Frictionless multi-factor authentication

1 . A server for performing a frictionless multi-factor authentication (fMFA), the server comprising:

a memory including a frictionless multi-factor authentication (fMFA) service, and

an electronic processor communicatively coupled to the memory, the electronic processor is configured to:

receive a frictionless multi-factor authentication (fMFA) request and collected data of a user interface device,

determine, with a unique device identifier (UDID) component, a unique device identifier (UDID) of the user interface device based on device attributes included in the collected data,

determine, with a passive biometrics component, a biometrics match assessment using user input data and device interaction data included in the collected data against a historical profile,

determine whether a user of the user interface device is authenticated under multi-factor authentication (MFA) based on the UDID and the biometrics match assessment,

determine a location of the user interface device based on one or more of the device attributes included in the collected data,

responsive to determining that the user is authenticated under multi-factor authentication (MFA), output a fMFA authentication response that indicates authentication of the user, and

responsive to determining that the user is not authenticated under multi-factor authentication (MFA), output a fMFA denial response that indicates no authentication of the user,

wherein, to determine the biometrics match assessment using the user input data and the device interaction data included in the collected data against the historical profile, the electronic processor is further configured to:

determine a biometric standard that is required by a geographic region including the location of the user interface device, and

select a passive biometric model from a plurality of passive biometric models based on the biometric standard that is required by the geographic region, the plurality of passive biometric models including a first passive biometric model that meets a first one or more biometric standards of a first geographic region and a second passive biometric model that meets a second one or more biometric standards of a second geographic region,

wherein the second one or more biometric standards are distinct from the first one or more biometric standards,

wherein the second geographic region is separate and distinct from the first geographic region, and

wherein the passive biometric model that is selected generates the biometrics match assessment.

2 . The server of claim 1 , wherein, to determine the unique device identifier (UDID) of the user interface device based on the device attributes included in the collected data, the electronic processor is further configured to:

extract the device attributes, user history, and account history included in the collected data,

transmit a UDID request, the device attributes, the user history, and the account history to a UDID server, and

receive the UDID from the UDID server.

3 . The server of claim 1 , wherein, to determine the unique device identifier (UDID) of the user interface device based on the device attributes included in the collected data, the electronic processor is further configured to:

extract the device attributes, user history, and account history included in the collected data, and

generate, with the fMFA service, the UDID based on the device attributes, the user history, and the account history.

4 . The server of claim 1 , wherein, to determine the biometrics match assessment using user input data and the device interaction data included in the collected data against the historical profile, the electronic processor is further configured to:

extract the user input data and the device interaction data included in the collected data,

select a passive biometrics server from a plurality of passive biometrics servers based on the passive biometric model that is selected, the passive biometrics server storing the passive biometric model that is selected,

transmit a biometrics match assessment request, the user input data, and the device interaction data to the passive biometrics server that is selected, and

receive the biometrics match assessment from the passive biometrics server that is selected.

5 . The server of claim 1 , wherein the first one or more biometric standards includes a first false positive standard, and wherein the second one or more biometric standards includes a second false positive standard that has less false positives than the first false positive standard.

6 . The server of claim 1 , wherein, to determine the biometrics match assessment using the user input data and the device interaction data included in the collected data against the historical profile, the electronic processor is further configured to:

extract the user input data and the device interaction data included in the collected data, and

determine the biometrics match assessment with the fMFA service.

7 . The server of claim 1 , wherein, to receive the frictionless multi-factor authentication (fMFA) request and the collected data of the user interface device, the electronic processor is further configured to receive both the fMFA request and the collected data of the user interface device from the user interface device.

8 . The server of claim 1 , wherein, to receive the frictionless multi-factor authentication (fMFA) request and the collected data of the user interface device, the electronic processor is further configured to receive the fMFA request and the collected data of the user interface device from a second server that is different from the server.

9 . A method for performing a frictionless multi-factor authentication (fMFA), the method comprising:

receiving, with an electronic processor of a server, a frictionless multi-factor authentication (fMFA) request and collected data of a user interface device;

determining, with the electronic processor and a unique device identifier (UDID) component, a unique device identifier (UDID) of the user interface device based on device attributes included in the collected data;

determining, with the electronic processor and a passive biometrics component, a biometrics match assessment using user input data and device interaction data included in the collected data against a historical profile;

determining, with the electronic processor, a location of the user interface device based on one or more of the device attributes included in the collected data;

determining, with the electronic processor, whether a user of the user interface device is authenticated under multi-factor authentication (MFA) based on the UDID and the biometrics match assessment;

responsive to determining that the user is authenticated under multi-factor authentication (MFA), outputting, with the electronic processor, a fMFA authentication response that indicates authentication of the user; and

responsive to determining that the user is not authenticated under multi-factor authentication (MFA), outputting, with the electronic processor, a fMFA denial response that indicates no authentication of the user,

wherein determining the biometrics match assessment using the user input data and the device interaction data included in the collected data against the historical profile further includes

determining a biometric standard that is required by a geographic region including the location of the user interface device, and

selecting a passive biometric model from a plurality of passive biometric models based on the biometric standard that is required by the geographic region, the plurality of passive biometric models including a first passive biometric model that meets a first one or more biometric standards of a first geographic region and a second passive biometric model that meets a second one or more biometric standards of a second geographic region,

wherein the second one or more biometric standards are distinct from the first one or more biometric standards,

wherein the second geographic region is separate and distinct from the first geographic region, and

wherein the passive biometric model that is selected generates the biometrics match assessment.

10 . The method of claim 9 , wherein determining, with the electronic processor and the UDID component, the unique device identifier (UDID) of the user interface device based on the device attributes included in the collected data further includes

extracting the device attributes, user history, and account history included in the collected data,

transmitting a UDID request, the device attributes, the user history, and the account history to a UDID server, and

receiving the UDID from the UDID server.

11 . The method of claim 9 , wherein determining, with the electronic processor and the UDID component, the unique device identifier (UDID) of the user interface device based on the device attributes included in the collected data further includes

extracting the device attributes, user history, and account history included in the collected data, and

generating, with a frictionless multi-factor authentication service that is stored in a memory of the server, the UDID based on the device attributes, the user history, and the account history.

12 . The method of claim 9 , wherein determining, with the electronic processor and the passive biometrics component, the biometrics match assessment using the user input data and the device interaction data included in the collected data against the historical profile further includes

extracting the user input data and the device interaction data included in the collected data,

selecting a passive biometrics server from a plurality of passive biometrics servers based on the passive biometric model that is selected, the passive biometrics server storing the passive biometric model that is selected,

transmitting a biometrics match assessment request, the user input data, and the device interaction data to the passive biometrics server that is selected, and

receive the biometrics match assessment from the passive biometrics server that is selected.

13 . The method of claim 9 , wherein the first one or more biometric standards includes a first false positive standard, and wherein the second one or more biometric standards includes a second false positive standard that has less false positives than the first false positive standard.

14 . The method of claim 9 , wherein determining, with the electronic processor and the passive biometrics component, the biometrics match assessment using the user input data and the device interaction data included in the collected data against the historical profile further includes

extracting the user input data and the device interaction data included in the collected data, and

determining the biometrics match assessment with a frictionless multi-factor authentication service that is stored in a memory of the server.

15 . The method of claim 9 , wherein receiving, with the electronic processor of the server, the frictionless multi-factor authentication (fMFA) request and the collected data of the user interface device further includes receiving both the fMFA request and the collected data of the user interface device from the user interface device.

16 . The method of claim 9 , wherein receiving, with the electronic processor of the server, the frictionless multi-factor authentication (fMFA) request and the collected data of the user interface device further includes receiving the fMFA request and the collected data of the user interface device from a second server that is different from the server.

17 . A non-transitory computer-readable medium comprising instructions that, when executed by an electronic processor, causes the electronic processor to perform a set of operations comprising:

receiving a frictionless multi-factor authentication (fMFA) request and collected data of a user interface device;

determining, with a unique device identifier (UDID) component, a unique device identifier (UDID) of the user interface device based on device attributes included in the collected data;

determining, with a passive biometrics component, a biometrics match assessment using user input data and device interaction data included in the collected data against a historical profile;

determining a location of the user interface device based on one or more of the device attributes included in the collected data;

determining whether a user of the user interface device is authenticated under multi-factor authentication (MFA) based on the UDID and the biometrics match assessment;

responsive to determining that the user is authenticated under multi-factor authentication (MFA), outputting a fMFA authentication response that indicates authentication of the user; and

responsive to determining that the user is not authenticated under multi-factor authentication (MFA), outputting a fMFA denial response that indicates no authentication of the user,

wherein determining the biometrics match assessment using the user input data and the device interaction data included in the collected data against the historical profile further includes

determining a biometric standard that is required by a geographic region including the location of the user interface device, and

selecting a passive biometric model from a plurality of passive biometric models based on the biometric standard that is required by the geographic region, the plurality of passive biometric models including a first passive biometric model that meets a first one or more biometric standards of a first geographic region and a second passive biometric model that meets a second one or more biometric standards of a second geographic region,

wherein the second one or more biometric standards are distinct from the first one or more biometric standards,

wherein the second geographic region is separate and distinct from the first geographic region, and

wherein the passive biometric model that is selected generates the biometrics match assessment.

18 . The non-transitory computer-readable medium of claim 17 ,

wherein determining, with the passive biometrics component, the biometrics match assessment using the user input data and the device interaction data included in the collected data against the historical profile further includes

selecting a passive biometrics server from a plurality of passive biometrics server based on the passive biometric model that is selected, the passive biometrics server storing the passive biometric model that is selected,

transmitting a biometrics match assessment request, the user input data, and the device interaction data to the passive biometrics server that is selected, and

receiving the biometrics match assessment from the passive biometrics server.

19 . The non-transitory computer-readable medium of claim 17 , wherein the first one or more biometric standards includes a first false positive standard, and wherein the second one or more biometric standards includes a second false positive standard that has less false positives than the first false positive standard.

20 . The server of claim 5 , wherein the first false positive standard is one false positive in one thousand authentications, and wherein the second false positive standard is one false positive in ten thousand authentications.