Behavioral profiling method and system to authenticate a user

Patent metadata

Field	Value
Publication number	US-9514293-B1
Application number	US-201514880595-A
Country	US
Kind code	B1
Filing date	Oct 12, 2015
Priority date	Mar 20, 2012
Publication date	Dec 6, 2016
Grant date	Dec 6, 2016

Abstract

Methods and systems for behavioral profiling, and in particular, utilizing crowd-managed data architectures to store and manage that profile, are described. In some embodiments, a method includes observing behavioral characteristics of user interactions during a current session with the user through one of a plurality of channels. Variations between the behavioral characteristics of the user interactions observed during the current session and a behavioral profile previously developed based on prior usage patterns of the user through the plurality of channels are identified, in real-time or near real-time.

First claim

The invention claimed is:

1. A computer-implemented method for storing computing device behavioral characteristics, the method comprising:
monitoring a plurality of behavioral characteristics of user interactions with a first computing device, wherein the user interactions are over a plurality of channels and the user interactions relate to interactions between a user and the first computing device;
identifying a subset of the plurality of behavioral characteristics to add to a block chain;
generating encrypted behavioral characteristics via encrypting the subset of behavioral characteristics;
sending a message to add the encrypted behavioral characteristics to the block chain;
identifying that the encrypted behavioral characteristics have been added to the block chain, comprising:
identifying a number of subsequent data records that have been added to the block chain after the subset of behavioral characteristics was added,
receiving an indication of a minimum number of data records to be added to the block chain, and
comparing the number of subsequent data records added to the block chain to the minimum number, wherein the user interactions are over a plurality of channels;

identifying variations between the plurality of behavioral characteristics of the user interactions and a behavior profile previously developed based on prior usage patterns of the user, wherein the variations are also with respect to a comparison of the plurality of behavioral characteristics of the user interactions and demographic data relating to website behaviors specific to a generation of the user;
sending a decryption key to a company;
receiving a notification that the company has utilized the decryption key to authenticate the user; and
implementing, based on the variations, a challenge level for the user to be authenticated.

2. The method of claim 1 , the method further comprising receiving an indication that a second computing device will store at least part of the data records.

3. The method of claim 2 , the method further comprising receiving an indication that, as a result of the second computing device storing at least part of the data records, an individual associated with the second computing device will receive a reward.

4. The method of claim 3 , the method further comprising identifying a percentage of the data records that are stored on the second computing device.

5. The method of claim 4 , wherein the individual associated with the second computing device only receives the reward when the percentage of the data records that are stored on the second computing device is less than a threshold percentage.

6. The method of claim 5 , wherein the threshold percentage is approximately 20%.

7. The method of claim 1 , wherein the user is prevented from authenticating when the variations are above a predetermined threshold.

8. A system, comprising:
a processor; and
a memory coupled with the processor, the memory comprising executable instructions that when executed by the processor cause the processor to effectuate operations comprising:
monitoring a plurality of behavioral characteristics of user interactions with a first computing device, wherein the user interactions are over a plurality of channels and the user interactions relate to interactions between a user and the first computing device;
identifying a subset of the plurality of behavioral characteristics to add to a block chain;
generating encrypted behavioral characteristics via encrypting the subset of behavioral characteristics;
sending a message to add the encrypted behavioral characteristics to the block chain;
identifying that the encrypted behavioral characteristics have been added to the block chain, comprising:
identifying a number of subsequent data records that have been added to the block chain after the subset of behavioral characteristics was added,
receiving an indication of a minimum number of data records to be added to the block chain, and
comparing the number of subsequent data records added to the block chain to the minimum number, wherein the user interactions are over a plurality of channels;

identifying variations between the plurality of behavioral characteristics of the user interactions and a behavior profile previously developed based on prior usage patterns of the user, wherein the variations are also with respect to a comparison of the plurality of behavioral characteristics of the user interactions and demographic data relating to website behaviors specific to a generation of the user;
sending a decryption key to a company;
receiving a notification that the company has utilized the decryption key to authenticate the user; and
implementing, based on the variations, a challenge level for the user to be authenticated.

9. The system of claim 8 , the instructions further comprising receiving an indication that a second computing device will store at least part of the data records.

10. The system of claim 9 , the instructions further comprising receiving an indication that, as a result of the second computing device storing at least part of the data records, an individual associated with the second computing device will receive a reward.

11. The system of claim 10 , the instructions further comprising identifying a percentage of the data records that are stored on the second computing device.

12. The system of claim 11 , wherein the individual associated with the second computing device only receives the reward when the percentage of the data records that are stored on the second computing device is less than a threshold percentage.

13. The system of claim 12 , wherein the threshold percentage is approximately 20%.

14. The system of claim 8 , wherein the user is prevented from authenticating when the variations are above a predetermined threshold.

Assignees

• United Services Automobile Ass (Usaa)
• Usaa

Inventors

• Moritz Karen M
• Aultman Stephen Seyler
• Campbell Joseph James Albert
• Casillas Debra R
• Neuse Jonathan Edward
• Alonzo Sara Teresa
• Buckingham Thomas Bret
• Fernandez Gabriel Carlos
• Mortensen Maland Keith
• Jameson Hudson Reid
• Morris Michael Frank

Classifications

• G06F21/316 Primary

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title

• G06F21/45

  Structures or tools for the administration of authentication · CPC title

• H04L67/535

  Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34) · CPC title

• H04L63/102

  Entity profiles · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title