Sensor-based human authorization evaluation

A system, comprising:

• one or more data processors;
• and
• a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more data processors, cause the one or more data processors to perform operations including:
• detecting, at a resource management system, a first request for one or more access rights to a resource stored at the resource management system, the first request being transmitted by a first user device associated with a first user, and the first user device being configured to include at least one sensor generating first sensor data generated by movement of the first user device;
• accessing the first sensor data associated with the first user device;
• evaluating whether the first user is authorized to access the one or more access rights based on the first sensor data associated with the first user device;
• denying the first user access to the one or more access rights when the first user is determined not to be authorized to access the one or more access rights;
• detecting, at the resource management system, a second request to access the one or more access rights, the second request being transmitted by a second user device associated with a second user;
• accessing second sensor data associated with the second user device;
• determining whether the second sensor data is behaviorally similar to the first sensor data, the determination being based at least in part on a parameter associated with the second request;
• in response to determining that the second sensor data is behaviorally similar to the first sensor data, grouping the first user and the second user into a group associated with a bot;
• determining that the second user is not authorized to access the one or more access rights, the determination being based at least in part on the grouping of the first user and the second user;
• and
• denying the second user access to the one or more access rights.

A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a data processing apparatus to perform operations including:

• detecting, at a resource management system, a first request for one or more access rights to a resource stored at the resource management system, the first request being transmitted by a first user device associated with a first user, and the first user device being configured to include at least one sensor generating first sensor data generated by movement of the first user device;
• accessing the first sensor data associated with the first user device;
• evaluating whether the first user is authorized to access the one or more access rights based on the first sensor data associated with the first user device;
• denying the first user access to the one or more access rights when the first user is determined not to be authorized to access the one or more access rights;
• detecting, at the resource management system, a second request to access the one or more access rights, the second request being transmitted by a second user device associated with a second user;
• accessing second sensor data associated with the second user device;
• determining whether the second sensor data is behaviorally similar to the first sensor data, the determination being based at least in part on a parameter associated with the second request;
• in response to determining that the second sensor data is behaviorally similar to the first sensor data, grouping the first user and the second user into a group associated with a bot;
• determining that the second user is not authorized to access the one or more access rights, the determination being based at least in part on the grouping of the first user and the second user;
• and
• denying the second user access to the one or more access rights.