TRANSPARENTLY VERIFIYING USER IDENTITY DURING AN E-COMMERCE SESSION USING SET-TOP BOX INTERACTION BEHAVIOR

• US 20120198491A1
• Filed: 04/11/2012
• Published: 08/02/2012
• Est. Priority Date: 04/10/2006
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: WALKER, KEITH R., O'CONNELL, BRIAN M.
• Application Number:
  US13/444,465
• Publication Number:
  US 20120198491A1
• Time in Patent Office: Days
• US Class Current: 725/30
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures

Abstract

A set-top box device can detect a user interaction associated with a remote control proximate to the set-top box device. The set-top box device can store the user interaction within a storage device as user interaction data. The set-top box device can convey the user interaction data to a remotely located server. The set-top box device can receive a response from the remotely located server indicating that a behavior pattern in the interaction data is substantially equivalent to a behavior pattern in previously stored interaction data of a behavior profile. The response can verify the identity of the user.

Claims

1. A method for verifying a user based on data of interactions between the user and a set-top box, the method comprising the steps of:

a set-top box device detecting a user interaction associated with a remote control proximate to the set-top box device;

the set-top box device storing the user interaction within a storage device as user interaction data;

the set-top box device conveying the user interaction data to a remotely located server; and

the set-top box device receiving a response from the remotely located server indicating that a behavior pattern in the interaction data is substantially equivalent to a behavior pattern in previously stored interaction data of a behavior profile, wherein the response verifies the identity of the user.

2. The method of claim 1, further comprising the step of:

the set-top box device requesting a remotely located server to programmatically perform a privileged operation responsive to the receiving, wherein the privileged operation is a user-initiated action associated with a user account.

3. The method of claim 1, further comprising the step of:

before the receiving, the set-top box device identifying and authenticating the user utilizing user-provided verification information.

4. The method of claim 1, wherein the user interaction data includes data of at least one idiosyncratic behavior of the user interaction.

5. The method of claim 1, wherein the user interaction is at least one of a volume adjustment, a channel selection, a fast forward action, a rewind action, a high definition option, a volume preference, a remote control button selection, and a user interaction with a different remote control.

6. The method of claim 1, wherein the user interaction is with a user interface of a Web browser executing within the set-top box device.

7. The method of claim 1, wherein the detecting step is performed by JAVASCRIPT program code in a Web browser executing within the set-top box device.

8. The method of claim 1, wherein the conveying step comprises conveying interaction data to an e-commerce entity via an ASYNCHRONOUS JAVASCRIPT AND EXTENSIBLE MARKUP LANGUAGE (AJAX) action.

9. The method of claim 2, wherein the privileged operation is a single action shopping purchase.

10. The method of claim 2, further comprising the step of:

the set-top box device establishing a baseline behavior associated with a graphical user interface provided by the set-top box device and the user account.

11. A computer system for verifying a user based on data of interactions between the user and a set-top box, said computer system comprising:

one or more processors, one or more computer-readable memories and one or more computer-readable tangible storage devices;

program instructions, stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, to detect a user interaction between a user and a remote control device associated with a set-top box executing a graphical user interface, wherein the graphical user interface is an interface of an e-commerce session, and wherein the graphical user interface is associated with a browser session associated with a Web server;

program instructions, stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, to store the user interaction within a storage device as user interaction data;

program instructions, stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, to verify or refute a user identity using a two factor authentication process by evaluating a behavior pattern in the user interaction data against a behavior pattern in previously stored interaction data contained within a behavior profile specific to the user.

12. The computer system of claim 11, wherein the behavior profile includes a behavioral representation, wherein the behavioral representation specifies a user identity using behavioral biometrics, and wherein the behavioral biometrics are for remote control specific interactions.

13. The computer system of claim 11, wherein the user interaction is at least one of a volume adjustment, a channel selection, a fast forward action, a rewind action, a high definition option, a volume preference, a remote control button selection, and a user interaction with a different remote control.

14. The computer system of claim 11, wherein the program instructions to verify or refute the user identity generate a pattern matching score, wherein the pattern matching score indicates a likelihood that the user identity is confirmed.

15. The computer system of claim 11, wherein the user interaction is a combination of remote control button selections of the remote control.

16. The computer system of claim 11, wherein the user interaction is a volume adjustment operation style associated with the remote control device, wherein the operation style is at least one of a stepwise adjustment and a jump adjustment.

17. The computer system of claim 11, wherein the user interaction is a channel selection operation style associated with the remote control, wherein the operation style is at least one of an increment/decrement selection and a direct tuning selection.

18. The computer system of claim 11, wherein the user identity is associated with a returning customer having previous interaction with an e-commerce application.

19. The computer system of claim 11, wherein the program instructions to verify or refute the user identity identify idiosyncratic behaviors of the user in providing input to the remote control device, and wherein the program instructions to verify further match the idiosyncratic behaviors against corresponding behaviors stored in the behavior profile.

20. A computer program product for verifying a user based on data of interactions between the user and a set-top box, the computer program product comprising:

one or more computer-readable tangible storage devices;

program instructions, stored on at least one of the one or more storage devices, to detect user interaction data associated with a remote control proximate to the set-top box device;

program instructions, stored on at least one of the one or more storage devices, to store the user interaction data within a storage device as user interaction data;

program instructions, stored on at least one of the one or more storage devices, to convey the user interaction data to a remotely located server; and

program instructions, stored on at least one of the one or more storage devices, to receive a response from the remotely located server indicating that a behavior pattern in the interaction data is substantially equivalent to a behavior pattern in previously stored interaction data of a behavior profile, wherein the response verifies the identity of the user.

21. The computer program product of claim 20, further comprising:

program instructions, stored on at least one of the one or more storage devices, to request a remotely located server to programmatically perform a privileged operation responsive to the receiving, wherein the privileged operation is a user-initiated action associated with a user account.

22. The computer program product of claim 20, further comprising:

program instructions, stored on at least one of the one or more storage devices, to, before receiving the response, identify and authenticate the user utilizing user-provided verification information.