Behavioral Authentication via Posture and Field of View

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current authentication methods are vulnerable to falsification and inconvenience, as passwords can be compromised, physical devices can be lost or stolen, and biometrics can be replicated, leading to potential unauthorized access, especially when users disable additional authentication levels for convenience.

Innovation Solution

A method that utilizes behavioral analytics to monitor and analyze user location, field of view, and posture through digital images from cameras and GPS data, creating patterns for each application access, determining whether future attempts are consistent with derived patterns to implement necessary authentication levels and restrict access accordingly.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multi-factor authentication is implemented, then security reliability is improved, but device complexity and user inconvenience increase

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system automatically performs behavioral analysis and authentication level adjustments without requiring user intervention. The computing device itself monitors user behavior patterns, location data, and device usage to dynamically determine authentication requirements, eliminating the need for users to manually configure security settings or remember complex authentication protocols.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system dynamically changes authentication parameters based on real-time behavioral analysis. Authentication levels are adjusted by modifying parameters such as required verification factors, monitoring intensity, and access restrictions based on detected user behavior patterns, location consistency, and device usage characteristics.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If additional authentication levels are required, then security reliability is improved, but ease of operation deteriorates

Engineering Contradiction:
Improveaccess securityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The authentication system dynamically adjusts its requirements based on real-time behavioral analysis. Instead of static multi-factor authentication, the system continuously monitors user behavior patterns, location data, and device usage to adaptively determine the appropriate authentication level, making the system flexible and responsive to current conditions.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system implements continuous feedback loops where user behavior is monitored, analyzed, and used to adjust authentication requirements. Behavioral data from previous interactions feeds into the authentication decision process, allowing the system to learn from user patterns and adjust security measures accordingly, providing both security and convenience.

Inventive Principle:
Principle #23Feedback

3Measurement precision

If behavioral monitoring is implemented, then measurement precision of user behavior is improved, but loss of information and privacy increases

Engineering Contradiction:
Improvebehavioral pattern accuracyVSAvoiduser data privacy
Core Design Contradiction:
Measurement precisionVSLoss of information

Solution Approach 1:

The system applies different levels of monitoring precision to different aspects of user behavior. Sensitive personal information receives enhanced protection and anonymization, while less sensitive behavioral patterns are monitored with appropriate precision. The monitoring intensity and data collection granularity are adjusted locally based on the sensitivity and relevance of each data type.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS11134079B2Cognitive behavioral and environmental access
Publication Date: 2021.09.28 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US11134079B2 patent drawing
  • US11134079B2 patent drawing
  • US11134079B2 patent drawing

AI summary

In an approach, a computer identifies a user attempting to access information that requires authentication approval via a computing device. The computer receives one or more digital images from the computing device. The computer determines a current field of view of the computing device based on the received one or more digital images. The computer determines a current location of the user. The computer determines a current posture of the user. The computer determines whether at least one of the current field of view, the current location, and the current posture during a current attempt to access information matches one or more of a previous field of view of the computing device, a previous location of the user, and a previous posture of the user during a previous attempt to access the information. Based on the determination, the computer performs an action related to the user accessing the information.