Implicit Authentication via Behavioral Biometrics and Sensor Fusion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile device authentication systems face challenges in providing both security and usability, as they often require explicit user actions, are vulnerable to mimicry attacks, and introduce friction that users seek to minimize, especially in public settings where unauthorized access is a concern.
Innovation Solution
A task-based behavioral biometric implicit authentication system that leverages muscle memory using touchscreen, accelerometer, and gyroscope sensors to authenticate users through common tasks like swipes, constructing a user profile and employing anomaly detection algorithms to differentiate between genuine and imposter actions without explicit user intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If explicit authentication mechanisms (PINs, passwords, gestures, fingerprints) are used to protect mobile devices, then security against unauthorized access is improved, but usability deteriorates due to the additional authentication step required at all times
Solution Approach 1:
The system performs preliminary authentication by continuously monitoring user interactions with the device during normal usage. Behavioral biometric data is collected and analyzed in advance to establish a baseline of authentic user behavior, enabling the system to authenticate users implicitly without requiring explicit authentication actions during critical moments
Solution Approach 2:
The authentication system operates autonomously by automatically collecting behavioral biometric data from sensors, analyzing user interactions, and making authentication decisions without requiring user intervention. The system serves itself by continuously learning and adapting to user behavior patterns, eliminating the need for explicit user authentication actions
2Reliability
If lock screens are enabled to provide protection, then security is improved, but usability deteriorates as users must perform authentication actions that interrupt their workflow
Solution Approach 1:
The system maintains continuous authentication monitoring during normal device usage without interrupting the user's workflow. Behavioral biometric data is collected continuously as users interact with the device, allowing authentication to occur in the background without requiring users to stop their tasks to perform authentication actions
3Reliability
If traditional authentication mechanisms are used, then security can be provided, but they are vulnerable to mimicry attacks where impostors can bypass authentication
Solution Approach 1:
The system changes the authentication parameter from static credentials (PINs, passwords) that can be observed and replicated to dynamic behavioral biometric parameters (interaction patterns, gesture characteristics, temporal dynamics) that are difficult to mimic. By analyzing multiple behavioral parameters simultaneously, the system creates a robust authentication mechanism resistant to mimicry attacks
Data Source
AI summary
A system for implicit authentication for a mobile device associated with a user, wherein the implicit authentication is behavioral, biometric and task-based and includes at least one authentication task selected so as to leverage the user's muscle memory. The mobile device comprises a touchscreen; a transaction authentication information unit; one or more sensors coupled to the transaction authentication information unit; and an anomaly detector coupled to the transaction authentication information unit. The sensors comprise one or more touchscreen sensors coupled to the touchscreen, an accelerometer, and a gyroscope, and are used to obtain and transmit one or more sets of data to the transaction authentication information unit. The sets of data are associated with one or more performances of the authentication task by the user. The anomaly detector generates an authentication model using the one or more data sets transmitted to the transaction authentication information unit.