Multi-User Behavioral Authentication via Profile Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing behavioral authentication systems are inadequate for authenticating multiple users sharing the same credentials, as they cannot effectively manage and differentiate between unique behavior profiles for each user, leading to poor security in shared account scenarios.

Innovation Solution

A method and system that generate and store biometric or behavioral user profiles for multiple users, allowing for authentication by comparing user data with stored profiles, and implementing a secondary out-of-band authentication process to verify access, using devices like fingerprint scanners, touchpads, and sensors to capture and analyze user behavior patterns.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a single behavioral profile is used for authentication, then the authentication process is simple, but it cannot differentiate between multiple users sharing the same credentials

Engineering Contradiction:
Improveauthentication process simplicityVSAvoiduser identification accuracy
Core Design Contradiction:
Ease of operationVSMeasurement precision

Solution Approach 1:

The patent divides a single behavioral profile into multiple user-specific profiles. Each authorized user (e.g., account owner, spouse, colleagues) has their own distinct behavioral profile stored in the database. The system segments the authentication process by comparing user behavior against multiple profiles to identify which specific user is accessing the account, thereby maintaining simplicity while enabling accurate multi-user differentiation.

Inventive Principle:
Principle #1Segmentation

2Device complexity

If behavioral authentication is implemented without multiple user support, then the system is easier to manage, but security is compromised in shared account scenarios

Engineering Contradiction:
Improvesystem management complexityVSAvoidsecurity clearance
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The system dynamically adapts to multi-user scenarios by automatically creating and managing multiple behavioral profiles based on enrollment data from different users. The authentication process dynamically selects which profile to compare against based on the matched behavior patterns. This dynamic approach maintains manageable system complexity while significantly improving security reliability for shared accounts.

Inventive Principle:
Principle #15Dynamics

3Measurement precision

If multiple behavioral profiles are stored for each user, then user differentiation is accurate, but the system complexity increases

Engineering Contradiction:
Improveuser behavior differentiationVSAvoidprofile management complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system employs self-service mechanisms where each user enrolls their own behavioral data during an enrollment phase. The automated system processes the enrollment information, extracts behavioral characteristics, and creates the appropriate profiles without requiring manual intervention for profile management. This self-service approach maintains high user differentiation accuracy while keeping system complexity manageable through automation.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10440019B2Method, computer program, and system for identifying multiple users based on their behavior
Publication Date: 2019.10.08 BEHAVIOMETRICS
  • US10440019B2 patent drawing
  • US10440019B2 patent drawing
  • US10440019B2 patent drawing

AI summary

A computer-implemented method, computer device and computer system for detecting multiple users based on a biometric user profile and/or a behavioral user profile.