System and method for behavioural biometric authentication using program modelling

A non-transitory tangible medium that stores machine-readable instructions, that when executed by one or more processors of a user device, causes the user device to perform operations that include:

• over a first time interval, continuously monitoring multiple streams in connection with a user using a first application on the user device, the multiple streams including at least a first stream that includes program observables generated by execution of the first application, and a second stream that includes sensor data, the sensor data comprising or being based on raw information generated by one or more sensors of the user device;
• based on the first stream, selecting a user model from a plurality of user models stored on the user device;
• at multiple instances during the first time interval, making a determination as to whether sensor data of the second stream matches the selected user model;
• and
• over the first time interval, updating an authentication state associated with the user device based on the determinations, to enable the user de vice to implicitly authenticate the user without the user providing an explicit identifier.

A mobile device comprising:

• one or more processors;
• and
• a memory that stores a set of instructions;
• wherein the memory executes the set of instructions to perform operations that include:
• over a first time interval, continuously monitoring multiple streams in connection with a user using a first application on the mobile device, the multiple streams including at least a first stream that includes program observables generated by execution of the first application, and a second stream that includes sensor data, the sensor data comprising or being based on raw information generated by one or more sensors of the mobile device;
• based on the first stream, selecting a user model from a plurality of user models stored on the mobile device;
• at multiple instances during the first time interval, making a determination as to whether sensor data of the second stream matches the selected user model;
• and
• over the first time interval, updating an authentication state associated with the mobile device based on the determinations, to enable the mobile device to implicitly authenticate the user without the user providing an explicit identifier.