Chained authentication using image transforms

Patent metadata

Field	Value
Publication number	US-10409977-B2
Application number	US-201715730560-A
Country	US
Kind code	B2
Filing date	Oct 11, 2017
Priority date	Sep 18, 2014
Publication date	Sep 10, 2019
Grant date	Sep 10, 2019

Abstract

A service receives a request from a user of a group of users to perform one or more operations requiring group authentication in order for the operations to be performed. In response, the service provides a first user of the group with an image seed and an ordering of the group of users. Each user of the group applies a transformation algorithm to the seed to create an authentication claim. The service receives this claim and determines, based at least in part on the ordering of the group of users, an ordered set of transformations, which are used to create a reference image file. If the received claim matches the reference image file, the service enables performance of the requested one or more operations.

First claim

What is claimed is:

1. A computer-implemented method comprising:
receiving an authentication claim comprising a media encoding;
determining a set of image transformation algorithms for a media seed, the set of image transformation algorithms comprising a first image transformation algorithm associated with a first entity and a second image transformation algorithm associated with a second entity, wherein the first image transformation algorithm:
is different from the second image transformation algorithm; and
produces a visibly perceptible transformation of media;

applying the set of image transformation algorithms to the media seed to generate a reference media file; and
authorizing performance of an operation as a result of determining that the reference media file matches the media encoding of the authentication claim.

2. The computer-implemented method of claim 1 , wherein the media seed is provided in response to having received a request to perform the operation.

3. The computer-implemented method of claim 1 , wherein at least one of the first image transformation algorithm or the second image transformation algorithm includes a modification of a color hue of the media seed.

4. The computer-implemented method of claim 1 , wherein at least one of the first image transformation algorithm or the second image transformation algorithm includes removal of an element of the media seed.

5. The computer-implemented method of claim 1 , wherein at least one of the first image transformation algorithm or the second image transformation algorithm includes insertion of a watermark into the media seed.

6. The computer-implemented method of claim 1 , wherein at least one of the first image transformation algorithm and the second image transformation algorithm includes supplementing the media seed with an image design.

7. The computer-implemented method of claim 1 , wherein determining that the reference media file matches the media encoding occurs as a result of applying the set of image transformation algorithms in a particular order.

8. A system, comprising:
one or more processors; and
memory including instructions that, as a result of being executed by the one or more processors, cause the system to:
provide a media seed and an ordering of a group of users, the group of users comprising a first user assigned with a first image transformation algorithm and a second user assigned with a second image transformation algorithm, wherein the first image transformation algorithm:
is different from the second image transformation algorithm; and
produces a visibly perceptible transformation of media;

receive an authentication claim comprising a media encoding;
determine, based at least in part on the ordering of the group of users, an ordered set of image transformation algorithms that include the first image transformation algorithm and the second image transformation algorithm;
apply the ordered set of image transformation algorithms to the media seed to generate a reference media file; and
authorize an entity associated with the authentication claim to perform an operation as a result of determining that the reference media file matches the media encoding.

9. The system of claim 8 , wherein the instructions further cause the system to store the authentication claim in an audit record in response to determining that the reference media file matches the media encoding.

10. The system of claim 8 , wherein at least one of the first image transformation algorithm or the second image transformation algorithm includes supplementing the media seed with an image object.

11. The system of claim 8 , wherein at least one of the first image transformation algorithm and the second image transformation algorithm includes modifying an image saturation of the media seed.

12. The system of claim 8 , wherein at least one of the first image transformation algorithm or the second image transformation algorithm includes removal of an element of the media seed.

13. The system of claim 8 , wherein at least one of the first image transformation algorithm or the second image transformation includes insertion of a watermark into the media seed.

14. A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:
receive an authentication claim for a group of entities comprising a first entity assigned with a first image transformation algorithm and a second user assigned with a second image transformation algorithm, wherein the first image transformation algorithm:
is different from the second image transformation algorithm; and
produces a visibly perceptible transformation of media;

determine, based at least in part on the group of entities, the first image transformation algorithm, and the second image transformation algorithm, a set of image transformation algorithms;
validate the authentication claim based at least in part on the set of image transformation algorithms, an encoding of media, and the received authentication claim; and
as a result of successful validation of the authentication claim, authorize an entity of the group of entities to perform an operation.

15. The non-transitory computer-readable storage medium of claim 14 , wherein:
the instructions further cause the computer system to provide a seed comprising encoded media and an ordering of the group of entities; and
the authentication claim is received in response to the seed having been provided.

16. The non-transitory computer-readable storage medium of claim 15 , wherein the instructions further cause the computer system to:
determine, based at least in part on the ordering of the group of entities, an ordering of the set of image transformation algorithms for applying the first image transformation algorithm and the second image transformation algorithm, resulting in an ordered set of image transformation algorithms; and
apply the ordered set of image transformation algorithms to the seed to validate the authentication claim.

17. The non-transitory computer-readable storage medium of claim 14 , wherein at least one of the first image transformation algorithm or the second image transformation algorithm includes modifying an image saturation of the encoding of media.

18. The non-transitory computer-readable storage medium of claim 14 , wherein at least one of the first image transformation algorithm or the second image transformation algorithm includes removal of an element of the encoding of media.

19. The non-transitory computer-readable storage medium of claim 14 , wherein at least one of the first image transformation algorithm or the second image transformation algorithm includes a modification of a color hue of the encoding of media.

20. The non-transitory computer-readable storage medium of claim 14 , wherein at least one of the first image transformation algorithm or the second image transformation algorithm includes supplementing the encoding of media with an image object.

21. The non-transitory computer-readable storage medium of claim 14 , wherein at least one of the first image transformation algorithm or the second image transformation algorithm includes insertion of a watermark into the encoding of media.

Assignees

• Amazon Tech Inc

Inventors

• Mcclintock Jon Arron
• Canavor Darren Ernest
• Stathakopoulos George Nikolaos

Classifications

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F21/32

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F21/31

  User authentication · CPC title

• G10H2250/215

  Transforms, i.e. mathematical transforms into domains appropriate for musical signal processing, coding or compression · CPC title

• G10H1/00

  Details of electrophonic musical instruments · CPC title