Behavior-Based Mobile Authentication with Dynamic Security Levels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for sensitive information and services often require multiple types of authentication, which can be burdensome for legitimate users, necessitating a solution that provides enhanced protection while minimizing user burden.
Innovation Solution
The method involves collecting and analyzing user behavior data over time to create a baseline, comparing it to current behavior, and modifying the authentication procedure based on differences to adjust the level of authentication required, potentially using mobile devices with sensors to track location, activities, and commercial transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple authentication types are required for sensitive information, then security protection is improved, but user burden and authentication complexity increase
Solution Approach 1:
The system automatically collects user behavior information through sensors and devices without requiring user input, and automatically performs authentication decisions based on the collected data. This eliminates the need for users to manually provide multiple authentication factors while maintaining security through continuous background monitoring of behavior patterns.
Solution Approach 2:
The authentication requirement dynamically changes based on the user's behavior patterns. When behavior is consistent with the baseline, authentication is simplified or eliminated. When behavior deviates from the baseline, authentication requirements are automatically increased. This allows the system to adapt security levels in real-time without imposing constant burden on users.
2Reliability
If multiple authentication types are required for sensitive information, then security protection is improved, but authentication procedure complexity increases
Solution Approach 1:
The system extracts authentication decisions from manual multi-factor authentication procedures and replaces them with automated behavior analysis. By taking out the complex authentication workflow and substituting it with continuous background monitoring and automated decision-making, the system maintains security while eliminating procedural complexity.
Solution Approach 2:
The system continuously monitors user behavior and provides feedback to dynamically adjust authentication requirements. This closed-loop system automatically responds to behavior changes, allowing the authentication procedure complexity to vary based on actual security needs rather than being statically high for all access attempts.
3Measurement precision
If behavior monitoring is continuously performed, then authentication accuracy is improved, but energy consumption and processing load increase
Solution Approach 1:
Instead of continuous monitoring, the system performs behavior analysis at periodic intervals or triggered by specific events. Sensors collect data continuously but analysis is performed periodically, and authentication decisions are made only when necessary. This reduces energy consumption while maintaining authentication accuracy through strategic sampling of behavior data.
Data Source
AI summary
Authentication involves collecting information relating to a user's behavior relative to a mobile device carried by the user, over a number of time periods that correspond to each other. An authentication technique includes processing the collected information to generate baseline data representing typical user behavior. The authentication technique includes collecting additional information relating to the user's behavior relative to the mobile device over another time period that corresponds to the time periods used to generate the baseline data. The additional information relating to the user's behavior is compared to the baseline data, and a difference between the additional information and the baseline data is determined. An authentication procedure is then applied based on the difference. The authentication may be performed by a mobile device such as a smartphone.