Behavioral one-time-passcode (OTP) generation

1. A server comprising:

a memory including a behavioral one-time-passcode (OTP) program and a user profile repository; and

an electronic processor communicatively connected to the memory, the electronic processor, when executing the behavioral OTP program, is configured to:

receive a one-time-passcode (OTP) request,

generate a behavioral one-time-passcode (OTP) based on a user profile stored in the user profile repository in response to receiving the OTP request,

output the behavioral OTP that is generated,

receive a request for validation of a submission of the behavioral OTP,

output a result that indicates whether the submission of the behavioral OTP is successfully validated,

store observations of the submission of the behavioral OTP in a pattern table that is included in the user profile, and

perform a passive behavioral analysis based on the pattern table and the observations of the submission of the behavioral OTP,

wherein the result also indicates whether a user that submitted the behavioral OTP is the same as a previously-observed user associated with the user profile.

2. The server of claim 1 , wherein, when executing the behavioral OTP program, the electronic processor is further configured to receive the observations of the submission of the behavioral OTP.

3. The server of claim 1 , wherein, to generate the behavioral one-time-passcode (OTP) based on the user profile stored in the user profile repository in response to receiving the OTP request, the electronic processor is further configured to generate the behavioral one-time-passcode (OTP) based on a lack of the pattern table in the user profile stored in the user profile repository, wherein the behavioral OTP includes two or more random characters.

4. A server comprising:

a memory including a behavioral one-time-passcode (OTP) program and a user profile repository; and

an electronic processor communicatively connected to the memory, the electronic processor, when executing the behavioral OTP program, is configured to:

receive a one-time-passcode (OTP) request,

generate a behavioral one-time-passcode (OTP) based on a user profile stored in the user profile repository in response to receiving the OTP request, and

output the behavioral OTP that is generated,

wherein, to generate the behavioral one-time-passcode (OTP) based on the user profile stored in the user profile repository in response to receiving the OTP request, the electronic processor is further configured to generate the behavioral one-time-passcode (OTP) based on a pattern table that is included in the user profile stored in the user profile repository, and wherein the behavioral OTP includes two or more non-random characters.

5. The server of claim 4 , wherein the behavioral OTP further includes one or more random characters.

6. A system comprising:

a network;

an interface device; and

a server including

a memory including a behavioral one-time-passcode (OTP) program and a user profile repository; and

an electronic processor communicatively connected to the memory, the electronic processor, when executing the behavioral OTP program, is configured to:

receive a one-time-passcode (OTP) request from the interface device via the network,

generate a behavioral one-time-passcode (OTP) based on a user profile stored in the user profile repository in response to receiving the OTP request,

output the behavioral OTP that is generated to the interface device via the network,

receive a request for validation of a submission of the behavioral OTP from the interface device,

output a result that indicates whether the submission of the behavioral OTP is successfully validated to the interface device,

store observations of the submission of the behavioral OTP in a pattern table that is included in the user profile, and

perform a passive behavioral analysis based on the pattern table and the observations of the submission of the behavioral OTP,

wherein the result also indicates whether a user that submitted the behavioral OTP is the same as a previously-observed user associated with the user profile.

7. The system of claim 6 , wherein, when executing the behavioral OTP program, the electronic processor is further configured to receive the observations of the submission of the behavioral OTP from the interface device.

8. The system of claim 6 , wherein, to generate the behavioral one-time-passcode (OTP) based on the user profile stored in the user profile repository in response to receiving the OTP request, the electronic processor is further configured to generate the behavioral one-time-passcode (OTP) based on a lack of the pattern table in the user profile stored in the user profile repository, wherein the behavioral OTP includes two or more random characters.

9. A system comprising:

a network;

an interface device; and

a server including

a memory including a behavioral one-time-passcode (OTP) program and a user profile repository; and

an electronic processor communicatively connected to the memory, the electronic processor, when executing the behavioral OTP program, is configured to:

receive a one-time-passcode (OTP) request from the interface device via the network,

generate a behavioral one-time-passcode (OTP) based on a user profile stored in the user profile repository in response to receiving the OTP request,

wherein the interface device includes a second electronic processor and a second memory storing an application, wherein, when executing the application, the second electronic processor is configured to:

transmit the OTP request,

receive the behavioral OTP from the server,

control a display screen to display the behavioral OTP to a user in response to receiving the behavioral OTP from the server,

receive a submission of the behavioral OTP from the user,

observe the submission of the behavioral OTP from the user,

request a validation of the submission of the behavioral OTP from the server, and

output observations of the submission of the behavioral OTP to the server.

10. A system comprising:

a network;

an interface device; and

a server including

a memory including a behavioral one-time-passcode (OTP) program and a user profile repository; and

an electronic processor communicatively connected to the memory, the electronic processor, when executing the behavioral OTP program, is configured to:

receive a one-time-passcode (OTP) request from the interface device via the network,

generate a behavioral one-time-passcode (OTP) based on a user profile stored in the user profile repository in response to receiving the OTP request, and

output the behavioral OTP that is generated to the interface device via the network,

wherein, to generate the behavioral one-time-passcode (OTP) based on the user profile stored in the user profile repository in response to receiving the OTP request, the electronic processor is further configured to generate the behavioral one-time-passcode (OTP) based on a pattern table that is included in the user profile stored in the user profile repository, and wherein the behavioral OTP includes two or more non-random characters.

11. The system of claim 10 , wherein the behavioral OTP further includes one or more random characters.

12. A method comprising:

receiving, with an electronic processor, a one-time-passcode (OTP) request via a communication interface;

generating, with the electronic processor, a behavioral one-time-passcode (OTP) based on a user profile stored in a memory in response to receiving the OTP request; and

controlling, with the electronic processor, the communication interface to output the behavioral OTP that is generated;

receiving, with the electronic processor, a request for validation of a submission of the behavioral OTP;

controlling, with the electronic processor, the communication interface to output a result that indicates whether the submission of the behavioral OTP is successfully validated;

controlling, with the electronic processor, the memory to store observations of the submission of the behavioral OTP in a pattern table that is included in the user profile; and

performing, with the electronic processor, a passive behavioral analysis based on the pattern table and the observations of the submission of the behavioral OTP,

wherein the result also indicates whether a user that submitted the behavioral OTP is the same as a previously-observed user associated with the user profile.

13. The method of claim 12 , wherein generating the behavioral one-time-passcode (OTP) based on the user profile stored in the memory in response to receiving the OTP request further includes generating the behavioral one-time-passcode (OTP) based on a lack of the pattern table in the user profile stored in the memory, wherein the behavioral OTP includes two or more random characters.

14. A method comprising:

receiving, with an electronic processor, a one-time-passcode (OTP) request via a communication interface;

generating, with the electronic processor, a behavioral one-time-passcode (OTP) based on a user profile stored in a memory in response to receiving the OTP request; and

controlling, with the electronic processor, the communication interface to output the behavioral OTP that is generated,

wherein generating the behavioral one-time-passcode (OTP) based on the user profile stored in the memory in response to receiving the OTP request further includes generating the behavioral one-time-passcode (OTP) based on a pattern table that is included in the user profile stored in the memory, and wherein the behavioral OTP includes two or more non-random characters.