Abstract: Methods and a unique session identifier token are disclosed for using in-band and optionally out-of-band protocols to authenticate a session are disclosed. The system to produce a probability the mobile device is in possession of a known person and the use of the unique session identifier token are used to prevent attacks by replay. In some embodiments, out-of-band protocols as well as use of entangled pairs eliminate the possibility of man-in-the middle pirating of an authentication session. A unique user-initiated session reduces authentication to a single message unit transaction from a mobile device to a relying party, securely affirming the user's identity and the user's intent to authenticate.

Abstract: Within a mobile device, a method and system to produce a probability the mobile device is in possession of a known person, the first user. Sensors are used to detect and quantify the behavioral biometrics of the human traits of the person in possession of the device. On a continuous basis, a machine learning process collects the biometrics of several traits of the first user memorizing the artifacts of neural networks used for learning. Subsequently, a prediction neural network provisioned with these artifacts and processing new biometric inputs of the present user of the device produces a probability the present user of the device is the first user. Affirmation of identity can then be made based on that probability.