Continuous User Authentication via Behavioral Profiling

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current user authentication methods for touch screen devices are inadequate in preventing hacking and malicious actions, especially when devices are lost or stolen, as they require frequent user interaction and do not provide continuous verification of identity across devices and applications.

Innovation Solution

A system comprising an authentication server and an enterprise server that generates unique user profiles based on behavioral data from touch screen devices, allowing for continuous user authentication by comparing current behavior with stored profiles, detecting automated tools, and enabling cross-platform and cross-application authentication without explicit user action.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication methods are used, then user identity can be verified at login, but continuous verification during session is lacking and devices are vulnerable to hacking and malware attacks

Engineering Contradiction:

Improveauthentication securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary actions by continuously collecting and analyzing user behavior data during the session to establish behavioral profiles. This preliminary continuous monitoring enables the system to detect anomalies and potential security threats before they can compromise the device, rather than waiting for traditional periodic authentication checks.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent implements continuity of useful action by maintaining continuous authentication monitoring throughout the entire user session. The system continuously collects behavioral data, updates profiles, and verifies user identity without interruption, ensuring uninterrupted security protection while the user interacts with the device.

Inventive Principle:

Principle #20Continuity of useful action

2Reliability

If frequent authentication checks are performed, then security is enhanced, but user interaction requirements increase and user experience deteriorates

Engineering Contradiction:

Improveauthentication securityVSAvoiduser interaction frequency

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system applies self-service by automatically performing authentication verification through continuous analysis of user behavior patterns. The device monitors its own usage patterns, compares them against established profiles, and autonomously determines authentication status without requiring the user to manually re-authenticate or interact with security prompts.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces mechanical authentication systems (manual login, password entry, biometric scanning) with a behavioral analysis system that uses software-based pattern recognition. Instead of requiring physical user actions for authentication, the system substitutes mechanical verification with automated analysis of touch patterns, device usage behaviors, and interaction characteristics.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If behavior-based authentication is implemented, then continuous verification is achieved, but data processing requirements and computational resources increase

Engineering Contradiction:

Improvecontinuous authentication capabilityVSAvoidcomputational energy consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system applies partial action by selectively analyzing only the most relevant behavioral parameters and features that provide the highest authentication value. Rather than processing every possible data point, the system identifies and focuses on key behavioral indicators such as touch pressure patterns, swipe velocities, and app usage sequences, reducing computational overhead while maintaining authentication accuracy.

Inventive Principle:

Principle #16Partial or excessive action

4Measurement precision

If user profiles are continuously updated, then authentication accuracy improves, but storage requirements and processing overhead increase

Engineering Contradiction:

Improveuser behavior matching accuracyVSAvoiddata storage volume

Core Design Contradiction:

Measurement precisionVSQuantity of substance

Solution Approach 1:

The system extracts and stores only the essential behavioral features and parameters that are most indicative of user identity and behavior patterns. Rather than storing complete raw behavioral datasets, the system extracts key characteristics such as touch dynamics, interaction sequences, and usage preferences, significantly reducing storage requirements while preserving authentication accuracy.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS10366217B2Continuous user authentication

Publication Date: 2019.07.30 PING IDENTITY ISRAEL LTD

AI summary

A method of enabling continuous user authentication, comprising: setting up an authentication server to provide authentication data to an enterprise server in parallel to a remote user session with the enterprise server, when the user is using a touch screen device; extracting samples from a user's behavior, to build a library of user specific parameters; and tracking user behavior to authenticate the user, the tracking comprises initial identification of a user of the touch screen device when starting a session with the enterprise server and continuous authentication of the user during the session with the enterprise server.