Obscuring Behavioral Data for Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The collection of behavioural data for user authentication and other purposes raises privacy and security concerns, especially when users perform sensitive tasks like entering PIN numbers, as existing methods do not adequately protect this data from unauthorized access.
Innovation Solution
A method is implemented on user devices with sensors to detect interactions with user interface elements, determining sensitivity and processing raw datasets to obscure sensitive information before transmission or storage, ensuring that only non-identifiable data is shared, thereby protecting user privacy and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If behavioural data is collected for user authentication and analysis, then authentication accuracy and data utilization are improved, but user privacy and security are worsened
Solution Approach 1:
The patent extracts and removes sensitive identifiers (such as specific user interface element names, exact timestamps, and location coordinates) from the behavioural dataset before transmission. Only anonymized versions of the data are sent to the remote computing device, while the raw sensitive data remains on the user device. This extraction of harmful information maintains authentication functionality while eliminating privacy risks.
Solution Approach 2:
The patent introduces an intermediary processing layer at the user device that acts as a filter between data collection and data transmission. This intermediary component (the data processing module) anonymizes and obfuscates sensitive information before it leaves the user device, preventing direct exposure of private data to remote servers and potential attackers.
2Productivity
If raw behavioural data is transmitted to remote computing devices, then data processing capability is improved, but data security and privacy protection are worsened
Solution Approach 1:
The patent segments the data processing function into two distinct locations: the user device and the remote computing device. Sensitive data processing (anonymization and obfuscation) is performed locally on the user device, while only processed data is transmitted to the remote device for analysis. This segmentation ensures that sensitive information never leaves the secure environment of the user device.
Solution Approach 2:
The patent performs preliminary data processing actions (anonymization, obfuscation, and removal of sensitive identifiers) on the user device before data transmission occurs. This preliminary action ensures that even if data is intercepted during transmission or stored on the remote device, the sensitive information cannot be recovered, thereby protecting data security while enabling remote processing.
3Object-affected harmful factors
If sensitive elements are obscured in the dataset, then privacy protection is improved, but data usability for authentication is worsened
Solution Approach 1:
The patent applies local quality by differentiating between sensitive and non-sensitive data elements within the dataset. Only specific sensitive identifiers are obscured or removed, while other behavioural characteristics (such as interaction patterns, timing relationships, and sequence information) are preserved in anonymized form. This selective processing maintains authentication reliability by preserving useful behavioural patterns while protecting privacy through localized obscuration of sensitive elements.
Data Source
Figure 1
Figure 2
AI summary
A method for collecting data comprising: at a user device comprising a sensor, the user device being capable of detecting by means of the sensor interaction by a user with any of a plurality of predefined user interface elements: generating a raw dataset from sensor data collected by the sensor as a result of a user input, the user interface elements with which the user has interacted being derivable from the raw dataset and the raw dataset including finer-level sensor data indicating the manner of the user's interaction with those elements; forming an obscured dataset by processing the raw dataset to obscure which user interface elements the user has interacted with and retain at least some of the finer-level sensor data; and transmitting the obscured dataset to a remote computing device and/or storing the obscured dataset at the user device.