Behavioral Biometric Authentication for Anomaly Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing computing systems lack effective security measures to prevent unauthorized access when abnormal usage patterns are detected across multiple applications or services.

Innovation Solution

Implementing a biometric authentication system that requires users to provide biometric data, such as voice, facial, or fingerprint data, when abnormal usage patterns are detected, thereby ensuring authorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If biometric authentication is required when abnormal usage patterns are detected, then security is improved, but user convenience deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary monitoring of usage patterns across multiple applications and services to detect abnormal behavior before it can cause harm. By establishing baseline usage patterns and continuously comparing current usage against these baselines, the system can proactively trigger biometric authentication when anomalies are detected, preventing security breaches before they occur.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback by continuously monitoring usage patterns, comparing them against established baselines, and adjusting authentication requirements accordingly. When abnormal patterns are detected, the system triggers additional biometric verification, creating a closed-loop security system that adapts to user behavior and maintains security while minimizing unnecessary authentication friction.

Inventive Principle:
Principle #23Feedback

2Difficulty of detecting and measuring

If usage patterns are monitored across multiple applications and services, then detection capability is improved, but system complexity increases

Engineering Contradiction:
Improvedetection capabilityVSAvoidsystem complexity
Core Design Contradiction:
Difficulty of detecting and measuringVSDevice complexity

Solution Approach 1:

The authentication engine is designed as a universal system that handles multiple functions: monitoring usage patterns across diverse applications and services, detecting abnormal behavior, and managing biometric authentication. By consolidating these functions into a single multi-functional engine, the system achieves comprehensive detection capability without proportionally increasing overall system complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system creates a virtual copy or model of normal usage patterns for each application and service, storing baseline data that represents typical user behavior. By comparing actual usage against these copied baseline patterns, the system can detect anomalies without needing to analyze every possible interaction in detail, simplifying the detection process while maintaining high accuracy.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS12292951B2Biometric authentication based on behavioral analysis
Publication Date: 2025.05.06 BANK OF AMERICA CORP
  • US12292951B2 patent drawing
  • US12292951B2 patent drawing
  • US12292951B2 patent drawing

AI summary

A heightened level of security is provided in a computing platform by monitoring usage of applications and/or services residing on or accessible to a computing platform to determine abnormal usage patterns. In response to determining an abnormal pattern of usage, the user is required to provide biometric data, such as voice data, facial feature data, fingerprint data or the like, as a means of authenticating the user. The abnormal pattern of usage may be determined dynamically by comparing current usage patterns to known user baseline usage patterns. Alternatively, the abnormal pattern of usage is predefined, such as the resetting of passwords in a predefined number of applications and/or services over a predefined period of time.