Biometric Authentication Through Passive Behavior Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional user authentication systems in mobile computing devices require active user input, causing inconvenience and may not align the authentication level with the criticality of the function being executed, leading to potential security gaps.
Innovation Solution
A multi-layered authentication system that includes passive user behavior analysis, active biometric input, and liveness verification, dynamically adjusting the authentication level based on the criticality of the requested function.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If active user input authentication is used, then security is improved, but user convenience deteriorates
Solution Approach 1:
The system performs preliminary authentication by analyzing user behavior patterns (typing rhythm, swipe gestures, device handling) before formal authentication is triggered. This preliminary assessment prepares the system to either approve access quickly or demand stricter verification, reducing unnecessary user effort while maintaining security.
Solution Approach 2:
The authentication system operates autonomously by continuously monitoring and analyzing user behavior without requiring active user participation. The device itself serves as the authentication mechanism by comparing real-time behavior patterns against stored profiles, eliminating the need for users to actively provide credentials unless necessary.
2Reliability
If uniform high-level authentication is applied to all functions, then security is improved, but user convenience deteriorates
Solution Approach 1:
The authentication system dynamically adjusts its requirements based on the criticality of the requested function and the confidence level of behavioral analysis. Low-criticality functions with high behavioral confidence require minimal or no authentication, while high-criticality functions trigger stricter verification protocols, creating a flexible, adaptive authentication framework.
Solution Approach 2:
Different authentication levels are applied to different functions based on their security requirements. The system evaluates each access request individually, applying appropriate authentication strength locally rather than uniformly across all functions, thereby optimizing both security and user experience.
3Ease of operation
If passive user behavior analysis is used, then user convenience is improved, but authentication reliability may deteriorate
Solution Approach 1:
The system merges multiple behavioral indicators (typing patterns, swipe gestures, device orientation, application usage patterns) into a comprehensive authentication assessment. By combining these diverse data sources, the system achieves high reliability through multi-factor behavioral analysis while maintaining passive operation and user convenience.
Data Source
AI summary
Systems and methods of authorizing access to access-controlled environments are provided. In one example, a method includes receiving, passively by a computing device, user behavior authentication information indicative of a behavior of a user of the computing device, comparing, by the computing device, the user behavior authentication information to a stored user identifier associated with the user, calculating, by the computing device, a user identity probability based on the comparison of the user behavior authentication information to the stored user identifier, receiving, by the computing device, a request from the user to execute an access-controlled function, and granting, by the computing device, the request from the user responsive to determining that the user identity probability satisfies a first identity probability threshold associated with the access-controlled function.