Mobile device user authentication based on user behavior information

摘要

Authentication involves collecting information relating to a user's behavior relative to a mobile device carried by the user, over a number of time periods that correspond to each other. An authentication technique includes processing the collected information to generate baseline data representing typical user behavior. The authentication technique includes collecting additional information relating to the user's behavior relative to the mobile device over another time period that corresponds to the time periods used to generate the baseline data. The additional information relating to the user's behavior is compared to the baseline data, and a difference between the additional information and the baseline data is determined. An authentication procedure is then applied based on the difference. The authentication may be performed by a mobile device such as a smartphone.

主权项

1. A method, comprising:
receiving, by a device and at periodic intervals over a plurality of time periods, user information associated with a behavior of a user relative to a mobile device associated with the user,
the user information including:
information associated with locations of the mobile device during the periodic intervals over the plurality of time periods, andother information associated with activities performed by the mobile device during the periodic intervals over the plurality of time periods;generating, by the device, at least one frequency distribution based on the user information and as the user information is received at each periodic interval over the plurality of time periods; determining, by the device and as the user information is received at each periodic interval over the plurality of time periods, whether user information, satisfying a predetermined threshold, is received to generate baseline user data that represents typical user behavior; processing, by the device, the user information to generate the baseline user data, at each periodic interval over the plurality of time periods, when the user information, satisfying the predetermined threshold, is received,
processing the user information comprising generating the baseline user data based on a most common behavior of the user relative to the mobile device during a particular time of day; receiving, by the device and after the baseline user data is generated, additional user information associated with the behavior of the user relative to the mobile device,
the additional user information comprising different information associated with an activity performed by the mobile device after the baseline user data is generated,
the user being proximate to the mobile device during the activity; comparing, by the device, the additional user information to the baseline user data; determining, by the device, a difference between the additional user information and the baseline user data based on the comparing; selecting, by the device, an authentication procedure, from a plurality of authentication procedures, based on the difference between the additional user information and the baseline user data; and applying, by the device, the authentication procedure to authenticate the user.