Behavioral stochastic authentication (BSA)

摘要

Methods and systems for authenticating a user and a consumer electronic device (CED) to a financial services provider (FSP) for purposes of communications initiated from the device and needing security, such as purchases and financial transactions, are provided. The FSP may compile information about a user's behavior from various sources, both public and private, including the CED. The information may be of a stochastic nature, being gathered by sampling user data and behavior at chosen times. The information may include indicators of user behavior—such as the user using the device to check various accounts and web-pages—and data from the device—such as GPS location. Based on the compiled stochastic information, and using a sliding scale, a throttling mechanism, acceptance variation, and pinging information, the FSP can compare current information from the device with what is known about the user and the device to provide a more accurate and reliable authentication process.

主权项

1. A system for use with a service provider and a consumer electronic device, the system comprising:
a database of the service provider, the database comprising stochastic behavioral information associated with a user, wherein the stochastic behavioral information includes a stochastic material comprising buying habit information including a time of purchase and a location of the user at the time of purchase; a non-transitory memory storing machine-readable instructions; and one or more hardware processors coupled to the non-transitory memory and configured to read the machine-readable instructions to cause the system to perform operations comprising:
accessing the database for the stochastic behavioral information associated with the user for authenticating the user;periodically pinging the stochastic behavioral information associated with the user, wherein:
the pinging comprises verifying at least a portion of the stochastic behavioral information; andthe periodicity of the pinging is set to a particular period of time determined according to a sliding scale value for the user that is based on an accumulation of data comprising the stochastic behavioral information associated with the user;communicating with the consumer electronic device for providing communication between the user and the processor;collecting a specific instance of stochastic material based on the communication with the consumer electronic device;comparing the specific instance of stochastic material with the stochastic material in the database;determining whether the specific instance of stochastic material is a fit to a pattern of variation portrayed by the buying habit information associated with the user; andauthenticating the user, based on 1) the fit to the pattern of variation and 2) a computation directly from the specific instance of stochastic material, including a first time of a first purchase and a first location of the user at the first time of the first purchase, and the stochastic material in the database, including a second time of a second purchase and a second location of the user at the second time of the second purchase, that the difference in time between the first time and the second time is not less than a pre-specified minimum travel time for the user based on the distance between the first location and the second location.