Behavioral Biometric Authentication via Secret Sharing

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing authentication mechanisms using behavioral biometrics face challenges in reliably generating a secret credential and ensuring secure authentication, especially when interacting with remote parties or protecting data from attacks.

Innovation Solution

A computer-implemented method using a secret sharing scheme to enroll users based on behavioral biometrics, generating shares from typical measurements of these biometrics, and recreating a secret credential for authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If explicit authentication mechanisms (password, fingerprint) are used, then security is provided, but user convenience deteriorates due to additional effort and time required

Engineering Contradiction:

Improveauthentication securityVSAvoiduser convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs authentication automatically by analyzing the user's own behavioral biometrics during normal device interaction. The user does not need to actively participate in authentication - the system self-verifys the user's identity through keystroke dynamics, typing rhythm, and other behavioral patterns that occur naturally during device usage.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces mechanical authentication systems (fingerprint scanners, password entry interfaces) with an automated behavioral analysis system. Instead of requiring physical interaction with authentication hardware or manual password entry, the system substitutes these with automated analysis of typing patterns and keystroke dynamics captured during normal device operation.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If explicit authentication mechanisms are used, then security is provided, but time consumption increases due to authentication delays

Engineering Contradiction:

Improveauthentication securityVSAvoidauthentication time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The authentication process occurs continuously and concurrently with normal device usage. Instead of pausing device interaction to perform authentication, the system continuously analyzes behavioral biometrics in the background, allowing authentication to happen without interrupting the user's workflow or task completion.

Inventive Principle:

Principle #20Continuity of useful action

Solution Approach 2:

The system performs authentication verification continuously in advance before critical operations occur. By constantly monitoring behavioral patterns, the system is already authenticated when the user needs to access sensitive data or perform operations, eliminating last-minute authentication delays.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If timeout mechanisms are implemented to reduce security risk, then security window is reduced, but user convenience deteriorates and authentication frequency increases

Engineering Contradiction:

Improvesecurity protectionVSAvoiduser convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system continuously self-monitors authentication status through behavioral biometrics without requiring user action. Instead of forcing users to re-authenticate after timeouts, the system automatically detects when the authorized user is still present and active, eliminating the need for repeated authentication interruptions.

Inventive Principle:

Principle #25Self-service

4Ease of operation

If behavioral biometrics are used for continuous authentication, then user convenience is improved, but reliability of secret credential generation deteriorates

Engineering Contradiction:

Improveauthentication convenienceVSAvoidsecret credential generation

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent segments the secret credential into multiple shares using secret sharing schemes. Instead of relying on a single behavioral biometric measurement, the system divides the authentication credential into multiple components (shares) that are distributed and can be reconstructed from multiple behavioral measurements, improving reliability through redundancy.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system introduces cryptographic intermediaries and secret sharing mechanisms as mediators between behavioral biometrics and authentication. Instead of directly using behavioral measurements as credentials, the system uses cryptographic protocols to transform behavioral data into reliable secret shares, ensuring both convenience and reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12314362B2User authentication based on behavioral biometrics

Publication Date: 2025.05.27 BRITISH TELECOM PLC

AI summary

Computer implemented methods for enrolling a user as an authenticated user of a computing device and for authenticating a user of a computing device are provided. The methods make use of behavioral biometrics to determine a set of shares that represent a secret credential according to a secret sharing scheme. The set of shares is initially determined when the user is enrolled based on typical measurements of the user's behavioral biometrics and authentication data indicating how to generate the set of shares from a user's behavioral biometrics is generated. When authenticating the user, the computing device can generate the set of shares based on the authentication data and measurements of the current user's behavioral biometrics. The computing device can use the generated set of shares to recreate a copy of the secret credential with which to authenticate the user.