Multi-Source Authentication Anomaly Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current security systems fail to adequately detect unauthorized access or inappropriate use of devices, as sophisticated attackers can alter internal files, evading detection by relying solely on data from the device in question.

Innovation Solution

An authentication procedure that gathers data from multiple independent sources, including a primary device, a mobile phone, and optionally environmental sensors, to identify anomalous behavior by comparing usage patterns and providing a notice when unauthorized access is detected.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple independent data sources are used for authentication, then detection reliability improves, but system complexity increases

Engineering Contradiction:
Improveunauthorized access detection reliabilityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication system is segmented into multiple independent data collection modules, each responsible for gathering data from a specific device or source (primary device, secondary device, environmental sensors). Each module operates independently and contributes a portion of the overall authentication decision, allowing the system to maintain high reliability while managing complexity through modular design

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements a nested architecture where environmental sensor data is nested within the broader context of device usage patterns, which are themselves nested within the multi-device authentication framework. This hierarchical nesting allows the system to process multiple layers of data without creating linear complexity, as each layer builds upon and contextualizes the previous layer

Inventive Principle:
Principle #7Nested doll (Nesting)

2Measurement precision

If data from multiple independent sources is collected and compared, then measurement precision of unauthorized access detection improves, but loss of time for data processing increases

Engineering Contradiction:
Improveanomalous behavior detection precisionVSAvoidauthentication processing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary actions by continuously collecting and pre-processing data from multiple devices and environmental sensors in the background, even when no authentication event is occurring. This pre-collection and pre-analysis of data allows the system to rapidly compare new authentication requests against established baselines without experiencing processing delays, thereby maintaining high measurement precision while minimizing authentication time

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent creates simplified copies or representations of complex multi-source data through aggregated usage patterns and normalized behavior metrics. Instead of processing raw data from multiple independent sources in real-time, the system maintains compressed representations (copies) of normal usage patterns that can be quickly compared against current activity, reducing processing time while preserving detection precision

Inventive Principle:
Principle #26Copying

Data Source

PatentUS9749342B1System and method for detecting unauthorized device access by comparing multiple independent spatial-time data sets from other devices
Publication Date: 2017.08.29 UNITED STATES OF AMERICA AS REPRESENTED BY THE ADMINISTRATOR NAT AERONAUTICS & SPACE ADMINISTRATION
  • US9749342B1 patent drawing
  • US9749342B1 patent drawing
  • US9749342B1 patent drawing

AI summary

An authentication procedure utilizes multiple independent sources of data to determine whether usage of a device, such as a desktop computer, is authorized. When a comparison indicates an anomaly from the base-line usage data, the system, provides a notice that access of the first device is not authorized.