I-Corps: Behavioral Biometrics for Preventing and Detecting Digital Frauds

I-Corps：用于预防和检测数字欺诈的行为生物识别技术

• 批准号: 2042030
• 负责人: Daqing Hou
• 金额: $ 5万
• 依托单位: Clarkson University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-01-01 至 2021-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2042030&HistoricalAwards=false
• 关键词: Corps; Behavioral; Biometrics; Preventing; Detecting

The broader impact/commercial potential of this I-Corps project empowers eCommerce owners, digital bankers, and healthcare service providers alike with a behavioral biometrics-based solution and service to more effectively prevent and detect fraudulent activities after account takeovers. The demand for online fraud detection is strong due to the continuing growth of eCommerce, banking, and healthcare, and the rising of account takeovers and related fraud. Moreover, industrialized fraudsters can weaponize a vulnerability in matters of minutes once a breach is exploited, and exponentially scale it to cause high financial loss for organizations and more importantly, undermine their credibility and reputation. Unfortunately, currently organizations rely on dedicated fraud detection teams to perform manual reviews to handle fraudulent cases, which is both time consuming and costly; they also rely on simplified, rules-based approaches for fraud detection, which unfortunately result in a high number of false positives and ultimately hurt customer experience and retention. Leveraging behavioral biometrics collected unobtrusively when a user conducts online business, the proposed innovation will provide additional user authentication and thus help businesses prevent and detect more fraudulent activities in a more reliable and effective fashion.This I-Corps project seeks to perform customer discovery of business entities such as eCommerce owners, digital bankers, and healthcare service providers, to identify the most valuable product parameters before formulating the proposed innovation into a market-ready product. A common problem is that these businesses are all obligated to safeguard user data and online transactions but are plagued by the continuous stream of account takeover attacks on their IT systems and the ensuing financial fraud. The proposed innovation produces a software solution and service that provides additional capability of user authentication to help businesses to significantly reduce such fraud despite of account takeovers. This innovation distinguishes between users by leveraging behavioral biometrics that unobtrusively capture a user's unique computing behavior, such as how they type on keyboards or how they move the mouse. The proposed software product packages state-of-the-art authentication algorithms so that existing business applications can access them via API calls. In addition, the end user is provided with full control over their own biometric data for privacy protection. The technological implementation of the proposed approach uses JavaScript in the web browsers and integrates with legacy applications at the server end.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该I-Corps项目的更广泛的影响/商业潜力使电子商务所有者，数字银行家和医疗保健服务提供商都具有基于行为生物识别的解决方案和服务，以更有效地预防和检测账户收购后的欺诈活动。由于电子商务，银行业和医疗保健的持续增长以及帐户收购和相关欺诈的增加，对在线欺诈检测的需求很大。 此外，工业化欺诈者一旦违反违规行为，就可以在几分钟内将脆弱性武器化，并成倍地扩展其对组织造成高财务损失，更重要的是，破坏了他们的信誉和声誉。不幸的是，目前组织依靠专门的欺诈检测团队来执行手动审查以处理欺诈性案件，这既耗时又昂贵。他们还依靠简化的基于规则的方法进行欺诈检测，不幸的是，这导致了大量的误报，并最终损害了客户体验和保留。当用户进行在线业务进行在线业务时，利用行为生物识别技术会毫不显着地收集，拟议的创新将提供其他用户身份验证，从而帮助企业以更可靠，更有效的方式预防和检测更欺诈性的活动。该I-Corps项目旨在努力在企业实体中识别企业实体，以识别数字银行和医疗服务的业务实体，以识别最大的企业实体，以识别最大的供应商，最大程度地识别型号，以识别数字保健服务，以识别最大的保健服务，并识别最大的预言，并识别最大的预言，创新成市场就绪的产品。一个普遍的问题是，这些业务都必须保护用户数据和在线交易，但由于对其IT系统和随之而来的财务欺诈的持续收购攻击而困扰着这些业务。拟议的创新生产了软件解决方案和服务，该软件解决方案和服务提供了用户身份验证的额外功能，以帮助企业显着减少此类欺诈，尽管收购了帐户。这项创新通过利用行为生物识别技术来区分用户，这些行为生物识别能力毫不客气地捕获用户的唯一计算行为，例如他们在键盘上键入的方式或如何移动鼠标。提出的软件产品软件包最先进的身份验证算法，以便现有的业务应用程序可以通过API调用访问它们。此外，还为最终用户提供了对自己的生物识别数据的完全控制，以保护隐私。拟议方法的技术实施使用了Web浏览器中的JavaScript，并与服务器End的旧应用程序集成在一起。该奖项反映了NSF的法定任务，并被认为是值得通过基金会的智力优点和更广泛影响的评估评估标准来通过评估来获得支持的。