Interaction Based Posture Assessment for Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication methods struggle to ensure that only authorized users access sensitive content on electronic devices, as they cannot reliably differentiate between the authorized user and device compromise, such as unauthorized users or malware.
Innovation Solution
The implementation of interaction-based posture assessment, which monitors and compares user interaction data from client devices to create a posture profile, detecting aberrant behavior by analyzing characteristics like scroll patterns, touch pressure, and typing speed to initiate security protocols when deviations are detected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional authentication methods (username and password) are used, then users can access content or perform tasks, but it cannot ensure that the current user is the authorized user or that the device has not been compromised
Solution Approach 1:
The system performs preliminary actions by collecting interaction data during normal device usage and creating a posture profile before any security incident occurs. This baseline behavior data is stored and later used for comparison to detect anomalies, allowing the system to be prepared for security verification without adding complexity to the initial authentication process
Solution Approach 2:
The system implements continuous feedback by monitoring user interactions and comparing actual behavior against the stored posture profile. When deviations are detected, the system provides feedback by triggering security protocols or additional authentication requirements, creating a dynamic security system that adapts to user behavior patterns
2Reliability
If interaction-based posture assessment is implemented to continuously monitor and compare user interaction data, then authentication reliability is improved, but device complexity increases
Solution Approach 1:
The system achieves multi-functionality by using the same interaction data collection mechanisms for both normal device operation and security monitoring. The posture profile creation and anomaly detection leverage existing user interaction data without requiring separate monitoring infrastructure, thereby improving continuous authentication reliability while minimizing additional device complexity
Solution Approach 2:
The system applies parameter changes by transforming raw interaction data into behavioral parameters and comparing them against threshold values defined in the posture profile. This parameter transformation approach allows for flexible security policy adjustment without changing the core monitoring architecture, enabling reliable continuous authentication with manageable system complexity
Data Source
AI summary
Various embodiments provide a means of user and/or device authentication by monitoring interaction based posture data received from the client device. Such interaction based posture data may include the particular manner in which a user interacts with the content on the client device or the client device itself, such as scroll patterns, touch pressure, touch duration, elements selected, typing speed, swipes, downloads, among other characteristics that make up a posture profile associated with an authorized user. Thus, interaction data received from the client device that deviates from the posture profile of the authorized user may be used to detect aberrant behavior, which may indicate that the client device has been comprised, such as the client device being used by a user other than the authorized user or the presence of malware. When aberrant behavior is detected a security protocol may be initiated to secure the device.