Behavioral fingerprinting with adaptive development

• US 9,729,549 B2
• Filed: 11/15/2012
• Issued: 08/08/2017
• Est. Priority Date: 09/24/2011
• Status: Expired due to Fees

• Current Assignee: RPX Corporation
• Original Assignee: Elwha LLC (Intellectual Ventures LLC)
• Inventors: Malamud, Mark A., Lord, Robert W., Lord, Richard T., Levien, Royce A., Hyde, Roderick A., Huang, Xeudong, Gerrity, Daniel A., Dyor, Matthew G., Tegreene, Clarence T, Davis, Marc E., Myhrvold, Nathan P.
• Primary Examiner(s): WILLIAMS, JEFFERY L
• Application Number:
  US13/678,380
• Publication Number:
  US 20130160087A1
• Time in Patent Office: 1,727 Days
• Field of Search: None
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

Disclosed herein are example embodiments for behavioral fingerprinting with adaptive development. For certain example embodiments, one or more devices may: (i) determine at least one indication of utilization for at least one authorized user via at least one user-device interaction; and (ii) incorporate at least one indication of utilization into at least one behavioral fingerprint that is associated with at least one authorized user, with the at least one behavioral fingerprint including one or more indicators of utilization of one or more user devices by the at least one authorized user. However, claimed subject matter is not limited to any particular described embodiments, implementations, examples, or so forth.

Claims

1. A system, comprising:

circuitry configured for determining at least one indication of utilization for at least one authorized user via at least one user-device interaction;

circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user;

circuitry configured for determining via at least one user device that at least one user has made a request for performance of at least one task;

circuitry configured for determining at least one degree of authentication associated with identity of the at least one user via the at least one user device at least partially based on the at least one behavioral fingerprint;

circuitry configured for determining at least one level of authorization corresponding to the determined at least one degree of authentication associated with identity of the at least one user; and

circuitry configured for performing the at least one task as a function of the determined at least one level of authorization corresponding to the determined at least one degree of authentication associated with identity of the at least one user.

2. The system of claim 1, wherein circuitry configured for determining at least one indication of utilization for at least one authorized user via at least one user-device interaction comprises:

circuitry configured for determining the at least one indication of utilization based at least partly on one or more user interface actions by the at least one authorized user with at least one user device of the one or more user devices.

3. The system of claim 2, wherein circuitry configured for determining the at least one indication of utilization based at least partly on one or more user interface actions by the at least one authorized user with at least one user device of the one or more user devices comprises:

circuitry configured for determining the at least one indication of utilization based at least partly on at least one characteristic of one or more user interface swiping actions by the at least one authorized user with the at least one user device of the one or more user devices.

4. The system of claim 1, wherein circuitry configured for determining at least one indication of utilization for at least one authorized user via at least one user-device interaction comprises:

circuitry configured for determining the at least one indication of utilization based at least partly on one or more locations visited by the at least one authorized user with at least one user device of the one or more user devices.

5. The system of claim 4, wherein circuitry configured for determining the at least one indication of utilization based at least partly on one or more locations visited by the at least one authorized user with at least one user device of the one or more user devices comprises:

circuitry configured for determining the at least one indication of utilization based at least partly on one or more physical locations visited by the at least one authorized user with the at least one user device of the one or more user devices.

6. The system of claim 1, wherein circuitry configured for determining at least one indication of utilization for at least one authorized user via at least one user-device interaction comprises:

circuitry configured for determining the at least one indication of utilization based at least partly on one or more social network interactions by the at least one authorized user via at least one user device of the one or more user devices.

7. The system of claim 6, wherein circuitry configured for determining the at least one indication of utilization based at least partly on one or more social network interactions by the at least one authorized user via at least one user device of the one or more user devices comprises:

circuitry configured for determining the at least one indication of utilization based at least partly on one or more social network communications received or sent by the at least one authorized user via the at least one user device of the one or more user devices.

8. The system of claim 1, wherein circuitry configured for the determining at least one indication of utilization for at least one authorized user via at least one user-device interaction comprises:

circuitry configured for determining the at least one indication of utilization based at least partly on one or more applications employed by the at least one authorized user via at least one user device of the one or more user devices.

9. The system of claim 8, wherein circuitry configured for the determining the at least one indication of utilization based at least partly on one or more applications employed by the at least one authorized user via at least one user device of the one or more user devices comprises:

circuitry configured for determining the at least one indication of utilization based at least partly on an order of usage for the one or more applications employed by the at least one authorized user via the at least one user device of the one or more user devices.

10. The system of claim 1, wherein circuitry configured for determining at least one indication of utilization for at least one authorized user via at least one user-device interaction comprises:

circuitry configured for determining the at least one indication of utilization based at least partly on one or more transactions conducted by the at least one authorized user via at least one user device of the one or more user devices.

11. The system of claim 10, wherein circuitry configured for determining the at least one indication of utilization based at least partly on one or more transactions conducted by the at least one authorized user via at least one user device of the one or more user devices comprises:

circuitry configured for determining the at least one indication of utilization based at least partly on a density of the one or more transactions conducted by the at least one authorized user via the at least one user device of the one or more user devices, including at least determining the at least one indication of utilization based at least partly on determining an indication of geographic proximity of the one or more transactions conducted in a particular period of time by the at least one authorized user via the at least one user device of the one or more user devices.

12. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user, comprises:

circuitry configured for adding the at least one indication of utilization to the at least one behavioral fingerprint associated with the at least one authorized user, including at least adding at least one identification of one or more songs played via the one or more user devices to the at least one behavioral fingerprint associated with the at least one authorized user.

13. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user, comprises:

circuitry configured for updating the at least one behavioral fingerprint associated with the at least one authorized user with the at least one indication of utilization.

14. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user, comprises:

circuitry configured for deleting at least a portion of the at least one behavioral fingerprint associated with the at least one authorized user based at least partially on the at least one indication of utilization.

15. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user, comprises:

circuitry configured for confirming that the at least one behavioral fingerprint associated with the at least one authorized user includes at least the at least one indication of utilization.

16. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user, comprises:

circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of accessing one or more user devices by the at least one authorized user.

17. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user, comprises:

circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of interacting with one or more user devices by the at least one authorized user.

18. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user, comprises:

circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of movement of one or more user devices by the at least one authorized user.

19. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of the one or more user devices by the at least one authorized user, comprises:

circuitry configured for incorporating at least one or more indicators of providing input to one or more user devices by the at least one authorized user into the at least one behavioral fingerprint associated with the at least one authorized user, including at least incorporating at least one indication of how the at least one user swipes between two or more screens of the one or more user devices as the at least one indication of utilization into the at least one behavioral fingerprint associated with the at least one authorized user; and

wherein circuitry configured for determining at least one degree of authentication associated with identity of the at least one user via the at least one user device at least partially based on the at least one behavioral fingerprint includes at least;

circuitry configured for determining that the at least one user is not the at least one authorized user at least partially based on ascertaining that a most recent pattern of swipes between two or more screens of the user device does not match the incorporated at least one indication of how the at least one user swipes between two or more screens of the one or more user devices in the at least one behavioral fingerprint associated with the at least one authorized user.

20. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user, comprises:

circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of at least one of (a) receiving output from one or more user devices by the at least one authorized user, (b) communicating via one or more user devices by the at least one authorized user, (c) software application execution on one or more user devices by the at least one authorized user, or (d) effecting at least one transaction via one or more user devices by the at least one authorized user.

21. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user, comprises:

circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of at least one user habit with respect to one or more user devices by the at least one authorized user.

22. The system of claim 21, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of at least one user habit with respect to one or more user devices by the at least one authorized user, comprises:

circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of at least one user act repeated at particular times with respect to one or more user devices by the at least one authorized user.

23. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user, comprises:

circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of observed usage of one or more user devices by the at least one authorized user.

24. The system of claim 23, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of observed usage of one or more user devices by the at least one authorized user, comprises:

circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint that includes at least one of one or more indicators of apps employed by the at least one authorized user, one or more indicators of transactions conducted by the at least one authorized user, or one or more indicators of social network interactions by the at least one authorized user.

25. The system of claim 1, wherein circuitry configured for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user, comprises:

circuitry configured for incorporating at least one indication of how long the at least one authorized user keeps a user device in motion before a particular door is to be unlocked into the at least one behavioral fingerprint associated with the at least one authorized user.

26. The system of claim 25, wherein circuitry configured for incorporating at least one indication of how long the at least one authorized user keeps a user device in motion before a particular door is to be unlocked into the at least one behavioral fingerprint associated with the at least one authorized user, comprises:

circuitry configured for incorporating at least one indication of at least one particular car door or at least one particular house door to be unlocked at least partially based on how long the at least one authorized user keeps the user device in motion into the at least one behavioral fingerprint associated with the at least one authorized user.

29. The system of claim 1, wherein circuitry configured for determining via at least one user device that at least one user has made a request for performance of at least one task comprises:

circuitry configured for receiving, via at least one user interface of the at least one user device, at least one indication that the at least one user has made a request to open at least one other device using the at least one user device.

30. The system of claim 1, wherein circuitry configured for determining at least one degree of authentication associated with identity of the at least one user via the at least one user device at least partially based on the at least one behavioral fingerprint comprises:

circuitry configured for detecting one or more manners for swiping input on the at least one user device to determine a pattern of use associated with the at least one user; and

circuitry configured for lowering the at least one level of authentication of the at least one user if the pattern of use includes an anomalous pattern of use at least partially based on the at least one behavioral fingerprint.

31. The system of claim 1, wherein circuitry configured for performing the at least one task as a function of the determined at least one level of authorization corresponding to the determined at least one degree of authentication associated with identity of the at least one user comprises:

circuitry configured for causing the opening of at least one door at least partially based on at least one minimum degree of authentication associated with the at least one user indicated by comparing a detected image of the at least one user obtainable by a camera accessible by the at least one user device with at least one image of the at least one authorized user incorporated into the at least one behavioral fingerprint to determine that the at least one user has sufficient authorization for the opening of the at least one door.

32. The system of claim 1, wherein circuitry configured for determining at least one degree of authentication associated with identity of the at least one user via the at least one user device at least partially based on the at least one behavioral fingerprint comprises:

circuitry configured for determining at least one degree of authentication corresponding to at least one level of certainty of identity of the at least one user via the at least one user device at least partially based on the at least one behavioral fingerprint.

33. The system of claim 32, wherein circuitry configured for determining at least one degree of authentication corresponding to at least one level of certainty of identity of the at least one user via the at least one user device at least partially based on the at least one behavioral fingerprint comprises:

circuitry configured for ascertaining at least one level of certainty of identity of the at least one user at least partially based on at least one user response received via the at least one user device, including at least determining an average number of correct user responses to at least one verification inquiry received via the at least one user device.

34. The system of claim 1, wherein circuitry configured for determining at least one level of authorization corresponding to the determined at least one degree of authentication associated with identity of the at least one user comprises:

circuitry configured for electing to grant full authorization, grant partial authorization, or deny authorization at least partially based on the determined at least one degree of authentication associated with identity of the at least one user.

27. A method, comprising:

determining at least one indication of utilization for at least one authorized user via at least one user-device interaction;

incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user;

determining via at least one user device that at least one user has made a request for performance of at least one task;

determining at least one degree of authentication associated with identity of the at least one user via the at least one user device at least partially based on the at least one behavioral fingerprint;

determining at least one level of authorization corresponding to the determined at least one degree of authentication associated with identity of the at least one user; and

performing the at least one task as a function of the determined at least one level of authorization corresponding to the determined at least one degree of authentication associated with identity of the at least one user.

28. A computer program product, comprising:

at least one non-transitory computer-readable medium including at least;

one or more instructions for determining at least one indication of utilization for at least one authorized user via at least one user-device interaction;

one or more instructions for incorporating the at least one indication of utilization into at least one behavioral fingerprint associated with the at least one authorized user, the at least one behavioral fingerprint including at least one or more indicators of utilization of one or more user devices by the at least one authorized user;

one or more instructions for determining via at least one user device that at least one user has made a request for performance of at least one task;

one or more instructions for determining at least one degree of authentication associated with identity of the at least one user via the at least one user device at least partially based on the at least one behavioral fingerprint;

one or more instructions for determining at least one level of authorization corresponding to the determined at least one degree of authentication associated with identity of the at least one user; and

one or more instructions for performing the at least one task as a function of the determined at least one level of authorization corresponding to the determined at least one degree of authentication associated with identity of the at least one user.