,
may not be exactly the same due to adverse imaging conditions,
changes in the user’s physiological or behavioral
characteristics, ambient conditions, and the user’s interaction
with the biometric device [4]. Therefore, a biometric matching
system’s typically makes use of a matching score. Usually, a
threshold is used for system decision.
In measuring the accuracy of a biometric system, some of the
metrics used include:
 FAR (False Acceptance Rate) – The number of
authentications granted erroneously over time
 FRR (False Rejection Rate) – The number of valid
biometric data rejected over time.
Given 𝑅 as the number of persons wrongly accepted and 𝑇 the
total number of false matches, FAR can be determined by [18]:
𝑅 biometric modes are used for the authentication process,
𝐹𝐴𝑅 = (3)
𝑇 keystroke dynamics and mouse dynamics; along with the use of
 one physical biometric mode which is facial biometrics.
Given 𝑃 as the number of persons wrongly rejected and 𝑆 as the
total number of correct matches made, FRR can be determined
by [18]:
𝑃
𝐹𝑅𝑅 = (4)
𝑇
The accuracy of the biometric authentication is directly affected
by the values of FAR and FRR. A reduction the FAR and/or
FRR value will improve the accuracy of the biometric
authentication. The percentage accuracy of the biometric
authentication can be calculated by [18]:
𝐹𝐴𝑅 + 𝐹𝑅𝑅
𝐴𝑐𝑐 = (100 − )% (5)
2
Where: 𝐴𝑐𝑐 = 𝑃𝑒𝑟𝑐𝑒𝑛𝑡𝑎𝑔𝑒 𝑎𝑐𝑐𝑢𝑟𝑎𝑐𝑦.
As the size of a biometric database increases, the possibility of a
false rejection or false acceptance also increases [19]. The
accuracy metrics are commonly used in evaluating a biometric
system, for any given application domain, such as e-assessment.
IV. MULTIMODAL BIOMETRICS
information system using biometric features, it is necessary to
combine several different biometric traits, either those
belonging to one type only or those already presenting a
combination of both types mentioned [9].
Biometric systems can be either unimodal or multimodal.
Multimodal biometric system is the use of two or more
biometric modes for recognition, while a unimodal biometric
system only employs one biometric mode for verification
and/or identification. Multimodal biometric systems are more
noise resistant and less susceptible to spoofing [20].
Minimizing noise and the risk of spoofing is of great
importance given the high stake environment of an e-
assessment. Having multiple biometric modes raises the
question of how authentication can be done based on the inputs
from the multiple biometric sensors, that is, how the fusion of
results from the multiple biometric modes can be done in an
effort to authenticate a person. Biometric systems generally
consist of four modules, which are, the sensor module that
obtains the biometric data, the feature extraction module that
obtains features sets from the raw biometric data, the matching
module that generates matching scores based on comparisons
between the features sets ant the stored templates, and lastly the
decision module that authenticates a person based on the
matching scores. Fusion can take place in the level of any of
these four modules [12].
V. APPLICATION OF BIOMETRICS FOR E-ASSESSMENT
[21] propose a model for continuous authentication of
learners in a virtual classroom environment. Two behavioral
Authentication for each mode is designed as a subsystem which
independently performs authentication of a learner. Fusion of
the results of the individual subsystems is done by applying a
logical AND to all three results.
[9] employ the use of fingerprint biometrics and mouse
dynamics biometrics in proposing a multimodal, nonintrusive
biometric approach to enrolling and authenticating learners
during an e-assessment. Five factors are taken into account
which makes up the mouse dynamics: Mouse movement speed,
movement direction, action type, travel distance, and elapsed
time. The mouse is equipped with ta fingerprint sensor used for
obtaining the fingerprint biometric.
[7] propose a bimodal biometric model for e-assessments;
particularly for non-proctored environments. The model
involves integrating with various systems including the e-
assessment system. Fingerprint biometrics, keystroke dynamics
as well as video monitoring are used for the authentication
process. The authentication process provides for transparent
authentication of learners. In measuring the keystroke
biometric, five metrics were considered: typing speed,
keystroke seek time, flight time, characteristic errors, and
characteristic sequences.
VI. CONCLUSION AND RECOMMENDATION
In this paper, various biometric modes were discussed and
their application within the domain of e-assessments. Given the
continued adoption of e-assessments globally, more research
needs to be conducted to increase the accuracy of biometric
authentication and the protection of a biometric system from
circumvention.
REFERENCES
[1] A. Simmonds, P. Sandilands, and L. van Ekert, "An
ontology for network security attacks," in Applied
Computing, ed: Springer, 2004, pp. 317-323.
[2] K. M. Apampa, G. Wills, and D. Argles, "Towards
security goals in summative e-assessment security," in
Internet Technology and Secured Transactions, 2009.
ICITST 2009. International Conference for, 2009, pp.
1-5.
[3] K. Rabuzin, M. Baca, and M. Sajko, "E-learning:
Biometrics as a Security Factor," in Computing in the
Global Information Technology, 2006. ICCGI '06.
International Multi-Conference on, 2006, pp. 64-64.
[4] S. Prabhakar, S. Pankanti, and A. K. Jain, "Biometric
recognition: security and privacy concerns," Security
& Privacy, IEEE, vol. 1, pp. 33-42, 2003.
[5] H. A. Crawford, "A framework for continuous,
transparent authentication on mobile devices,"
University of Glasgow, 2012.
[6] P. S. Teh, A. B. J. Teoh, and S. Yue, "A survey of
keystroke dynamics biometrics," The Scientific World
Journal, vol. 2013, 2013.
[7] Y. W. Sabbah, I. A. Saroit, and A. M. Kotb, "A Smart
Approach for Bimodal Biometric Authentication in
Home-Exams (SABBAH Model)," Biometrics and
Bioinformatics, vol. 4, pp. 32-45, 2012.
[8] E. Flior and K. Kowalski, "Continuous biometric user
authentication in online examinations," in Information
Technology: New Generations (ITNG), 2010 Seventh
International Conference on Information Technology,
2010, pp. 488-492.
[9] S. Asha and C. Chellappan, "Authentication of e-
learners using multimodal biometric technology," in
Biometrics and Security Technologies, 2008. ISBAST
2008. International Symposium on, 2008, pp. 1-6.
[10] R. Saini and N. Rana, "Comparison of Various
Biometric Methods," International Journal of
Advances in Science and Technology (IJAST), vol. 2,
2014.
[11] D. Kumar and Y. Ryu, "A brief introduction of
biometrics and fingerprint payment technology,"
International Journal of advanced science and
Technology, vol. 4, pp. 25-38, 2009.
[12] A. Ross and A. K. Jain, "Multimodal biometrics: An
overview," in Signal Processing Conference, 2004
12th European, 2004, pp. 1221-1224.
[13] X. Xia and L. O'Gorman, "Innovations in fingerprint
capture devices," Pattern Recognition, vol. 36, pp.
361-369, 2003.
[14] S. Thorat, S. Nayak, and J. P. Dandale, "Facial
recognition technology: An analysis with scope in
India," arXiv preprint arXiv:1005.4263, 2010.
[15] H. Garg and S. Singh, "A Review Paper on Facial
Recognition," International Journal of Enhanced
Research in Science Technology & Engineering, vol.
3, pp. 80-85, 2014.
[16] T. O. Majekodunmi and F. E. Idachaba, "A Review of
the Fingerprint, Speaker Recognition, Face
Recognition and Iris Recognition Based Biometric
Identification Technologies," 2011.
[17] X. Lu, "Image analysis for face recognition," personal
notes, May, vol. 5, 2003.
[18] J. Malik, D. Girdhar, R. Dahiya, and G. Sainarayanan,
"Reference Threshold Calculation for Biometric
Authentication," International Journal of Image,
Graphics and Signal Processing (IJIGSP), vol. 6, p.
46, 2014.
[19] T. Dunstone and N. Yager, Biometric system and data
analysis: Design, evaluation, and data mining:
Springer Science & Business Media, 2008.
[20] A. Mishra, "Multimodal biometrics it is: need for
future systems," International journal of computer
applications, vol. 3, pp. 28-33, 2010.
[21] M. K. Dehnavi and N. P. Fard, "Presenting a
multimodal biometric model for tracking the students
in virtual classes," Procedia-Social and Behavioral
Sciences, vol. 15, pp. 3456-3462, 2011.