I-Corps: Behavioral Biometrics for Preventing and Detecting Digital Frauds

这个i-Corps项目的更广泛的影响/商业潜力使电子商务所有者、数字银行家和医疗保健服务提供商能够使用基于行为生物识别的解决方案和服务，以更有效地防止和检测帐户接管后的欺诈活动。由于电子商务、银行和医疗保健的持续增长，以及账户接管和相关欺诈事件的增加，在线欺诈检测的需求强劲。此外，工业化欺诈者一旦利用漏洞，就可以在几分钟内将漏洞武器化，并以指数级扩大漏洞，给组织造成巨大的经济损失，更重要的是，破坏组织的信誉和声誉。遗憾的是，目前组织依赖专门的欺诈检测团队来执行手动审查来处理欺诈案例，这既耗时又昂贵；他们还依赖基于规则的简化方法进行欺诈检测，不幸的是，这会导致大量误报，并最终损害客户体验和保留率。利用用户进行在线业务时悄悄收集的行为生物识别，拟议的创新将提供额外的用户身份验证，从而帮助企业以更可靠和有效的方式防止和检测更多欺诈活动。这个i-Corps项目旨在执行客户发现业务实体，如电子商务所有者、数字银行家和医疗保健服务提供商，以确定最有价值的产品参数，然后将提议的创新制定为市场就绪的产品。一个常见的问题是，这些企业都有义务保护用户数据和在线交易，但它们的IT系统受到源源不断的账户接管攻击，以及随之而来的金融欺诈。拟议的创新产生了一种软件解决方案和服务，提供了额外的用户身份验证能力，以帮助企业在帐户被接管的情况下显著减少此类欺诈。这项创新通过利用行为生物识别来区分用户，这些行为生物识别不引人注目地捕捉用户的独特计算行为，例如他们如何在键盘上打字或如何移动鼠标。建议的软件产品打包了最先进的身份验证算法，以便现有的业务应用程序可以通过API调用访问它们。此外，最终用户还可以完全控制他们自己的生物特征数据，以保护隐私。建议方法的技术实现在Web浏览器中使用了JavaScript，并在服务器端集成了遗留应用程序。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

The broader impact/commercial potential of this I-Corps project empowers eCommerce owners, digital bankers, and healthcare service providers alike with a behavioral biometrics-based solution and service to more effectively prevent and detect fraudulent activities after account takeovers. The demand for online fraud detection is strong due to the continuing growth of eCommerce, banking, and healthcare, and the rising of account takeovers and related fraud. Moreover, industrialized fraudsters can weaponize a vulnerability in matters of minutes once a breach is exploited, and exponentially scale it to cause high financial loss for organizations and more importantly, undermine their credibility and reputation. Unfortunately, currently organizations rely on dedicated fraud detection teams to perform manual reviews to handle fraudulent cases, which is both time consuming and costly; they also rely on simplified, rules-based approaches for fraud detection, which unfortunately result in a high number of false positives and ultimately hurt customer experience and retention. Leveraging behavioral biometrics collected unobtrusively when a user conducts online business, the proposed innovation will provide additional user authentication and thus help businesses prevent and detect more fraudulent activities in a more reliable and effective fashion.This I-Corps project seeks to perform customer discovery of business entities such as eCommerce owners, digital bankers, and healthcare service providers, to identify the most valuable product parameters before formulating the proposed innovation into a market-ready product. A common problem is that these businesses are all obligated to safeguard user data and online transactions but are plagued by the continuous stream of account takeover attacks on their IT systems and the ensuing financial fraud. The proposed innovation produces a software solution and service that provides additional capability of user authentication to help businesses to significantly reduce such fraud despite of account takeovers. This innovation distinguishes between users by leveraging behavioral biometrics that unobtrusively capture a user's unique computing behavior, such as how they type on keyboards or how they move the mouse. The proposed software product packages state-of-the-art authentication algorithms so that existing business applications can access them via API calls. In addition, the end user is provided with full control over their own biometric data for privacy protection. The technological implementation of the proposed approach uses JavaScript in the web browsers and integrates with legacy applications at the server end.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.