> Even though one could have similar typing style, I doubt that it is always the same on every keyboard.
Several numbers can be used to describe "typing style". Some of those numbers are remarkably consistent.
In other respects, you end up with two profiles, ie John on his iPad" and "John at his desk".
Those match up with other parameters like OS patch lvel, browser version, plugins, etc. You, on your ipad,
type in a certain way, on a certain version of the device, using a certain browser with certain plugins, etc.
Most likely, the identity thief is in a different country, using a different browser on a different patch level, and types differently.
So we can say "John should be either type at about interval 52 iPhone 2 in Idaho on AT&T, or type about 78 on a HP desktop connecting with Comcast, again in Idaho.
> If this authentication system can detect that, it is great; otherwise, it could be a big failure instead.
For Strongbox, this aspect is neither perfect nor a failure, but is one parameter that's considered. Very much like considering someone's height and weight when trying to recognize your spouse. You can see someone from far away and if the height and weight don't match, that's not your spourse. If the height matches, the weight matches, the skin tone matches, the clothing style matches, the hair length matches, the hair color matches, the hair style (curly, straight, etc.) matches, and she says "hey baby", that's probably your spouse.