Behaviormetrics application system for electronic transaction authorization
This invention discloses a system wherein behaviormetrics are utilized to authenticate electronic transactions, either alone or in combination with other identifiers such as PIN's, passwords, codes and the like. Probability profiles or probability distribution representations may be constructed for determining whether a purported or alleged authorized user is in fact the authorized user, by comparing new data on a real-time basis against probability distribution representations including an authorized user probability distribution representation and a global or wide population probability distribution representation, to provide a probability as to whether the purported authorized user is the authorized user. This invention may utilize keypad, touch screen dynamics, X-Y dynamics, data, X-Y device data, or other data from similar measurable characteristics (such as movement filmed by an ATM machine), to determine the probability that the new data from the purported authorized user indicates or identifies that user as the authorized user.
1. A computerized method for authenticating an electronic transaction, comprising:
accessing a first data characteristic of a purported authorized user of an electronic system measured performing a first prescribed interaction with an input device of the electronic system;
accessing a first probability distribution representation for an authorized user performing the first prescribed interaction;
accessing a first probability distribution representation for a wide population performing the first prescribed interaction;
determining a first value indicative of whether the purported authorized user is the authorized user, utilizing (a) the first data characteristic of the purported authorized user, (b) the first probability distribution representation for the authorized user, and (c) the first probability distribution representation for the wide population;
accessing a second data characteristic of the purported authorized user of the electronic system performing a second prescribed interaction with an input device of the electronic system;
accessing a second probability distribution representation for the authorized user performing the second prescribed interaction; and
accessing a second probability distribution representation for the wide population performing the second prescribed interaction;
determining a second value whether the purported authorized user is the authorized user, utilizing (a) the second data characteristic of the purported authorized user, (b) the second probability distribution representation for the authorized user, and (c) the second probability distribution representation for the wide population; and
authenticating the electronic transaction, if a total value, based on the first value and the second value, is above a prescribed threshold.
2. The computerized method for authenticating an electronic transaction as recited in claim 1 , wherein the first data characteristic of the purported authorized user incorporate a plurality of instances of the purported authorized user performing the first prescribed interaction.
3. The computerized method for authenticating an electronic transaction as recited in claim 1 , further comprising accessing a belief value indicative of a prior probability whether the purported user is the authorized user.
4. The computerized method for authenticating an electronic transaction as recited in claim 3 , wherein, in the determining steps, the utilizing further includes the belief value.
5. The computerized method for authenticating an electronic transaction as recited in claim 1 , wherein the input device is a video camera, a keyboard, a mouse, a touchpad, a touch screen, or other X-Y device.
6. The computerized method for authenticating an electronic transaction as recited in claim 5 , wherein the first interaction is measured with regards to timing, acceleration, or velocity to perform the first interaction with the input device.
7. The computerized method for authenticating an electronic transaction as recited in claim 1 , wherein the first interaction and the second interaction are performed with different types of input devices.
8. The computerized method for authenticating an electronic transaction as recited in claim 1 , wherein the first probability distribution representation for the wide population excludes the authorized user.
9. The computerized method for authenticating an electronic transaction as recited in claim 1 , wherein the first data characteristic of the purported authorized user is a probability distribution representation for the purported authorized user performing a first prescribed interaction.
10. A computerized method for authenticating an electronic transaction, comprising:
accessing data characteristic of a purported authorized user of an electronic system performing prescribed interactions with one or more input devices, including a first prescribed interaction and a second prescribed interaction;
accessing user probability distribution representations for an authorized user based on the authorized user performing interactions with one or more input devices, including the first prescribed interaction and the second prescribed interaction;
accessing global probability distribution representations for a wide population based on the wide population performing interactions with one or more input devices, including the first prescribed interaction and the second prescribed interaction;
determining a total value indicative of whether the purported authorized user is the authorized user, utilizing (a) the data characteristic of the purported authorized user performing the first prescribed interaction and the second prescribed interaction, (b) the user probability distribution representations for the first prescribed interaction and the second prescribed interaction, and (c) the global probability distribution representations for the first prescribed interaction and the second prescribed interaction; and
authenticating the electronic transaction, if the total value is above a prescribed threshold.
11. The computerized method for authenticating an electronic transaction as recited in claim 10 , wherein the data characteristic of the purported authorized user performing the first prescribed interaction incorporates a plurality of instances of the purported authorized user performing the first prescribed interaction.
12. The computerized method for authenticating an electronic transaction as recited in claim 10 , wherein the first prescribed interaction is selected from a group consisting of a keystroke interaction or an X-Y device interaction.
13. The computerized method for authenticating an electronic transaction as recited in claim 10 , further comprising accessing a belief value indicative of a prior probability whether the purported user is the authorized user; wherein, in the determining step, the utilizing further includes the belief value.
14. The computerized method for authenticating an electronic transaction as recited in claim 10 , wherein the first prescribed interaction and the second prescribed interaction are performed with different types of input devices.
15. An electronic system for authenticating an electronic transaction, comprising:
a processing assembly programmed to execute computer-readable instructions for authenticating an electronic transaction including
accessing data characteristic of a purported authorized user of an electronic system performing prescribed interactions with one or more input devices, including a first prescribed interaction and a second prescribed interaction;
accessing user probability distribution representations for an authorized user based on the authorized user performing interactions with one or more input devices, including the first prescribed interaction and the second prescribed interaction;
accessing global probability distribution representations for a wide population based on the wide population performing interactions with one or more input devices, including the first prescribed interaction and the second prescribed interaction;
determining a total value indicative of whether the purported authorized user is the authorized user, utilizing (a) the data characteristic of the purported authorized user performing the first prescribed interaction and the second interaction, (b) the user probability distribution representations for the first prescribed interaction and the second prescribed interaction, and (c) the global probability distribution representations for the first prescribed interaction and the second prescribed interaction, and
authenticating the electronic transaction, if the total value is above a prescribed threshold.
16. The system as recited in claim 15 , wherein the digital storage assembly further stores a belief value indicative of a prior probability whether the purported authorized user is the authorized user; wherein further the determining further utilizes the belief value.
17. The system as recited in claim 15 , further comprising an input device selected from a group consisting of a video camera, a keyboard, a keypad, a touch screen, or other X-Y device.
18. The system as recited in claim 15 , further configured to execute computer-readable instructions for monitoring interactions with the one or more input devices by the purported authorized user to update the data characteristic of a purported authorized user in the digital storage assembly.
19. The system as recited in claim 15 , wherein the first prescribed interaction is selected from a group consisting of a keystroke interaction or an X-Y device interaction.
20. The system as recited in claim 15 , wherein the first prescribed interaction and the second prescribed interaction are performed with different types of input devices.