Single channel input multi-factor authentication via separate processing pathways

Patent metadata

Field	Value
Publication number	US-10904246-B2
Application number	US-201816018252-A
Country	US
Kind code	B2
Filing date	Jun 26, 2018
Priority date	Jun 26, 2018
Publication date	Jan 26, 2021
Grant date	Jan 26, 2021

Abstract

Mechanisms are provided to implement a single input, multi-factor authentication (SIMFA) system. The SIMFA system receives a user input for authenticating a user via a single input channel and provides the user input to first authentication logic of an explicit channel of the SIMFA system, where in the first authentication logic performs a knowledge authentication operation on the user input. The SIMFA system further provides the user input to second authentication logic of one or more side channels of the SIMFA system, where the second authentication logic performs authentication on non-knowledge-based characteristics of the user input. The SIMFA system combines results of the first authentication logic and the second authentication logic to generate a final determination of authenticity of the user. The SIMFA system generates an output indicating whether the user is an authentic user or a non-authentic user based on the final determination of authenticity of the user.

First claim

What is claimed is:

1. A method, in a data processing system comprising at least one processor and at least one memory, the at least one memory comprising instructions that are executed by the processor to configure the processor to implement a single input, multi-factor authentication, the method comprising:
receiving, from a touchscreen input device, a single user gesture input for authenticating a user;
executing, by first authentication logic of an explicit channel, first authentication processing of gesture pattern content of the single user gesture input to generate a first authentication result based on a determined level of correctness of the gesture pattern content relative to stored authentic gesture pattern data corresponding to an authorized user;
executing, by second authentication logic of one or more side channels, second authentication processing of at least one touch characteristic of the single user gesture input to generate a second authentication result based on a determined level of correspondence of the at least one touch characteristic with at least one authentic touch characteristic of the authorized user;
combining results of the first authentication processing and the second authentication processing to generate a final determination of an authenticity of the user; and
generating an output indicating whether the user is an authentic user or a non-authentic user based on the final determination of authenticity of the user.

2. The method of claim 1 , wherein executing, by the first authentication logic of the explicit channel, and executing, by the second authentication logic of one or more side channels, are performed in parallel at substantially a same time.

3. The method of claim 1 , wherein the at least one touch characteristics comprise a pressing force on the touchscreen at one or more points along a pattern specified by the pattern content, a stroke thickness at one or more points along the pattern specified by the pattern content, and a direction of drawing the pattern specified by the pattern content.

4. The method of claim 1 , wherein the one or more non-knowledge-based characteristics comprise a biometric characteristic of the user input.

5. A computer program product comprising a non-transitory computer readable medium having a computer readable program stored therein, wherein the computer readable program, when executed on a data processing system, causes the data processing system to implement a single input, multi-factor authentication (SIMFA) system, that performs the operations:
receiving, from a touchscreen input device, a single user gesture input for authenticating a user;
executing, by first authentication logic of an explicit channel, first authentication processing of gesture pattern content of the single user gesture input to generate a first authentication result based on a determined level of correctness of the gesture pattern content relative to stored authentic gesture pattern data corresponding to an authorized user;
executing, by second authentication logic of one or more side channels, second authentication processing of at least one touch characteristic of the single user gesture input to generate a second authentication result based on a determined level of correspondence of the at least one touch characteristic with at least one authentic touch characteristic of the authorized user;
combining results of the first authentication processing and the second authentication processing to generate a final determination of an authenticity of the user; and
generating an output indicating whether the user is an authentic user or a non-authentic user based on the final determination of authenticity of the user.

6. The computer program product of claim 5 , wherein executing, by the first authentication logic of the explicit channel, and executing, by the second authentication logic of one or more side channels, are performed in parallel at substantially a same time.

7. The computer program product of claim 5 , wherein the at least one touch characteristics comprise a pressing force on the touchscreen at one or more points along a pattern specified by the pattern content, a stroke thickness at one or more points along the pattern specified by the pattern content, and a direction of drawing the pattern specified by the pattern content.

8. The computer program product of claim 5 , wherein the one or more non-knowledge-based characteristics comprise a biometric characteristic of the user input.

9. An apparatus comprising:
a processor; and
a memory coupled to the processor, wherein the memory comprises instructions which, when executed by the processor, cause the processor to implement a single input, multi-factor authentication (SIMFA) system, that performs the operations:
receiving, from a touchscreen input device, a single user gesture input for authenticating a user;
executing, by first authentication logic of an explicit channel, first authentication processing of gesture pattern content of the single user gesture input to generate a first authentication result based on a determined level of correctness of the gesture pattern content relative to stored authentic gesture pattern data corresponding to an authorized user;
executing, by second authentication logic of one or more side channels, second authentication processing of at least one touch characteristic of the single user gesture input to generate a second authentication result based on a determined level of correspondence of the at least one touch characteristic with at least one authentic touch characteristic of the authorized user;
combining results of the first authentication processing and the second authentication processing to generate a final determination of an authenticity of the user; and
generating an output indicating whether the user is an authentic user or a non-authentic user based on the final determination of authenticity of the user.

10. The method of claim 1 , wherein the one or more side channels comprise at least two side channels, each side channel in the at least two side channels processing a different touch characteristic of the at least one touch characteristic.

11. The method of claim 10 , wherein at least one of the side channels in the at least two side channels is a side channel that processes the single user gesture input by performing a fingerprint authentication operation that authenticates a fingerprint of the user providing the single user gesture input.

12. The method of claim 10 , wherein at least one of the side channels in the at least two side channels is a side channel that processes the single user gesture input by performing a pressing force authentication operation that authenticates a pattern of pressing force data representing pressing force at various points along the gesture pattern of the user gesture input.

13. The method of claim 10 , wherein at least one of the side channels in the at least two side channels is a side channel that processes the single user gesture input by performing a stroke thickness authentication operation that authenticates a stroke thickness pattern representing an amount of area of the user's finger or writing instrument used to input the gesture pattern at various points along the gesture pattern of the single user gesture input.

14. The method of claim 10 , wherein at least one of the side channels in the at least two side channels is a side channel that processes the single user gesture input by performing a drawing direction authentication operation that authenticates a direction pattern of strokes in the gesture pattern of the user gesture input.

Assignees

• IBM

Inventors

• Chari Suresh
• Gu Zhongshu
• Huang Heqing
• Pendarakis Dimitrios

Classifications

• G06F2221/2103

  Challenge-response · CPC title

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• G06F3/04883

  for inputting data by handwriting, e.g. gesture or text · CPC title

• G06F21/32

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• H04L63/18 Primary

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title