Method for confirming the identity of a user in a browsing session of an online service

A method for confirming the identity of a user in a browsing session of an online service, comprising the steps of:

• a) providing a web server in which an online service resides, the web server being in communication with at least one client device provided with at least one user interface;
• b) providing a database associated with the web server in which a plurality of data relating to one or more users registered to the online service are stored;
• c) providing a script residing on the client device;
• d) identifying via the script each browsing session on the online service and associating it with a user registered to the online service when said user performs authentication;
• e) collecting via the script biometric data generated by said at least one user interface and associating them with the authenticated user, the biometric data comprising one or more sets of sensitive data chosen from a typing pattern on a keyboard of the user interface, a movement pattern of the cursor of the user interface, and a usage pattern of the user interface;
• f) generating machine learning templates via the script as a result of processing biometric data;
• g) storing biometric data and machine learning templates locally in the client device such that sensitive biometric data are in no way shared outside the environment of the client device as they are not sent to the web server;
• h) generating a score associated with the user as a result of the processing via the script of new biometric data collected on said at least one user interface based on the machine learning templates generated in step f);
• i) sending only the score to the web server, such that there is no sharing of the sensitive biometric data with the web server;
• and
• l) verifying the identity of the authenticated user as a result of the score processing by means of a security algorithm residing on the web server.