Biometrics using inherited characteristics are frequently used in security systems. An alternative metric is user behaviour. Examples of user behaviour are the set of web pages accessed over a number of Internet sessions, or, the set of television programmes viewed by an individual over a number of days. A mathematical framework is developed which enables simple and robust identification algorithms based on this kind of user behaviour to be presented.