# US 8,789,145 B2 · System and method for electronic transaction authorization > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,789,145 B2 - Document ID: US8789145B2 - Status: Granted - Kind: B2 - Application number: 13/439,573 - Filed: 2012-04-04 - Published: 2013-04-18 - Granted: 2014-07-22 - Earliest claimed: 2006-07-11 - Assignees: Identity Metrics, Inc. - Applicants: Timothy Erickson Meehan; Herbert Lewis Alward - Inventors: Timothy Erickson Meehan; Herbert Lewis Alward - Web page: https://patentgrep.com/patent/US8789145B2 ## CPC - G06F 21/30: Authentication, i.e. establishing the identity or authorisation of security principals - G06Q 20/341: {Active cards, i.e. cards including their own processing means, e.g. including an IC or chip} - G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists - G06Q 20/4014: {Identity check for transactions} - G06Q 20/40145: {Biometric identity checks} - G06Q 20/4016: {involving fraud or risk level assessment in transaction processing} - G06Q 30/018: Certifying business or products - G07C 9/257: {electronically (G07C9/26 takes precedence)} - G07F 7/1008: {Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system} - G07F 19/207: {Surveillance aspects at ATMs} - G07C 9/23: by means of a password - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE - G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00}) ## Abstract A system and a related method are disclosed for authenticating an electronic transaction. Input behavioral data is captured related to measured interactions with at least one input device. The input data is compared to probability distribution representations for a demographic group and for a wide population, performing the measured interaction(s). The system is configured to authenticate the electronic transaction based on the comparing. ## Claims ### Claim 1 A computerized method for authenticating an electronic transaction, comprising: capturing input behavioral data for a plurality of users to include-a prescribed user, the input behavioral data related to measured interactions with at least one input device, in which the measured interactions include a first interaction and a second interaction distinct from the first interaction; maintaining on digital storage hardware, data for a plurality of global probability distribution representations for a wide population of users, in which each of the plurality of wide-population probability distribution representations for a wide population is associated to an interaction with the at least one input device; maintaining on digital storage hardware, data for a plurality of user probability distribution representations for a plurality of authorized users, in which each of the plurality of user probability distribution representations is associated to the measured interactions with the at least one input device; comparing via a hardware processing assembly (a) input behavioral data associated with the prescribed user performing the first interaction, (b) the user probability distribution representation for the authorized user performing the first interaction, and (c) the global probability distribution representation for the wide population performing the first interaction; and comparing via the hardware processing assembly (a) input behavioral data associated with the prescribed user performing the second interaction, (b) the user probability distribution representation for the authorized user performing the second interaction, and (c) the global probability distribution representation for the wide population performing the second interaction; and determining a total probability based on the comparing steps; and authenticating the electronic transaction, if the total probability satisfies a prescribed threshold. ### Claim 2 (depends on 1) The computerized method as recited in claim 1, wherein a first data characteristic incorporates a plurality of instances of the prescribed authorized user performing a first prescribed interaction. ### Claim 3 (depends on 1) The computerized method as recited in claim 1, further comprising accessing a belief value indicative of a prior belief whether the prescribed user is the authorized user; wherein, in the determining step, the comparing further includes the belief value. ### Claim 4 (depends on 1) The computerized method as recited in claim 1, wherein the first interaction is a measured event selected from a group including touch movement, touch imprint, touch pressure, multi-touch spacing, and touch sequence. ### Claim 5 (depends on 1) The computerized method as recited in claim 1, further comprising: providing a user interface layout having components positioned and sized according to usability parameters for the authorized user. ### Claim 6 (depends on 1) The computerized method as recited in claim 1, wherein components of a user interface layout are selected from a group including buttons, sliders, and input boxes. ### Claim 7 In a system for authenticating computerized transactions, comprising a client device having at least one input device and communications interface connected to computer communications network (CCN), in which the client device sends through the communications interface over the CCN an identifier unit that includes a plurality of identifiers including (a) one or more behaviormetric identifiers for a purported user via the at least one input device generated during the course of an electronic transaction, and (b) an identifier associated to an authorized user, the client device receives via the CCN authorization of the electronic transaction, comprising: a transaction authorization assembly, having a computer processing hardware assembly (CPA) and digital storage hardware assembly (DSA), in digital communication with the client device via the CCN, that: receives the identifier unit for a purported user via the CCN; accesses a probability distribution representation for the authorized user indicated by the identifier unit for the one or more behaviormetric identifiers, via the DSA; accesses a probability distribution representation for a wide population for the one or more behaviormetric identifiers, via the DSA; determines, via the CPA, a total value indicative of whether the purported authorized user is the authorized user, utilizing (a) the identifier unit, (b) the probability distribution representation for the authorized user, and (c) the probability distribution representation for the wide population; and authorizes the electronic transaction, if the total values satisfies a prescribed threshold. ### Claim 8 (depends on 7) The system as recited in claim 7, wherein the identifier unit includes a first identifier selected from a group consisting of data representations for possession of a money card, debit card or credit card, knowledge of a password, knowledge of a PIN, knowledge of a user identification, for the authorized user. ### Claim 9 (depends on 8) The system as recited in claim 8, wherein the identifier unit includes a second identifier that includes the one or more behaviormetric identifier for the purported user. ### Claim 10 (depends on 8) The system as recited in claim 8, wherein the behaviormetric identifier is a measured event selected from a group consisting of touch movement, touch imprint, touch pressure, multi-touch spacing, and touch sequence. ### Claim 11 A computerized method for authenticating an electronic transaction, comprising: accessing an identifier unit that includes a plurality of identifiers including (a) one or more behaviormetric identifiers for a purported user via the at least one input device generated during the course of an electronic transaction, and (b) an identifier associated to an authorized user, via a digital storage hardware assembly (DSA); accessing a probability distribution representation for the authorized user indicated by the identifier unit for the one or more behaviormetric identifiers, via the DSA; accessing a probability distribution representation for a wide population for the one or more behaviormetric identifiers, via the DSA; determining, via a computer processing hardware assembly (CPA), a total value indicative of whether the purported authorized user is the authorized user, utilizing (a) the identifier unit, (b) the probability distribution representation for the authorized user, and (c) the probability distribution representation for wide population; and authorizing the electronic transaction, if the total values satisfies a prescribed threshold. ### Claim 12 (depends on 11) The computerized method as recited in claim 11, wherein the identifier unit includes a second identifier that includes the one or more behaviormetric identifier for the purported user. ### Claim 13 (depends on 11) The computerized method as recited in claim 11, wherein the one or more input device are selected from a group consisting of a keyboard, a keypad, a signature pad, a camera, a touch screen, or an X-Y device.