Invention:
This technology is an advanced cybersecurity tool called Occupational Knowledge-Based Authentication (Occu-KBA). It enhances traditional identity verification methods by using occupation-specific questions. For instance, a doctor might be asked about medical terminology, while an accountant could face questions about financial regulations. By leveraging recent advancements in generative artificial intelligence (Gen-AI) and large language models like ChatGPT, it dynamically generates unique challenge questions tailored to the user's professional knowledge and experience, ensuring only those with genuine expertise can successfully authenticate. Occu-KBA also incorporates behavioral analytics, evaluating not just the correctness of answers but also how users interact with their devices while answering. This multi-factor approach enhances security, making it significantly harder to breach. The tool can seamlessly integrate with existing systems, providing a more personalized and secure user experience across various industries such as finance, healthcare, e-commerce, and government services. This solution effectively addresses the common challenges of traditional methods, such as forgotten answers and compromised databases, and offers robust protection against family-and-friends fraud.
Background:
Traditional Knowledge-Based Authentication (KBA) methods that rely on static or dynamic challenge questions often suffer from issues such as users forgetting their answers, cumbersome processes, and the availability of compromised KBA answer databases on the dark web. Additionally, they typically employ a single-factor authentication approach, validating identities solely based on the correctness of answers, which can be inadequate against sophisticated fraud attempts. Current solutions include static KBA, where users answer pre-set questions (e.g., "What is your first pet's name?"), and dynamic KBA, which generates questions based on public records. Geo-KBA, a more recent advancement, uses geographical data and behavioral analytics to enhance security. However, Geo-KBA can still be vulnerable to family-and-friends fraud, where close acquaintances might have the necessary geographical knowledge to bypass the system. Occu-KBA not only mitigates the risk of forgotten answers and compromised data but also incorporates behavioral analytics, creating a multi-factor authentication method that is significantly harder to breach and offers robust protection against family-and-friends fraud.
Applications:
- Identity verification for security purposes
- Government services
- Banking, Financial Service, Insurance (BFSI)
- Healthcare
- Education
- E-commerce
Advantages:
- Enhanced security
- Fraud mitigation
- Can be integrated with existing systems
- Can dynamically generate new authentication questions
