Behavior Analysis System for Unauthorized Access Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing systems fail to effectively differentiate between authorized and unauthorized user access, particularly in scenarios where malicious individuals exploit multiple devices and sessions to compromise user accounts, leading to issues like spamming.

Innovation Solution

A method and system that analyze user behavior models across multiple communication sessions, comparing device-specific and user-device interaction parameters to identify deviations from authorized patterns, thereby restricting access or functionality in potentially unauthorized sessions while allowing unaffected sessions to continue uninterrupted.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication methods are used to verify user identity, then user access is granted based on credentials, but unauthorized users can still compromise accounts by exploiting multiple devices and sessions

Engineering Contradiction:

Improveuser authentication reliabilityVSAvoidunauthorized access risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system continuously monitors user behavior during communication sessions and feeds this information back to dynamically adjust authentication decisions. Behavior models are updated in real-time based on observed interactions, allowing the system to detect and respond to unauthorized access attempts while maintaining reliable access for legitimate users.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

A behavior analysis intermediary layer is introduced between traditional credential authentication and access granting. This intermediary analyzes user behavior patterns, device characteristics, and session dynamics to determine whether to allow or restrict access, effectively mediating between simple credential verification and complex security requirements.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If strict security measures are implemented to block unauthorized access, then security is improved, but legitimate user activities may be disrupted

Engineering Contradiction:

Improveunauthorized access preventionVSAvoidlegitimate user experience

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The system applies different security measures to different communication sessions associated with the same user account. Instead of uniformly blocking or allowing all sessions, it analyzes behavior models for each session individually and applies restrictions only to sessions exhibiting unauthorized patterns, leaving legitimate sessions unaffected.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

Security restrictions are dynamically adjusted based on real-time behavior analysis rather than being static. The system continuously monitors user interactions and adapts access control decisions accordingly, allowing legitimate users to experience minimal disruption while effectively blocking unauthorized access attempts.

Inventive Principle:

Principle #15Dynamics

3Measurement precision

If behavior analysis is performed across multiple sessions to detect unauthorized access, then detection accuracy is improved, but system complexity increases

Engineering Contradiction:

Improveunauthorized access detection accuracyVSAvoidsystem architecture complexity

Core Design Contradiction:

Measurement precisionVSDevice complexity

Solution Approach 1:

The behavior analysis system is segmented into modular components that process different aspects of user behavior independently. Each communication session has its own behavior model that can be generated and analyzed separately, allowing the system to scale efficiently while maintaining high detection accuracy across multiple sessions.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS9871813B2Method of and system for processing an unauthorized user access to a resource

Publication Date: 2018.01.16 Y E HUB ARMENIA LLC

AI summary

There is provided a method of processing a potentially unauthorized user access request. The method is executable on a server. The method comprises: receiving a first session identifier associated with a first communication session associated with a user account; receiving a second session identifier associated with a second communication session associated with the user account; based on user behavior within the first communication session, generating a first user behavior model associated with the first communication session; based on user behavior within the second communication session, generating a second user behavior model associated with the second communication session; responsive to one of the first user behavior model and the second user behavior model being different from a stored authorized user behavior model associated with the user account, restricting user activity within the respective one of the first communication session and the second communication session.