User authentication

Patent metadata

Field	Value
Publication number	US-10142308-B1
Application number	US-201414319175-A
Country	US
Kind code	B1
Filing date	Jun 30, 2014
Priority date	Jun 30, 2014
Publication date	Nov 27, 2018
Grant date	Nov 27, 2018

Abstract

There is disclosed a technique for use in authentication. In one embodiment, the technique comprises receiving behavioral information associated with a user. The technique also comprises performing an analysis based on the behavioral information. The technique further comprises determining whether to authenticate the user based on the analysis.

First claim

What is claimed is:

1. A method, comprising:
receiving an electronic authentication request seeking access for a user device to a computerized resource, wherein the electronic authentication request comprises a file that includes (i) a user device attribute associated with a previous communication with the computerized resource, (ii) a behavioural biometric attribute associated with a previous communication with the computerized resource, and (iii) a time stamp describing a prior time the file was used to access the computerized resource;
in response to receiving the electronic authentication request, performing a first authentication operation to compare the respective user device and the behavioural biometric attributes in the file and corresponding user device and behavioural biometric attributes associated with the electronic authentication request, wherein the first authentication operation utilizes one of Jaccard similarity or Mahalabonis distance to perform the comparison of the first authentication operation;
upon the comparison of the first authentication operation indicating a relationship between the respective user device and the behavioural biometric attributes in the file and the corresponding attributes associated with the electronic authentication request, performing a second authentication operation by comparing (i) the respective user device and the behavioural biometric attributes in the file and expected user device and behavioural biometric attributes derived from one or more previous communications with the computerized resource and (ii) the time stamp in the file and an expected time stamp that describes when the file was last used to access the computerized resource; and
based on the comparison of the second authentication operation, determining whether to grant the user device access to the computerized resource.

2. The method as claimed in claim 1 , wherein the behavioural biometric attribute comprises user interaction information in connection with the user device.

3. The method as claimed in claim 1 , wherein the behavioural biometric attribute relates to at least one of keystroke time latencies, tapping vibrations, rotations, gesture location, speed, motion, and pressure.

4. An apparatus, comprising:
at least one processing device, said at least one processing device comprising a processor coupled to a memory;
wherein the at least one processing device is configured to:
receive an electronic authentication request seeking access for a user device to a computerized resource, wherein the electronic authentication request comprises a file that includes (i) a user device attribute associated with a previous communication with the computerized resource, (ii) a behavioural biometric attribute associated with a previous communication with the computerized resource, and (iii) a time stamp describing a prior time the file was used to access the computerized resource;
in response to receiving the electronic authentication request, perform a first authentication operation to compare the respective user device and the behavioural biometric attributes in the file and corresponding user device and behavioural biometric attributes associated with the electronic authentication request, wherein the first authentication operation utilizes one of Jaccard similarity or Mahalabonis distance to perform the comparison of the first authentication operation;
upon the comparison of the first authentication operation indicating a relationship between the respective user device and the behavioural biometric attributes in the file and the corresponding attributes associated with the electronic authentication request, perform a second authentication operation by comparing (i) the respective user device and the behavioural biometric attributes in the file and expected user device and behavioural biometric attributes derived from one or more previous communications with the computerized resource and (ii) the time stamp in the file and an expected time stamp that describes when the file was last used to access the computerized resource; and
based on the comparison of the second authentication operation, determine whether to grant the user device access to the computerized resource.

5. The apparatus as claimed in claim 4 , wherein the behavioural biometric attribute comprises user interaction information in connection with the user device.

6. The apparatus as claimed in claim 4 , wherein the behavioural biometric attribute relates to at least one of keystroke time latencies, tapping vibrations, rotations, gesture location, speed, motion, and pressure.

7. A computer program product having a non-transitory computer-readable medium storing instructions, the instructions, when carried out by one or more processors, causing the one or more processors to perform a method of:
receiving an electronic authentication request seeking access for a user device to a computerized resource, wherein the electronic authentication request comprises a file that includes (i) a user device attribute associated with a previous communication with the computerized resource, (ii) a behavioural biometric attribute associated with a previous communication with the computerized resource, and (iii) a time stamp describing a prior time the file was used to access the computerized resource;
in response to receiving the electronic authentication request, performing a first authentication operation to compare the respective user device and the behavioural biometric attributes in the file and corresponding user device and behavioural biometric attributes associated with the electronic authentication request, wherein the first authentication operation utilizes one of Jaccard similarity or Mahalabonis distance to perform the comparison of the first authentication operation;
upon the comparison of the first authentication operation indicating a relationship between the respective user device and the behavioural biometric attributes in the file and the corresponding attributes associated with the electronic authentication request, performing a second authentication operation by comparing (i) the respective user device and the behavioural biometric attributes in the file and expected user device and behavioural biometric attributes derived from one or more previous communications with the computerized resource and (ii) the time stamp in the file and an expected time stamp that describes when the file was last used to access the computerized resource; and
based on the comparison of the second authentication operation, determining whether to grant the user device access to the computerized resource.

8. The computer program product as claimed in claim 7 , wherein the behavioural biometric attribute comprises user interaction information in connection with the user device.

9. The computer program product as claimed in claim 7 , wherein the behavioural biometric attribute relates to at least one of keystroke time latencies, tapping vibrations, rotations, gesture location, speed, motion, and pressure.

Assignees

• Emc Corp
• Emc Ip Holding Co Llc

Inventors

• Duchin Zohar
• Zaslavsky Alex
• Bar-Menachem Ika
• Israeli Shachar

Classifications

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/205

  involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24) · CPC title

• G06F21/316

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title