Mobile communications device providing heuristic security authentication features and related methods
A mobile communications device includes a plurality of first input devices capable of passively collecting input data, a second input device(s) capable of collecting response data based upon a challenge, and a processor capable of determining a level of assurance (LOA) that possession of the mobile communications device has not changed based upon a statistical behavioral model and the passively received input data, and comparing the LOA with a security threshold. When the LOA is above the security threshold, the processor may be capable of performing a given mobile device operation without requiring response data from the second input device(s). When the LOA falls below the security threshold, the processor may be capable of generating the challenge, performing the given mobile device operation responsive to valid response data, and adding recent input data to the statistical behavioral model responsive to receipt of the valid response data.
1. A mobile communications device, comprising:
a processor coupled to at least one first input that passively collects input data and at least one second input that collects response data based on a challenge;
memory storing program instructions that when executed by the processor, cause the processor to determine that a user is authorized to instruct the mobile communications device to perform a mobile device operation by:
generating a statistical behavioral model based upon the passively collected input data for the user;
determining a level of assurance (LOA) based upon the statistical behavioral model and the passively collected input data from the at least one first input;
comparing the LOA with a threshold and based on the comparison:
determining that the LOA meets or exceeds the threshold, and as a result of the determining, enabling the mobile device operation without requiring response data from the at least one second input; and
otherwise, determining that the LOA does not meet or exceed the threshold and, as a result of the determining, generating the challenge and enabling the mobile device operation responsive to valid response data from the at least one second input; and
generating an authentication token based upon the LOA being above the threshold.
2. The mobile communications device of claim 1 , wherein generating the statistical behavioral model is further based upon an artificial neural network providing artificial intelligence (AI) for learning new passively collected input data for addition to the statistical behavioral model.
3. The mobile communications device of claim 1 , wherein the processor runs a plurality of different applications, and determines the LOA further based upon a usage pattern of the plurality of applications.
4. The mobile communications device of claim 1 , further comprising a wireless transceiver coupled to the processor, and wherein the processor determines the LOA further based upon a usage pattern of the wireless transceiver.
5. The mobile communications device of claim 1 , wherein the given mobile device operation is selected from among a plurality of different mobile device operations, each having respective different security thresholds associated therewith, and wherein the processor compares the LOA with the corresponding security threshold for the given mobile device operation.
6. The mobile communications device of claim 1 , wherein the mobile device operation is prohibited when response data from the at least one second input device for the challenge is invalid.
7. The mobile communications device of claim 1 wherein the processor directs the mobile communications device to communicate LOA data to a cloud storage system.
8. A method operable on a mobile communications device including a processor and memory storing program instructions, at least one first input that passively collects input data, and at least one second input that collects response data based upon a challenge, the method comprising:
the processor executing the program instructions stored in the memory to determine that a user is authorized to instruct the mobile communications device to perform a mobile device operation by:
generating a statistical behavioral model based upon the passively collected input data for the user;
determining a level of assurance (LOA) based upon the statistical behavioral model and the passively collected input data from the at least one first input;
comparing the LOA with a threshold and based on the comparison:
determining that the LOA meets or exceeds the threshold, and as a result of the determining, enabling the mobile device operation without requiring response data from the at least one second input; and
otherwise, determining that the LOA does not meet or exceed the threshold and, as a result of the determining, generating the challenge and enabling the mobile device operation responsive to valid response data from the at least one second input; and
generating an authentication token based upon the LOA being above the threshold.
9. The method of claim 8 wherein the first input includes at least one of a position sensing device, a microphone, a gyroscope, an accelerometer, a compass, at least one input key, a pressure sensor, an image sensor, or a touchsensor.
10. The method of claim 8 wherein the at least one second input collects gesture response data based upon the challenge.
11. The method of claim 8 wherein the at least one second input collects signature response data based upon the challenge.
12. The method of claim 8 wherein the at least one second input collects image response data based upon the challenge.
13. The method of claim 8 wherein the at least one second input collects at least one of iris or facial scanning response data based upon the challenge.
14. The method of claim 8 , further comprising prohibiting the mobile device operation when response data from the at least one second input device for the challenge is invalid.
15. A non-transitory computer-readable medium for a mobile communications device including a processor, at least one first input that passively collects input data, and at least one second hardware input that collects response data based upon a challenge, the computer-readable medium storing program instructions that when executed by the processor cause the processor to determine that a user is authorized to instruct the mobile communications device to perform a mobile device operation by:
generating a statistical behavioral model based upon the passively collected input data for the user;
determining a level of assurance (LOA) based upon the statistical behavioral model and the passively collected input data from the at least one first input;
comparing the LOA with a threshold and based on the comparison:
determining that the LOA meets or exceeds the threshold, and as a result of the determining, enabling the mobile device operation without requiring response data from the at least one second input; and
otherwise, determining that the LOA does not meet or exceed the threshold and, as a result of the determining, generating the challenge and enabling the mobile device operation responsive to valid response data from the at least one second input; and
generating an authentication token based upon the LOA being above the threshold.
16. The non-transitory computer-readable medium of claim 15 wherein the first input includes at least one of a position sensing device, a microphone, a gyroscope, an accelerometer, a compass, at least one input key, a pressure sensor, an image sensor, or a touch sensor.
17. The non-transitory computer-readable medium of claim 15 wherein the at least one second input collects gesture response data based upon the challenge.
18. The non-transitory computer-readable medium of claim 15 wherein the at least one second input collects signature response data based upon the challenge.
19. The non-transitory computer-readable medium of claim 15 wherein the at least one second input collects image response data based upon the challenge.
20. The non-transitory computer-readable medium of claim 15 wherein the at least one second input collects at least one of iris or facial scanning response data based upon the challenge.