SYSTEM AND METHOD FOR UTILIZING BEHAVIORAL CHARACTERISTICS IN AUTHENTICATION AND FRAUD PREVENTION

摘要

A behavioral characteristics authentication system and method (“BCA system”) that facilitates authentication of the identity of a user, registrant, or applicant of a website, application, or other accessible computer resource using a verification process that incorporates behavioral characteristics. In operation, the BCA system compares a single user's behavior with their previous behavior, a user's behavior with behavior generally attributed to non-fraudulent behavior, or a user's behavior with behavior generally attributed to fraudulent behavior. The population of other users that a user's behavior is compared with may be selected to have similar demographic or other characteristics as the user. By analyzing various behavioral characteristics associated with legitimate or fraudulent multi-factor authentication attempts, the BCA system adds another layer of security to online transactions.

主权项

1. A method of verifying that a user is authorized to access a computer-accessible resource, the method comprising:
maintaining a communication number of a verification device associated with a user; receiving a request by the user to access a computer-accessible resource; utilizing the communication number to send a request to the user's verification device that the user perform a verification action; monitoring one or more characteristics indicative of the user's behavior during performance of the requested verification action by the user; determining whether the user successfully performed the requested verification action; comparing the monitored one or more characteristics with an authentication rule to determine whether the authentication rule has been satisfied by the monitored characteristics; and if the verification action has been successfully completed by the user and if the authentication rule has been satisfied by the monitored characteristics, generating an authentication response that indicates that the user has been authenticated for access to the computer-accessible resource.