7 ms·

Show HN: Typing.ai – Secure typing biometrics authentication API

9 points by raresp 5y ago

Hello HN, I am Rares, the founder of Typing AI (https://typing.ai https://typing.ai). Typing AI is a typing biometrics authentication API that identifies users by the way they type using Artificial Intelligence. After seeing several hacked sites we came to the conclusion that any application, any database and any code can be hacked. We realized that most security breaches are due to poorly implemented authentication. This project uses Artificial Intelligence in order to detect the typing pattern by checking the keystroke dynamics. A unique typing ID is generated for each user. There are lots of peoples who tested the API and the accuracy level is over 99.9%. Our typing biometrics API can be easily integrated in web, desktop and mobile apps using any programming language. We're targeting big companies such as banks and top 500 businesses, because the API allows us to offer enterprise grade security. The biggest problem in the banking and fintech world right now is the security of the sensitive data. A data breach can lead to bankruptcy. Due to the Covid 19 pandemics, schools and colleges were forced to take exams online, some of our customers are educational organizations such as state and private schools, colleges, online courses and webinar platforms. We are a remote team of 5 members split across Romania, Croatia, Bangladesh and India. Typing AI Biometrics j.d.o.o. is a company registered in the Republic of Croatia. The company is accelerated by Fil Rouge Capital, the leading Croatian VC. By eliminating passwords, businesses can immediately reduce churn and cart abandonment and provide superior security for personal data. We have transformed authentication, making it faster, simpler and better! That's why we are helping more and more developers and businesses to secure web, mobile and desktop applications using typing biometrics authentication based on Artificial Intelligence and Machine Learning. We have a Freemium Software as a Service (SaaS) business model and our monthly paid plans range from $21 to over $2000, depending on the number of user identity checks (monthly API calls). Our API can handle millions of API calls per hour (we paid for application load testing). We have over 1000 nonpaying monthly active users. Our biggest customer has over 1 000 000 registered users and is based in the United States of America. This company is an online teaching platform that offers courses for driving, flying, snorkeling and scuba diving. You can reach us on our official website: https://typing.ai https://typing.ai Please share your feedback and ask me anything, thanks!

emaro 5y ago
Interesting. Since I'm on my phone right know i wonder about mobile support. I suppose it's desktop only? Does it work as well if I'm in a hurry or type the phrase just with one hand? How long is the phrase and would it work with arbitrary text as well (I'm thinking of authenticating while typing a post/comment somewhere)?
- raresp 5y ago
  Thanks for your questions. We provide both desktop and mobile support. But you will have different typing signatures in this case, one for mobile and one for desktop usage. The mobile typing is totally different than the computer keyboard typing. In order to guarantee strong security, we recommend you to use at least 8 characters for the signature (our competitors ask for over 160 characters). You can use an email address, a word, multiple words, a password. The longer your signature text is, the stronger will be the typing ID. To allow the keystroke detection to work with arbitrary text you will have to submit multiple sentences in order to cover the entire alphabet. This case is also covered, but most of our users are defining the signature texts and they always use that text. Typing AI is using a machine learning algorithm and it learns from previous detections, this is one of our advantages against the competition, we can easily cover the case described by you: "I'm thinking of authenticating while typing a post/comment somewhere".
mritchie712 5y ago
Genuinely curious, who here would want this as an authentication method for a service you use and why? I've seen a couple companies doing this and I just don't get it.
- ChicagoBoy11 5y ago
  The one context where I've seen something like this that I thought was interesting was in an online MOOC. Presumably it would be trivial to give your account credentials to someone else in order to have them pass a quiz/test on the platform for you, or to write our essay. They used something similar to match the typing pattern compared to some other sample that had been taken when identity was verified off-band, so then in subsequent submissions of writing samples in the platform, they could have more confidence that it was submitted by the original student.

9 points by raresp 5y ago

emaro 5y ago

Interesting. Since I'm on my phone right know i wonder about mobile support. I suppose it's desktop only? Does it work as well if I'm in a hurry or type the phrase just with one hand? How long is the phrase and would it work with arbitrary text as well (I'm thinking of authenticating while typing a post/comment somewhere)?

raresp 5y ago
Thanks for your questions. We provide both desktop and mobile support. But you will have different typing signatures in this case, one for mobile and one for desktop usage. The mobile typing is totally different than the computer keyboard typing. In order to guarantee strong security, we recommend you to use at least 8 characters for the signature (our competitors ask for over 160 characters). You can use an email address, a word, multiple words, a password. The longer your signature text is, the stronger will be the typing ID. To allow the keystroke detection to work with arbitrary text you will have to submit multiple sentences in order to cover the entire alphabet. This case is also covered, but most of our users are defining the signature texts and they always use that text. Typing AI is using a machine learning algorithm and it learns from previous detections, this is one of our advantages against the competition, we can easily cover the case described by you: "I'm thinking of authenticating while typing a post/comment somewhere".

mritchie712 5y ago

Genuinely curious, who here would want this as an authentication method for a service you use and why? I've seen a couple companies doing this and I just don't get it.

ChicagoBoy11 5y ago
The one context where I've seen something like this that I thought was interesting was in an online MOOC. Presumably it would be trivial to give your account credentials to someone else in order to have them pass a quiz/test on the platform for you, or to write our essay. They used something similar to match the typing pattern compared to some other sample that had been taken when identity was verified off-band, so then in subsequent submissions of writing samples in the platform, they could have more confidence that it was submitted by the original student.