Continuous Authentication via Behavioral Biometric Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current digital service authentication methods are inadequate as they only verify users during the login phase, failing to detect unauthorized access post-login, which can lead to privacy breaches in sensitive services.

Innovation Solution

A continuous authentication system that monitors user interactions through multiple data streams (audio, visual, biometrics, and I/O commands) to compare real-time usage attributes with historic patterns, detecting discrepancies to prevent unauthorized access without requiring additional passwords or verification codes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If periodic password re-entries or timeouts are used for authentication, then security is improved, but user convenience deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical authentication system (password entry, verification codes) with a behavioral biometric system that automatically analyzes user interaction patterns. The continuous authentication module monitors typing rhythms, mouse movements, and interface navigation patterns to verify user identity without requiring active user participation, thus maintaining security while eliminating the inconvenience of periodic re-authentication.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system enables self-service authentication by having the user's own behavioral patterns serve as the authentication mechanism. The continuous authentication module automatically compares real-time interaction patterns against stored historical patterns, allowing the system to self-verify user identity without external intervention or additional authentication steps from the user.

Inventive Principle:
Principle #25Self-service

2Measurement precision

If multiple data streams are collected for continuous authentication, then authentication accuracy is improved, but system complexity increases

Engineering Contradiction:
Improveauthentication accuracyVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent merges multiple data streams (audio from microphones, visual from cameras, biometric data from sensors, and I/O command data from interface interactions) into a unified authentication model. The continuous authentication module integrates these diverse data sources to create a comprehensive behavioral profile, where the combination of multiple weak signals produces a strong authentication decision, improving accuracy while managing complexity through unified processing.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS11636187B2Systems and methods for continuous user authentication
Publication Date: 2023.04.25 ACRONIS INT
  • US11636187B2 patent drawing
  • US11636187B2 patent drawing
  • US11636187B2 patent drawing

AI summary

Disclosed herein are systems and methods for continuous user authentication during access of a digital service. In an exemplary aspect, a continuous authentication module may receive, at a computing device, initial authentication credentials of the user. The initial authentication credentials enable access to a service via the computing device. While the service is being accessed, the continuous authentication module may continuously monitor whether an unauthorized user has replaced the user in accessing the service by comparing usage attributes of the service with historic usage attributes associated with the user. In response to determining that the unauthorized user has replaced the user, the continuous authentication module may cease the access to the service via the computing device.