Device authentication using synchronized activity signature comparison

Patent metadata

Field	Value
Publication number	US-10972471-B2
Application number	US-201715843625-A
Country	US
Kind code	B2
Filing date	Dec 15, 2017
Priority date	Dec 15, 2017
Publication date	Apr 6, 2021
Grant date	Apr 6, 2021

Abstract

A system, method and program product for authenticating a device. An authentication service is provided having: a data management system for periodically collecting and storing signature data from each of a set of registered devices, wherein the signature data includes a plurality of data points, and wherein at least one of the data points includes a device usage characteristic; a system for obtaining a temporal signature state (TSS) vector of a device in response to a transaction request from the device, wherein the TSS vector includes values for a selected subset of the data points forming the signature data; and an authenticator for comparing the TSS vector of the device with stored signature data in order to authenticate the device.

First claim

What is claimed is:

1. An authentication service, comprising:
one or more computer processors comprising:
a data management system for periodically collecting and storing signature data from each of a set of registered devices, wherein the signature data includes a plurality of data points, wherein the plurality of data points includes a device usage characteristic;
a system for obtaining a temporal signature state (TSS) vector of a device in response to a completion of a first authentication process for a transaction request from the device wherein the first authentication process is a password authentication process, wherein the TSS vector includes values for a selected subset of the data points forming the signature data; and
an authenticator for comparing the TS S vector of the device with stored signature data in order to authenticate the device, wherein the authenticator analyzes the corresponding stored signature data for a given data point in the subset of data points of the TSS vector, wherein the authenticator analyzes the stored signature data for the given data point as a time based function to predict an expected value of the corresponding stored signature data for a given data point in the subset of data points of the TSS vector, wherein the authenticator compares the predict value for the given data point in the subset of data points of the TSS vector to the actual given data point in the subset of data points of the TSS vector, wherein the authenticator denies or authorizes the transaction request based on the results of the comparison.

2. The authentication service of claim 1 , wherein the device usage characteristic includes information associated with at least one of: photos on the device, emails on the device, texts on the device, a screen saver used on the device, apps used on the device; games played on the device, and music on the device.

3. The authentication service of claim 1 , wherein the signature data further includes a physiological measure of a device user.

4. The authentication service of claim 1 , wherein the signature data further includes operational features of the device including information associated with at least one of: battery level, cellular signal strength, wifi signal strength, and device location.

5. The authentication service of claim 1 , wherein the authenticator analyzes each data point in the TSS vector against stored signature data to generate a composite confidence score that is then compared to a security threshold value.

6. The authentication service of claim 1 , wherein the subset of data points in the TSS vector are selected by one of the service provider or the authentication service.

7. The authentication service of claim 1 , wherein the subset of data points in the TSS vector are determined using a random process or heuristic.

8. A computer program product stored on a computer readable storage medium, which when executed by a computing system, provides an authentication service, the program product comprising:
program code that periodically collects and stores signature data from each of a set of registered devices, wherein the signature data includes a plurality of data points, and wherein the plurality of data points includes a device usage characteristic;
program code for obtaining a temporal signature state (TSS) vector of a device in response to a completion of a first authentication process for a transaction request from the device wherein the first authentication process is a password authentication process, wherein the TSS vector includes values for a selected subset of the data points forming the signature data;
program code to analyzes the corresponding stored signature data for a given data point in the subset of data points of the TSS vector, wherein the stored signature data is analyzed for the given data point as a time based function to predict an expected value of the corresponding stored signature data for a given data point in the subset of data points of the TSS vector;
program code for comparing the TSS vector of the device with stored signature data in order to authenticate the device, wherein the comparing the TSS vector of the device with stored signature data comprises comparing the predict value for the given data point in the subset of data points of the TSS vector to the actual given data point in the subset of data points of the TSS vector; and
program code to denies or authorizes the transaction request based on the results of the comparison.

9. The computer program product of claim 8 , wherein the device usage characteristic includes information associated with at least one of: photos on the device, emails on the device, texts on the device, a screen saver used on the device, apps used on the device; games played on the device, and music on the device.

10. The computer program product of claim 8 , wherein the signature data further includes a physiological measure of a device user.

11. The computer program product of claim 8 , wherein the signature data further includes operational features of the device including information associated with at least one of: battery level, cellular signal strength, wifi signal strength, and device location.

12. The computer program product of claim 8 , wherein each data point in the TSS vector is analyzed against stored signature data to generate a composite confidence score that is then compared to a security threshold value.

13. The computer program product of claim 8 , wherein the subset of data points in the TSS vector are selected by one of the service provider or the authentication service.

14. The computer program product of claim 8 , wherein the subset of data points in the TSS vector are determined using a random process or heuristic.

15. A computerized method for providing an authentication service, comprising:
periodically collecting and storing signature data from each of a set of registered devices, wherein the signature data includes a plurality of data points, and wherein plurality of data points includes a device usage characteristic;
obtaining a temporal signature state (TSS) vector of a device in response to a completion of a first authentication process for a transaction request from the device wherein the first authentication process is a password authentication process, wherein the TSS vector includes values for a selected subset of the data points forming the signature data;
analyzing the corresponding stored signature data for a given data point in the subset of data points of the TSS vector, wherein the stored signature data is analyzed for the given data point as a time based function to predict an expected value of the corresponding stored signature data for a given data point in the subset of data points of the TSS vector;
comparing the TSS vector of the device with stored signature data in order to authenticate the device, wherein the comparing the TSS vector of the device with stored signature data comprises comparing the predict value for the given data point in the subset of data points of the TSS vector to the actual given data point in the subset of data points of the TSS vector; and
denying or authorizing the transaction request based on the results of the comparison.

16. The method of claim 15 , wherein the device usage characteristic includes information associated with at least one of: photos on the device, emails on the device, texts on the device, a screen saver used on the device, apps used on the device; games played on the device, and music on the device.

17. The method of claim 15 , wherein the signature data fu

Assignees

• IBM

Inventors

• Connell Ii Jonathan H
• Park Jae-Eun
• Ratha Nalini K

Classifications

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04W12/71

  Hardware identity · CPC title

• H04L63/102 Primary

  Entity profiles · CPC title

• H04W12/065

  Continuous authentication · CPC title

• H04W12/68

  Gesture-dependent or behaviour-dependent · CPC title