Behavior-Based Authentication for Touch Screen Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for touch screen devices are vulnerable to attacks, as they rely on static passwords or geometric patterns that can be easily compromised, especially in public settings, and do not account for the unique behavior of users when inputting data.
Innovation Solution
A behavior-based authentication method that captures and analyzes the unique behavioral features of users, such as stroke time, inter-stroke time, displacement magnitude, displacement direction, pressure, velocity magnitude, and velocity direction, to differentiate legitimate users from imposters without requiring additional hardware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If static passwords or geometric patterns are used for authentication, then the authentication process is simple and easy to implement, but the security is weak and vulnerable to attacks
Solution Approach 1:
The patent transforms static authentication (fixed passwords/patterns) into dynamic authentication by capturing temporal behavior characteristics during the authentication process. The system measures stroke time, inter-stroke time, displacement magnitude, velocity, and acceleration in real-time, creating a dynamic authentication model that adapts to each user's unique movement patterns, thereby significantly improving security while maintaining ease of use.
Solution Approach 2:
The patent changes the authentication parameters from static values (password strings, geometric patterns) to dynamic temporal parameters (stroke time, inter-stroke time, velocity, acceleration). By measuring these temporal characteristics during the authentication gesture, the system creates a more secure authentication mechanism that is difficult to replicate, while the user interface remains simple and easy to operate.
2Loss of time
If traditional authentication methods are used, then the device can be accessed quickly, but attackers can easily spy on or extract passwords and patterns
Solution Approach 1:
The system implements dynamic authentication by capturing temporal behavior characteristics (stroke time, inter-stroke time, velocity, acceleration) during the authentication gesture. This dynamic approach maintains quick authentication access while making the process resistant to spying and attacks, as the temporal patterns are unique to each user and difficult to observe or replicate.
Solution Approach 2:
The patent introduces behavioral temporal characteristics as an intermediary layer between the user's authentication gesture and the authentication verification. Instead of directly verifying passwords or patterns, the system measures and compares temporal behavior parameters, creating a secure intermediary mechanism that protects against spying and extraction attacks while maintaining authentication speed.
3Reliability
If behavior based authentication is implemented, then security is significantly enhanced, but the authentication process becomes more complex
Solution Approach 1:
The system implements self-service authentication by automatically capturing and analyzing temporal behavior characteristics during the user's natural interaction with the device. The authentication process requires no additional user actions or awareness beyond performing the authentication gesture, as the system autonomously measures stroke time, inter-stroke time, velocity, and acceleration, thereby maintaining simplicity despite enhanced security.
Solution Approach 2:
The patent merges the authentication verification process with the user's natural interaction gestures. By combining the authentication gesture with temporal behavior measurement, the system eliminates the need for separate authentication steps, making the process appear simple to users while implementing complex security verification through integrated behavioral analysis.
4Reliability
If additional hardware is used for biometric authentication, then security is improved, but the device cost and complexity increase
Solution Approach 1:
The patent replaces mechanical/biometric hardware systems (fingerprint sensors, facial recognition cameras) with a software-based temporal behavior analysis system. By substituting physical hardware with computational analysis of temporal characteristics from existing touch input, the system achieves enhanced security without adding hardware complexity or cost.
Solution Approach 2:
The system creates a behavioral copy or model of each user's temporal authentication patterns through training phases. This behavioral model serves as a digital replica that can be verified during authentication without requiring physical biometric hardware, thereby achieving security comparable to biometric systems while avoiding additional hardware complexity.
Data Source
AI summary
A method, system, and one or more computer-readable storage media for behavior based authentication for touch screen devices are provided herein. The method includes acquiring a number of training samples corresponding to a first action performed on a touch screen of a touch screen device, wherein the first action includes an input of a signature or a gesture by a legitimate user. The method also includes generating a user behavior model based on the training samples and acquiring a test sample corresponding to a second action performed on the touch screen, wherein the second action includes an input of the signature or the gesture by a user. The method further includes classifying the test sample based on the user behavior model, wherein classifying the test sample includes determining whether the user is the legitimate user or an imposter.