Behavioral Biometric Authentication for Mobile Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identification systems rely on static credentials that can be hijacked or forged, and they authenticate credentials rather than the person presenting them, leading to vulnerabilities in both physical and cyber security, particularly in establishing the identity of individuals.
Innovation Solution
A device that captures and monitors human traits through sensors, using machine learning to determine if the user in possession is the rightful owner, providing a unique, real-time authentication method that is difficult to impersonate, by analyzing a combination of physical, physiological, environmental, and biometric data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static credentials (passwords, tokens, biometric data) are used for authentication, then the authentication process is simple and fast, but the credentials can be hijacked, forged, or stolen, compromising security
Solution Approach 1:
The patent transforms static credentials into dynamic authentication by continuously monitoring multiple behavioral traits (typing rhythm, swipe patterns, device handling) that change over time. The system establishes baseline patterns during a learning phase and compares real-time behavior against these dynamic baselines, making authentication adaptive rather than static. This resolves the contradiction by maintaining security through continuous verification without requiring complex cryptographic protocols.
Solution Approach 2:
The system changes the parameters being authenticated from fixed credentials to variable behavioral characteristics. Instead of verifying a static password or biometric template, the system monitors temporal parameters (typing speed variations, pause durations), spatial parameters (device orientation, movement trajectories), and interaction patterns that naturally vary with each user session. This parameter transformation maintains security while simplifying the authentication interface.
2Measurement precision
If multiple sensors and machine learning algorithms are deployed to accurately identify the rightful user, then authentication accuracy improves, but device complexity and computational requirements increase
Solution Approach 1:
The patent segments the authentication process into distinct functional modules: sensor data acquisition, feature extraction, pattern matching, and decision-making. Each module handles specific aspects of behavioral analysis independently, allowing the system to process multiple traits without creating a monolithic complex system. The segmentation enables incremental implementation and simplifies debugging while maintaining high identification accuracy.
Solution Approach 2:
The system uses universal sensors already present in modern devices (accelerometers, gyroscopes, touch screens, microphones) for multiple authentication purposes. The same sensors that capture device motion also detect typing patterns, and the same microphone used for voice calls captures typing sounds. This multi-functionality approach achieves high measurement precision without adding dedicated complex hardware for each measurement type.
3Reliability
If continuous monitoring of human traits is performed to verify user identity in real-time, then security against impersonation improves, but energy consumption and processing load increase
Solution Approach 1:
The system implements periodic sampling of behavioral traits rather than continuous monitoring. It captures authentication-relevant data at specific intervals (e.g., during typing pauses, between swipes, at application transitions) when behavioral patterns are most informative. This periodic approach maintains verification reliability by capturing sufficient behavioral evidence while significantly reducing the energy burden compared to truly continuous monitoring.
Solution Approach 2:
The system monitors more behavioral traits than strictly necessary for basic authentication, capturing comprehensive behavioral fingerprints including typing patterns, scrolling behavior, device orientation changes, and application usage patterns. This excessive monitoring approach enhances security reliability by having multiple independent verification signals, while the system only processes the minimum subset needed for each authentication decision, optimizing energy usage.
Data Source
AI summary
A method and system determines a probability that a mobile device is in use by a first user. Sensors of a mobile device are used to detect and quantify human activity and habitual or behavior traits. A collection of such habitual human trait values identifying a first user of the device are memorized during a training and learning period. During subsequent periodic predictive periods, a new collection of like habitual trait values of the current user of the device, when captured and compared with memorized values of the first user of the device relative to time, uniquely identify the person in possession of the mobile device as being or not being the first user of the device. By associating this knowledge with a unique device known to be assigned to the first user of the device, it becomes possible to confirm identity without risk of impersonation.