Media based authentication

Patent metadata

Field	Value
Publication number	US-10587594-B1
Application number	US-201414494520-A
Country	US
Kind code	B1
Filing date	Sep 23, 2014
Priority date	Sep 23, 2014
Publication date	Mar 10, 2020
Grant date	Mar 10, 2020

Abstract

A service provider or service of the service provider may generate authentication information based on information provided by a user. The information provided by the user may include a selection of a media object, information indicating a segment of the media object, and an indication of an action to be performed by the user. This information may be saved by the service provider and used at some point in time later to determine whether to provide access to restricted computing resources based at least in part on an authentication claim provided by the user. The authentication claim may be generated by a computing device operated by the user and may include information corresponding to the media object, the indicated segment of the media object, and the action performed by the user.

First claim

What is claimed is:

1. A computer-implemented method, comprising: receiving, through a user interface, a first selection of a segment of a first media object from a plurality of stored media objects; generating authentication reference information based at least in part on the selected segment of the first media object, the generated authentication reference information useable to validate an authentication claim; receiving the authentication claim from a computing device associated with a user, the received authentication claim including a second selection of a second media object from the plurality of stored media objects and a selection of a segment of the second media object, the segment of the second media object including one or more audio portions and a playback time; causing the computing device to initiate playback of the segment of the second media object without the one or more audio portions; receiving, from the computing device, one or more interactions in response to the playback of the segment of the second media object; validating the received authentication claim by at least determining that the one or more interactions in response to the playback of the segment of the second media object matches one or more corresponding audio portions of the selected segment of the first media object of the generated authentication reference information; and authenticating the user based at least in part on the validation.

2. The computer-implemented method of claim 1 , wherein the first media object comprises an audio file, the second media object comprises another audio file, the authentication reference information comprises information specifying a user selection of a first playback time of the audio file, and the authentication claim includes information specifying a user selection of a second playback time of the other audio file.

3. The computer-implemented method of claim 1 , wherein the received authentication claim includes a recording of the user, where the recording corresponds to an action performed by the user in connection with the second media object.

4. The computer-implemented method of claim 1 , wherein the computer-implemented method further includes registering the computing device with a user account corresponding to the user and managed by a service provider as a result of authenticating the user.

5. The computer-implemented method of claim 1 , wherein validating the received authentication claim includes determining whether a finger print of the second media object included in the authentication claim matches a finger print of the first media object.

6. A system, comprising:
one or more processors; and
memory with instructions that, as a result of execution by the one or more processors, cause the system to:
receive a selection of a media object, a selection of a segment of the media object comprising one or more media portions and a playback time;
receive an authentication claim associated with a request to access restricted computing resources of the system, the authentication claim including selection of a second media object, a selection of a segment of the second media object;
cause a user interface of a computing device to present the segment of the second media object without one or more media portions associated with the second media object;
as a result of the segment of the second media object without the one or more media portions being presented, obtain information associated with the segment of the second media object; and
if the information associated with the selected segment of the second media object matches the one or more media portions corresponding to the selected segment of the media object, determine that an authentication reference information matches the authentication claim.

7. The system of claim 6 , wherein the system further includes instructions that, as a result of execution by the one or more processors, cause the system to provide access to the restricted computing resources by performing a set of operations that includes registering a user device with a service provider such that the service provider enables the registered user device to access the system, the user device associated with the received request.

8. The system of claim 6 , wherein the system further includes instructions that, as a result of execution by the one or more processors, cause the system to determine that the authentication reference information matches the authentication claim by at least determining that the information associated with the segment indicates a selection of a start point for playback through a graphical user interface element configured as a seek bar.

9. The system of claim 6 , wherein the system further includes instructions that, as a result of execution by the one or more processors, cause the system to determine that the authentication reference information matches the authentication claim by at least determining that the information associated with the segment indicates input from an input device in accordance with a rhythm associated with the media object.

10. The system of claim 6 , wherein the system further includes instructions that, as a result of execution by the one or more processors, cause the system to determine that the authentication reference information matches the authentication claim by at least determining that the information associated with the segment indicates input from an input device in accordance with a user's physical reaction to playback of the media object.

11. The system of claim 6 , wherein the additional information corresponding to the selected media object further includes information specifying a start point for playback of the media object.

12. The system of claim 11 , wherein the system further includes instructions that, as a result of execution by the one or more processors, cause the system to determine a range of values for the start point for playback that if included in the authentication claim enables the system to determine that the authentication reference information matches the authentication claim.

13. The system of claim 6 , wherein the system further includes instructions that, as a result of execution by the one or more processors, cause the system to provide a set of media objects from a library of media objects, the selection of the media object being from among the set of media objects.

14. A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of execution by one or more processors of a computer system, cause the computer system to at least: obtain a user selection of a media object selected from a plurality of media objects and a selection of a segment of the media object the segment of the media object including one or more text portions and a playback time, cause playback of the segment of the media object on a computing device, the playback excluding the one or more text portions of the segment of the media object, generate an authentication claim based at least in part on user actions performed in response to the playback of the segment of the media object that excludes the one or more text portions, wherein an initial selection of a segment of another media object was previously provided to determine whether information indicated by the user actions performed in response to the playback matches one or more corresponding text portions of the other media object; and provide the generated authentication claim.

15. The non-transitory computer-readable storage medium of claim 14 , wherein the instructions that cause the computer system to capture, from a user input

Assignees

• Amazon Tech Inc

Inventors

• Mcclintock Jon Arron
• Canavor Darren Ernest
• Johansson Jesper Mikael
• Stathakopoulos George Nikolaos

Classifications

• H04L63/0838 Primary

  using one-time-passwords · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F21/45

  Structures or tools for the administration of authentication · CPC title

• G06F21/31

  User authentication · CPC title

• G06F21/36

  by graphic or iconic representation · CPC title