Authentication and fraud detection based on user behavior

A computer-implemented method for providing user authentication, comprising:

• obtaining a first set of user behavioral information associated with a first user indicating a first sequence for an order of access by the user with one or more user interface objects specific to an application installed on a user device accessible via a user interface provided by the application that includes a first sequence for an order of user-provided input for the one or more user interface objects and the first set of user behavioral information including a time when the application is accessed, a type of the user device used to access the application, and a location of the user device when the application is accessed;
• obtaining a second set of user behavioral information indicating a second sequence for an order of access to the one or more user interface objects specific to the application that includes a second sequence for an order of user-provided input for the one or more user interface objects;
• determining a confidence level indicating a likelihood that the second set of user behavioral information is associated with the first user based at least in part on comparing the first set of user behavioral information with the second set of user behavioral information, wherein the first set of user behavioral information is different from the second set of user behavioral information based at least in part on a presence or absence of a user interface object of the one or more user interface objects between the first sequence for the order of access and the second sequence for the order of access;
• determining an authentication strategy that includes at least one of determining whether to request authentication, increasing or decreasing a frequency of authentication, increasing or decreasing a strength of authentication, or selecting an authentication scheme from a plurality of authentication schemes;
• requesting authentication of the user utilizing a two-factor authentication scheme selected from a plurality of authentication schemes based at least in part on device information of the user device and the confidence level being below a threshold, the device information identifying the type of the user device;
• and
• restricting access to a portion of the user device that was previously accessible based at least in part on a response to the request for authentication of the user utilizing the two-factor authentication scheme.

One or more non-transitory computer-readable storage media having stored thereon executable instructions for providing user authentication that, when executed by one or more processors of a computer system, cause the computer system to perform operations comprising:

• obtaining historical behavioral information associated with a user based on one or more previous user interactions with an application, the historical behavioral information indicating a sequence for an order of access by the user with a plurality of user interface objects specific to the application via a user interface that includes a first sequence for an order of user-provided input for the plurality of user interface objects and the historical behavioral information including a time when the application is accessed, a type of a user device used to access the application, and a location of the user device when the application is accessed;
• identifying an access pattern to the plurality of user interface objects based at least in part on the historical behavioral information, the access pattern indicating the sequence for the order of access by the user with the plurality of user interface objects specific to the application;
• comparing the identified access pattern with current behavioral information based on one or more current user interactions with the application, the current behavioral information indicating a second sequence for the order of user-provided input for the plurality of user interface objects, wherein the identified access pattern is different from the current behavioral information based at least in part on a presence or absence of a user interface object of the plurality of user interface objects between the first sequence for the order of user-provided input and the second sequence for the order of user-provided input;
• determining a confidence level indicating a likelihood that the current behavioral information is associated with the user based at least in part on the comparison;
• determining an authentication strategy that includes at least one of determining whether to request authentication, increasing or decreasing a frequency of authentication, increasing or decreasing a strength of authentication, or selecting an authentication scheme from a plurality of authentication schemes;
• requesting biometric authentication from the user based at least in part on device information and the determined confidence level being below a threshold, the device information identifying the type of user device utilized by the user to interact with the application;
• and
• restricting access to a portion of the computer system that was previously accessible based at least in part on a response to the request for biometric authentication.