Continuous Authentication via User Behavior Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Open authentication systems are vulnerable to malicious attacks due to their lack of security, allowing third parties to intercept authentication tokens and compromise user accounts, putting confidential data at risk.
Innovation Solution
A system implementing continuous authentication using monitored user behavior information, such as typing speed, error rates, and mouse movement patterns, to verify the identity of users accessing their accounts, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If open authentication protocols are used for user authentication, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent introduces an intermediary continuous authentication system that operates between the open authentication protocol and the actual account access. This intermediary layer monitors user behavior patterns (typing speed, mouse movements, click patterns) and verifies whether the current user matches the registered user profile, thereby adding security without changing the underlying open authentication protocol that users interact with.
Solution Approach 2:
The authentication process is segmented into two independent layers: (1) the open authentication protocol layer that provides ease of operation for initial login, and (2) the continuous behavior analysis layer that provides security verification. This segmentation allows each layer to fulfill its specific function without compromising the other.
2Reliability
If continuous authentication using behavior analysis is implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The continuous authentication system is designed to automatically monitor and analyze user behavior patterns without requiring user intervention. The system self-service by collecting data from existing device sensors (keyboard, mouse, touchscreen), processing the behavior analysis, and making authentication decisions autonomously, thereby minimizing the impact of the added complexity on system operation.
Solution Approach 2:
The behavior analysis system leverages existing device components (keyboard, mouse, touchscreen, camera) for multiple purposes: their primary functions for user interaction and their secondary function as sensors for behavior analysis. This multi-functionality reduces the need for additional dedicated hardware, thereby limiting the increase in device complexity.
Data Source
AI summary
A system configured for implementing continuous authentication for a software application is disclosed. The system receives a request from a user to login to an account of the user on the software application. The software application uses open authentication to allow the user to login to the account of the user. Once the user is logged in, the system activates continuous authentication based on monitored user behavior information associated with the user received from one or more organizations. The system monitors accessing the account of the user by monitoring behaviors of a person accessing the account of the user. The system determines whether the behaviors of that person correspond to the monitored user behavior information of the user. If the behaviors of that person correspond to the monitored user behavior information of the user, the system grants the first person to the account of the first user.