Behavior-Based Authentication Challenge Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password-based authentication methods are insecure and cumbersome, as users often forget passwords and manual input of security questions can be easily guessed or forgotten, lacking sufficient security for identity verification during password resets.
Innovation Solution
A system that records user behavior history to generate challenges for identity verification, extracting user information from geographic locations, web browsing habits, and device interactions, allowing for secure identity verification without manual input, and enabling users to select question categories based on their behavior.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If simple short questions are used during user registration, then the ease of operation is improved, but the security is worsened
Solution Approach 1:
The system automatically collects user behavior data (geographic locations, browsing history, device interactions) without requiring manual input from users during registration. This self-service approach eliminates the burden of manually entering security information while generating secure, personalized challenges based on the automatically collected behavior patterns.
Solution Approach 2:
The system performs preliminary data collection by recording user behavior history across multiple devices and platforms before the actual authentication event. This advance collection of geographic locations, browsing habits, and device interaction data enables the generation of secure challenges without requiring users to manually prepare security information at the moment of registration.
2Reliability
If a long and complicated password is selected, then the security is improved, but the ease of operation is worsened
Solution Approach 1:
The system replaces the traditional mechanical approach of memorizing complex passwords with an automated behavioral analysis system. Instead of relying on users to remember complicated credential strings, the system substitutes this with automatic collection and analysis of user behavior patterns, generating authentication challenges based on observed behaviors rather than memorized secrets.
3Ease of operation
If manual input of security questions is required, then the ease of operation is improved, but the security is worsened
Solution Approach 1:
The system automatically collects user behavior data without requiring manual input from users. This self-service mechanism eliminates the security vulnerability of manually entered security questions while maintaining ease of operation, as the system autonomously gathers geographic locations, browsing history, and device interaction data to generate authentication challenges.
Solution Approach 2:
The system introduces an intermediary layer of automated behavior analysis between the user and the authentication process. Instead of directly using manually input security questions, the system mediates through automated collection and analysis of user behavior patterns, transforming raw behavior data into secure authentication challenges without requiring users to manually provide security information.
4Reliability
If an extended list of yes-and-no questions is presented, then the security is improved, but the device complexity is worsened
Solution Approach 1:
The system extracts only the essential authentication function from the complex process of manual security question configuration. By automatically collecting user behavior data and generating challenges based on these patterns, the system extracts the core security verification need while eliminating the complexity of managing extended question lists and manual user input processes.
Data Source
AI summary
One embodiment of the present invention provides a system for authenticating a user. During operation, the system records user behavior history at one or more devices associated with the user. The system then extracts user information associated with a place and/or an activity from the recorded user behavior history. The system further generates one or more challenges based on the extracted user information, thereby facilitating the verification of the user's identity.