On authentication factors: "what you can" and "how you do it"
In this paper, we discuss "alternatives" or derivations to the three well known authentication factors: "what you know" (passwords, ...), "what you own" (id-cards, ...), "what you are" (biometrics, ...). We discuss and propose the factors "what you can do" and "how you do it" (mind biometric with behavioral approach). Inspired by statistical learning models, we propose a formal model for these two alternatives and describe a challenge response protocol based on these two factors. We illustrate the potential of the protocol with games unused for such purpose until now and discuss the advantages and drawbacks of our proposal compared to usual implementations of the three well known factors and also how they could complement each other.