Behavioral Biometric Authentication for Password Recovery

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional password reset processes are cumbersome, often requiring users to remember security questions or engage in time-consuming telephonic conversations, and may fail due to issues with biometric authentication factors like face recognition or fingerprint scanning.

Innovation Solution

A system that monitors user interactions to extract user-specific features for authentication, allowing password recovery or reset without relying on passwords or security questions, by presenting tasks that characterize the user's behavior and reacting to intentional interface anomalies.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If conventional password reset processes are used (requiring security questions or telephonic conversations), then authentication security is maintained, but user convenience and time efficiency deteriorate

Engineering Contradiction:

Improvepassword recovery processVSAvoidtime for authentication

Core Design Contradiction:

Ease of operationVSLoss of time

Solution Approach 1:

The system performs preliminary actions by continuously monitoring and storing user interaction patterns during normal usage. Behavioral biometric data is collected and archived in advance, so when password recovery is needed, the authentication can proceed immediately by comparing current behavior against stored patterns, eliminating the need for time-consuming security questions or phone calls.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system enables self-service password recovery by autonomously analyzing user behavior patterns without requiring intervention from customer support or manual verification through security questions. The automated behavioral biometric analysis allows users to recover passwords independently, significantly improving convenience and reducing time loss.

Inventive Principle:

Principle #25Self-service

2Reliability

If biometric authentication factors (face recognition, fingerprint scanning) are used, then authentication security is improved, but system reliability deteriorates due to authentication failures

Engineering Contradiction:

Improveauthentication processVSAvoidhandling authentication failures

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system changes the parameter of authentication from static biometric data (fingerprint, face) to dynamic behavioral patterns (typing rhythm, mouse movements, interaction sequences). This allows the authentication system to adapt when traditional biometrics fail, as behavioral patterns can be captured and verified even when users have difficulty with physical biometric scanners, thereby improving reliability and adaptability simultaneously.

Inventive Principle:

Principle #35Parameter changes

3Reliability

If traditional password-based authentication is used, then system complexity is minimized, but security deteriorates due to password theft and phishing

Engineering Contradiction:

Improveauthentication securityVSAvoidauthentication system

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system introduces behavioral biometric analysis as an intermediary layer between the user and the authentication system. Instead of directly relying on passwords or static biometrics, the system mediates authentication by continuously analyzing behavioral patterns such as typing rhythm, mouse movement characteristics, and interaction sequences. This intermediary layer enhances security without requiring complex hardware changes, as it leverages existing interaction data.

Inventive Principle:

Principle #24Intermediary (Mediator)

4Reliability

If security questions are required for password recovery, then authentication security is maintained, but ease of operation deteriorates due to user memory limitations

Engineering Contradiction:

Improvepassword recovery securityVSAvoidpassword recovery process

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system replaces the mechanical system of human memory (recalling security question answers) with automated behavioral analysis. Instead of requiring users to remember and recite security question responses, the system substitutes this with continuous monitoring and analysis of behavioral biometric patterns, which are objectively measured and compared against stored profiles. This substitution eliminates memory-related difficulties while maintaining security through rigorous behavioral verification.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS10586036B2System, device, and method of recovery and resetting of user authentication factor

Publication Date: 2020.03.10 BIOCATCH

AI summary

Devices, systems, and methods of password recovery and password reset, as well as resetting or recovering other types of user-authentication factor. A system monitors and tracks user-interactions that are performed by a user of an electronic device or a computerized service. The system defines a user-specific task or challenge, in which the user is requested to enter a phrase or perform a task. A user-specific feature is extracted from the manner in which the user performs the task. Subsequently, that user-specific feature is utilized instead of a security question, in order to verify the identity of the user and to allow the user to perform password reset or to perform a reset of another user-authentication factor; by presenting to the user the same task or a similar task, and monitoring the manner in which the user performs the fresh task.