Behavioral Authentication via Mobile Sensor Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication methods for mobile, portable communication systems, such as PINs and passwords, are either easily forgotten or insecure, and they do not effectively utilize user behavior for authentication, which can lead to unauthorized access to storage systems.
Innovation Solution
A behavior-based authentication method that uses sensors in mobile devices to collect data on user behavior, such as gross and fine motor movements, application usage, and biometric data, to generate a classification result that determines authentication without the need for PINs or passwords, ensuring secure access to storage systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional authentication methods (PIN, password) are used, then authentication can be performed, but security is compromised or user convenience deteriorates due to remembering complex credentials
Solution Approach 1:
The patent replaces manual authentication mechanisms (typing PINs or passwords) with automated sensor-based detection systems. Sensors capture behavioral data (typing patterns, touchscreen interactions, device handling) and automatically analyze this data to authenticate users, eliminating the need for users to consciously provide authentication credentials while maintaining high security through multi-parameter behavioral analysis
Solution Approach 2:
The system performs self-authentication by automatically collecting and analyzing behavioral data without requiring active user participation. The sensors continuously monitor user behavior, and the system autonomously compares this data against stored behavioral profiles to determine authentication status, making the process transparent and convenient for users while maintaining security
2Ease of operation
If behavioral authentication is implemented, then user convenience is improved by eliminating password memory, but system complexity increases due to sensor integration and data processing
Solution Approach 1:
The patent leverages existing multi-functional mobile devices that already contain sensors for other purposes (accelerometers for screen orientation, microphones for calls, touchscreens for interaction). These same sensors are repurposed to capture behavioral authentication data, avoiding the need for dedicated authentication hardware and reducing overall system complexity while enabling convenient behavioral authentication
Solution Approach 2:
The system combines multiple sensor data streams (motion sensors, touchscreen controllers, microphones) into a unified behavioral authentication framework. By merging these existing functional components and their data sources into a single authentication system, the patent reduces the need for separate dedicated systems while achieving comprehensive behavioral analysis for secure authentication
Data Source
Figure 1
Figure 2
Figure 3a~3b
AI summary
The invention relates to a method for authenticating a current user of a mobile, portable communication system (100) to a storage system (150) by means of behavior-based authentication. The communication system (100) has at least one sensor (110) for acquiring user-related data (500), wherein the user-related data includes information regarding the user's behavior. The storage system (150) comprises at least one memory (152).The procedure comprises: - Generating a classification result (600) using user-related data for behavior-based authentication, - Evaluating the classification result (600) to authenticate the user, wherein the evaluation includes checking whether the classification result (600) meets a predefined test criterion (800), where successful authentication includes meeting the test criterion, - Generating an authentication signal based on the result of the evaluation of the classification result and sending the authentication signal to the storage system (150), - Obtaining access to the memory (152) of the storage system (150) if the authentication signal indicates successful authentication of the user.