Mobile Device Behavioral Authentication via Sensor Data Clustering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for continuous user authentication on mobile devices are inefficient as they require specific user interactions and may not accurately differentiate between legitimate and suspicious activities.
Innovation Solution
The method involves analyzing sensor data from mobile devices, such as accelerometers and gyroscopes, to generate behavioral profiles without requiring specific user interactions. This data is used to train classifiers that can detect suspicious activities by clustering interaction modes and determining if user interactions align with pre-defined profiles.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If behavioral profiling is used for continuous user authentication, then authentication accuracy is improved, but device complexity increases
Solution Approach 1:
The system segments the behavioral profiling process into distinct modules: sensor data collection, feature extraction, profile generation, and authentication decision-making. Each module operates independently and can be optimized separately, reducing overall system complexity while maintaining high authentication accuracy through specialized processing at each stage.
Solution Approach 2:
The patent introduces an intermediary layer that processes raw sensor data into behavioral features and profiles before authentication decisions are made. This intermediary processing layer simplifies the authentication mechanism by pre-computing and storing behavioral patterns, allowing the authentication system to focus on comparison rather than complex real-time analysis.
2Reliability
If sensor data analysis is performed continuously, then detection of suspicious activities is improved, but energy consumption increases
Solution Approach 1:
The system performs sensor data collection and analysis periodically rather than continuously, triggering processing only at significant events such as user interactions, app launches, or when behavioral deviations are detected. This periodic approach maintains reliable detection of suspicious activities while dramatically reducing energy consumption compared to continuous monitoring.
Solution Approach 2:
The system uses the device's existing sensors (accelerometer, gyroscope, etc.) that are already powered by the device's battery for their primary functions. By leveraging these sensors' inherent capabilities and integrating their data with authentication processes, the system achieves enhanced detection without requiring additional dedicated energy-intensive hardware or continuous power consumption.
3Ease of operation
If specific user interactions are required for authentication, then ease of operation is improved, but adaptability to different usage scenarios decreases
Solution Approach 1:
The system employs a universal behavioral profiling approach that captures multiple types of user interactions (touch patterns, device movement, usage timing, contextual information) through a single integrated framework. This multi-functional system can adapt to various usage scenarios including different devices, applications, and user behaviors without requiring scenario-specific authentication mechanisms, thereby maintaining ease of operation while enhancing adaptability.
Data Source
AI summary
A method and a system for identifying a user of a mobile device. The method includes: receiving user identification data of the user; transmitting executable instructions to the mobile device, thereby causing the mobile device to generate, based on sensor readings of the mobile device a vector of behavioral parameters for further transmission thereof to a server; receiving the vector of behavioral parameters; aggregating respective vectors of behavioral parameters associated with the user into behavioral data; training, based on the behavioral data, a given classifier to determine whether in-use user interactions with the mobile device are performed by the user or not; and storing, in a database, the given classifier for further use in detecting a suspicious activity on the mobile device.