User identification with blended response from dual-layer identification service

A method for identifying a user, the method comprising:

• detecting, with an electronic processor, an access request by the user of a user interface device;
• retrieving, with the electronic processor, a plurality of input profile records associated with the user from an input profile record repository in a memory in response to detecting the access request of the user, each of the plurality of input profile records including a plurality of user inputs from the user interacting with a webpage or a mobile application;
• performing, with the electronic processor, an identification of the user with one or more passive biometrics models and the plurality of input profile records that are retrieved;
• generating, with the electronic processor, an identification response and an additional identification request based on an outcome of the identification of the user with the one or more passive biometrics models and the plurality of input profile records that are retrieved;
• controlling, with the electronic processor, a communication interface to transmit the additional identification request to a second server via a network;
• receiving, with the electronic processor, a second identification response from the second server via the communication interface and the network;
• and
• generating, with the electronic processor, a blended response by modifying one or more characteristics of the identification response with the second identification response, the blended response indicating the identification of the user,
• wherein the additional identification request indicates to the second server that the outcome of the identification of the user is a successful identification of the user, and wherein the additional identification request is a request for an additional user identification based on device identification rules that enhances the successful identification of the user, and
• wherein the device identification rules are divided into a plurality of categories, wherein the additional user identification is based on all of the plurality of categories of the device identification rules that are triggered, and wherein modifying the one or more characteristics of the identification response with the second identification response further includes adjusting biometric thresholds of the one or more passive biometrics models based on the categories of the device identification rules that are triggered.

A system comprising:

• a first server;
• and
• a second server,
• wherein the first server includes
• a communication interface configured to communicate with the second server via a network;
• a memory including an input profile record (IPR) program, an IPR repository, and a dual-layer identification service;
• and
• an electronic processor, when executing the IPR program, configured to:
• detect an access request by a user of a user interface device, and
• retrieve a plurality of input profile records associated with the user from an input profile record repository in the memory in response to detecting the access request of the user, each of the plurality of input profile records including a plurality of user inputs from the user interacting with a webpage or a mobile application,
• wherein, when executing the dual-layer identification service, the electronic processor configured to:
• perform an identification of the user with one or more passive biometrics models and the plurality of input profile records that are retrieved,
• generate an identification response and an additional identification request based on an outcome of the identification of the user with the one or more passive biometrics models and the plurality of input profile records that are retrieved,
• control the communication interface to transmit the additional identification request to the second server via the network,
• receive a second identification response from the second server via the communication interface and the network, and
• generate a blended response by modifying one or more characteristics of the identification response with the second identification response, the blended response indicating the identification of the user,
• wherein the additional identification request indicates to the second server that the outcome of the identification of the user is a successful identification of the user, and wherein the additional identification request is a request for an additional user identification based on device identification rules that enhances the successful identification of the user, and
• wherein the device identification rules are divided into a plurality of categories, wherein the additional user identification is based on all of the plurality of categories of the device identification rules that are triggered, and wherein modifying the one or more characteristics of the identification response with the second identification response further includes adjusting biometric thresholds of the one or more passive biometrics models based on the categories of the device identification rules that are triggered.