Context-dependent authentication system, method and device
A method for authenticating a user using a user device connected to a communications network, the method comprising an implicit phase, wherein said implicit phase comprises performing at least one task within a workflow, said at least one task necessary to move forward within said workflow; storing information associated with said performing of at least one task; comparing said stored information with a stored user profile; and determining whether said authentication of said user is successful or unsuccessful based on said comparing.
1. A mobile device coupled to a communications network for authenticating a user comprising:
a user interface,
a first sensor and a second sensor, and
a transaction authentication information unit, said transaction authentication information unit operating an authentication workflow comprising an a user specific authentication context and an explicit authentication task,
said user specific authentication context based on a plurality of user specific information,
said transaction authentication information unit receiving a first data set from said first sensor associated with a first user specific authentication context,
said transaction authentication information unit receiving a second data set from said second sensor, said second data set associated with a second user specific authentication context, and
said transaction authentication information unit dynamically calculating a weighting for said first data set and said second data set and based on said weighting, said first data set, and said second data set, determining a correlation between said first data set and said second data set, said weighting being adapted based on said first data set or said second data set, said transaction authentication information unit based on said correlation authenticating said user, wherein if said correlation is less than a threshold, the authentication is unsuccessful and the transaction authentication information unit initiates said explicit authentication task.
2. The mobile device of claim 1 , wherein said first sensor and said second sensor are chosen from a group comprising:
login speed units,
environmental units,
gyroscopes,
accelerometers, and
Global Positioning Satellite (GPS) units.
3. The mobile device of claim 1 , wherein said user specific authentication context is chosen from a group comprising:
location analysis,
user behavioral analytics,
biometric analytics,
device contextual checks,
network intelligence, and
information extracted from crowdsourced information.
4. A method for authenticating a user of a mobile device coupled to a communications network, said method comprising:
monitoring, by a transaction authentication information unit of said mobile device, for the initiation of an authentication transaction, said mobile device further comprising a user interface, a first sensor, and a second sensor;
initiating, by said transaction authentication information unit, an authentication workflow comprising an user specific authentication context and an explicit authentication task, said user specific authentication context based on a plurality of user specific information;
receiving, by said transaction authentication information unit, a first data set from said first sensor associated with a first user specific authentication context;
receiving, by said transaction authentication information unit, a second data set from said second sensor, said second data set associated with a second user specific authentication context; and
said transaction authentication information unit dynamically calculating a weighting for said first data set and said second data set, said weighting being adapted based on said first data set or said second data set, said transaction authentication information unit based on said weighting, said first data set, and said second data set, determining a correlation between said first data set and said second data set;
said transaction authentication information unit, based on said correlation, authenticating said user, wherein if said correlation is less than a threshold, the authentication is unsuccessful and the transaction authentication information unit initiates said explicit authentication task.
5. The method of claim 4 further comprising:
prompting the user to flag said authentication transaction with a degree of concern.
6. The method of claim 4 , wherein said first sensor and said second sensor are chosen from a group comprising:
login speed units,
environmental units,
gyroscopes,
accelerometers, and
Global Positioning Satellite (GPS) units.
7. The method of claim 4 , wherein said user specific authentication context is chosen from a group comprising:
location analysis,
user behavioral analytics,
biometric analytics,
device contextual checks,
network intelligence, and
information extracted from crowdsourced information.