METHOD AND SYSTEM FOR PROVIDING AUTHENTICATION THROUGH AGGREGATE ANALYSIS OF BEHAVIORAL AND TIME PATTERNS

• US 20100115610A1
• Filed: 11/05/2008
• Published: 05/06/2010
• Est. Priority Date: 11/05/2008
• Status: Active Grant

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Harrington, Steven J., Tredoux, Gavan Leonard
• Granted Patent: US 9,400,879 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A method and a system for evaluating identification of a user based on behavioral patterns and time patterns, including an analysis component for analyzing data; an authentication component for authenticating the analyzed data; and a behavioral biometric device for collecting behavioral biometric data related to the user, the authentication component and the analysis component operably connected at least with the behavioral biometric device; wherein the behavioral biometric data is matched against previously obtained or expected behavioral biometric data stored in a first database component of the analysis component in order to progressively, continuously, and incrementally evaluate the identification of the user to determine a confidence factor.

Claims

1. A system for evaluating identification of a user based on behavioral patterns and time patterns, the system comprising:

an analysis component for analyzing data;

an authentication component for authenticating the analyzed data; and

a behavioral biometric device for collecting behavioral biometric data related to the user, the authentication component and the analysis component operably connected at least with the behavioral biometric device;

wherein the behavioral biometric data is matched against previously obtained or expected behavioral biometric data stored in a first database component of the analysis component in order to progressively, continuously, and incrementally evaluate the identification of the user to determine a confidence factor.

2. The system according to claim 1, wherein the analysis component and the authentication component are connected to a server and the behavioral biometric device is in operable communication with one or more computing devices in a network configuration.

3. The system according to claim 1, wherein the analysis component includes a parameter monitoring component, a parameter comparing component, a user profile component, and the first database component.

4. The system according to claim 1, wherein the authentication component includes a software security component, an access component, and a second database component.

5. The system according to claim 1, wherein a user profile is created based upon the behavioral biometric data that is matched against the previously obtained or expected behavioral biometric data.

6. The system according to claim 1, wherein one or more applications or resources has different security classification levels.

7. The system according to claim 6, wherein the different security classification levels are based on the confidence factor associated with each of the one or more applications or resources.

8. The system according to claim 7, wherein the confidence factor associated with each of the one or more applications or resources is established to a degree of probability by the analysis component.

9. The system according to claim 1, wherein the confidence factor is progressively, continuously, and incrementally increased or decreased based on the behavioral patterns and the time patterns received from the behavioral biometric device.

10. The system according to claim 1, wherein the confidence factor is determined by monitoring (i) a specific class of behaviors and (ii) one or more redundant operations in order to create a user profile.

11. The system according to claim 1, wherein uncharacteristic deviations detected from the previously obtained or expected behavioral biometric data stored in the first database component of the analysis component trigger either (i) an automatic revocation of authentication, (ii) set off an alarm, or (iii) initiate further investigation via a plurality of alternative methods.

12. The system according to claim 1, wherein the behavioral biometric data include one or more of the following:

textual style characteristics of raw streams of text generated by the user, user interface preferences when editing and navigating, file-name patterns, file system browsing habits, web URLs (Uniform Resource Locators) habitually visited, system or software application usage, and keystroke dynamics.

13. The system according to claim 1, wherein the analysis component selectively and empirically chooses desired or suitable behavioral biometric data to evaluate the identification of the user.

14. A method for evaluating identification of a user based on behavioral patterns and time patterns, the method comprising the steps of:

analyzing data;

authenticating the analyzed data; and

collecting behavioral biometric data related to the user;

wherein the behavioral biometric data is matched against previously obtained or expected behavioral biometric data in order to progressively, continuously, and incrementally evaluate the identification of the user to determine a confidence factor.

15. The method according to claim 14, wherein a user profile is created based upon the behavioral biometric data that is matched against the previously obtained or expected behavioral biometric data.

16. The method according to claim 14, wherein one or more applications or resources has different security classification levels.

17. The method according to claim 16, wherein the different security classification levels are based on the confidence factor associated with each of the one or more applications or resources.

18. The method according to claim 17, wherein the confidence factor associated with each of the one or more applications or resources is established to a degree of probability.

19. The method according to claim 14, wherein the confidence factor is progressively, continuously, and incrementally increased or decreased based on the behavioral patterns and the time patterns.

20. The method according to claim 14, wherein the confidence factor is determined by monitoring (i) a specific class of behaviors and (ii) one or more redundant operations in order to create a user profile.

21. The method according to claim 14, wherein uncharacteristic deviations detected from the previously obtained or expected behavioral biometric data triggers either (i) an automatic revocation of authentication, (ii) set off an alarm, or (iii) initiate further investigation via a plurality of alternative methods.

22. The method according to claim 14, wherein the behavioral biometric data include one or more of the following:

textual style characteristics of raw streams of text generated by the user, user interface preferences when editing and navigating, file-name patterns, file system browsing habits, web URLs (Uniform Resource Locators) habitually visited, system or software application usage, and keystroke dynamics.

23. A computer-readable medium storing a set of programmable instructions configured for execution by at least one processor for evaluating identification of a user based on behavioral patterns and time patterns, the method comprising the steps of:

analyzing data;

authenticating the analyzed data; and

collecting behavioral biometric data related to the user;

wherein the behavioral biometric data is matched against previously obtained or expected behavioral biometric data in order to progressively, continuously, and incrementally evaluate the identification of the user to determine a confidence factor.