Graphical Password Authentication Using Behavioral Biometrics

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current two-factor authentication methods are cumbersome and inefficient due to their two-step requirement, and traditional password-based systems are vulnerable to unauthorized access.

Innovation Solution

A system that utilizes a singular user input combining graphical passwords and behavioral data, where a user-drawn graphical password is captured along with biometric characteristics, and an AI model compares these factors for authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional password-based authentication is used, then the system is simple to operate, but it is vulnerable to unauthorized access

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines two authentication factors (graphical password and behavioral biometric data) into a single integrated authentication system. The graphical password provides visual verification while the behavioral data (captured through sensors during interaction with the graphical element) provides physiological verification, merging both factors into one unified authentication process that enhances security without requiring separate authentication steps

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent introduces an AI model as an intermediary that processes and analyzes behavioral biometric data. This intermediary component automatically extracts authentication-relevant features from raw sensor data (such as touch dynamics, movement patterns, or physiological responses), bridging the gap between complex sensor inputs and authentication decisions, thereby managing system complexity while maintaining high security

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If two-factor authentication is implemented using separate steps, then security is improved, but user convenience deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent merges two authentication factors into a single user action. Instead of requiring separate steps for password entry and biometric verification, the system captures both the graphical password input and the associated behavioral biometric data simultaneously during one interaction with the graphical element, thereby maintaining security while significantly improving user convenience

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent ensures continuous capture of authentication data throughout the user's interaction with the graphical password element. Sensors continuously monitor behavioral data (such as touch pressure, movement velocity, or physiological changes) throughout the entire authentication process, eliminating interruptions and maintaining a seamless user experience while gathering comprehensive authentication information

Inventive Principle:
Principle #20Continuity of useful action

3Reliability

If graphical passwords are used instead of traditional passwords, then resistance to unauthorized access is improved, but the complexity of the authentication input increases

Engineering Contradiction:
Improvepassword securityVSAvoidinput method complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent enables the system to automatically capture behavioral biometric data without requiring additional user actions. The sensors embedded in the interface automatically record physiological and interaction data (such as touch dynamics, movement patterns, or stress responses) as the user naturally interacts with the graphical password, eliminating the need for separate biometric scanning steps and reducing input complexity while enhancing security

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS12505194B2Enhanced authentication leveraging graphical passwords and behavioral data
Publication Date: 2025.12.23 BANK OF AMERICA CORP
  • US12505194B2 patent drawing
  • US12505194B2 patent drawing
  • US12505194B2 patent drawing

AI summary

Methods, apparatus, and systems for two-factor authentication leveraging graphical passwords and behavioral data are provided. Methods may include creating a two-factor authentication model for logging into a user account. The two-factor authentication model may include a first graphical password and first behavioral data corresponding to biometric characteristics of the creating of the graphical password. Methods may include receiving a login request from the user. Methods may include receiving, from the user, a second graphical password and second behavioral data. Methods may include identifying first comparison points between the second graphical password and the first graphical password. In parallel, methods may include identifying second comparison points between the second behavioral data and the first behavioral data. Methods may include logging the user into the account in response to a determination that a sum of the first and second comparison points is greater than a threshold value.