Devices and methods to validating multiple different factor categories

Patent metadata

Field	Value
Publication number	US-2022294778-A1
Application number	US-202117195778-A
Country	US
Kind code	A1
Filing date	Mar 9, 2021
Priority date	Mar 9, 2021
Publication date	Sep 15, 2022
Grant date	—

Abstract

A computer implemented method, device and computer program device are provided including a processor; a storage medium to store a user defined password (UDP) factor and program instructions accessible by the processor; wherein, responsive to execution of the program instructions, the processor to: generate a first machine generated indicia (MGI) code indicative of the UDP factor; and generate a second MGI code indicative of a time-based one-time password (TOTP) factor; and a display to display the first and second MGI codes during an authentication operation.

First claim

What is claimed is:

1 . A device, comprising:
a processor; a storage medium to store a user defined password (UDP) factor and program instructions accessible by the processor; wherein, responsive to execution of the program instructions, the processor to:
generate a first machine generated indicia (MGI) code indicative of the UDP factor; and
generate a second MGI code indicative of a time-based one-time password (TOTP) factor; and
a display to display the first and second MGI codes during an authentication operation.

2 . The device of claim 1 , wherein the first and second MGI codes represent first and second matrix codes, the display to display the first and second matrix codes in one of i) a simultaneous manner or ii) an alternating and successively repeating manner.

3 . The device of claim 2 , wherein the processor is further configured to rotate the display alternately between presentation of the first and second matrix codes in the alternating and successively repeating manner.

4 . The device of claim 1 , further comprising an input to receive the UDP factor, the processor to generate a password hash based on the UDP factor.

5 . The device of claim 4 , wherein the storage medium is further configured to store an encryption algorithm executable by the processor to generate the password hash by iteratively encrypting the UDP factor.

6 . The device of claim 1 , wherein the storage medium is further configured to store a TOTP generation algorithm executable by the processor to generate the TOTP factor based on a time authentication factor and a pre-shared key, the pre-shared key stored in the storage medium and provided to an authentication service, the TOTP factor valid for a predetermined period of time.

7 . The device of claim 6 , wherein the processor is configured to determine when the authentication operation is initiated and in response thereto, the processor to execute the TOTP algorithm to generate the TOTP factor based in part on a current time of day as the time authentication factor.

8 . A method, comprising:
obtaining, at an access point (AP) computing device, image data representative of content in a field of view of a camera of the AP computing device, the content including machine generated indicia (MGI) codes displayed on a trusted computing device; validating factors from different factor categories by validating at least two of i), ii) or iii): i) validating a candidate user defined password (UDP) factor by;
1) identifying, from the image data, a first MGI code displayed on the trusted computing device, the first MGI code representative of the candidate UDP factor; and
2) determining when the candidate UDP factor corresponds to an authentication UDP factor associated with a user account, the authentication UDP factor stored at an authentication service;
ii) validating a candidate time-based one-time password (TOTP) factor by:
1) identifying, from the image data, a second MGI code displayed on the trusted computing device, the second MGI code representative of the candidate TOTP factor; and
2) determining when the candidate TOTP factor corresponds to an authentication TOTP factor; or
iii) validating a candidate biometric factor by;
1) identifying a candidate biometric factor from at least one of the image data or biometric data from a biometric sensor; and
2) determining when the candidate biometric factor corresponds to the authentication biometric factor; and
verifying an authentication operation based on the at least two of the i), ii), and iii) validate operations.

9 . The method of claim 8 , wherein the authentication operation is verified based on validation of the candidate UDP factor and the candidate TOTP factor, the authentication operation allowing access, through the AP computing device, to a network resource.

10 . The method of claim 9 , wherein the image data includes a first image that includes the first MGI code and a second image that includes the second MGI code, the first and second MGI codes representing first and second matrix codes, the method further comprising displaying, on the trusted computing device, the first and second matrix codes in one of i) a simultaneous manner or ii) an alternating and successively repeating manner.

11 . The method of claim 8 , wherein the authentication operation is verified based on validation of the candidate UDP factor, the candidate TOTP factor and the candidate biometric factor.

12 . The method of claim 8 , further comprising capturing the candidate biometric factor, utilizing a biometric reader, for a user proximate to the trusted computing device while the trusted computing device displays at least one of the first or second MGI codes.

13 . The method of claim 12 , further comprising performing the iii) validation operation by at least one of facial recognition, retinal scan, fingerprint detection, or voice recognition based on data collected by the camera or a sensor.

14 . The method of claim 8 , further comprising generating an authentication password hash based on an account authentication password in the factors, and declaring the i) validation when the candidate password hash matches the authentication password hash.

15 . The method of claim 8 , further comprising generating the authentication TOTP factor based on a time authentication factor and a pre-shared key, and declaring the ii) validation when the candidate TOTP factor matches the authentication TOTP factor.

16 . A computer program product comprising a non-signal computer readable storage medium comprising computer executable code to:
generate a first machine generated indicia (MGI) code indicative of a candidate password hash based on a user defined candidate password; and generate a second MGI code indicative of a candidate time-based one-time password (TOTP); and display the first and second MRI codes during an authentication operation.

17 . The computer program product of claim 16 , wherein the first and second MGI codes represent first and second matrix codes, the computer executable code to: direct a display to display the first and second matrix codes in one of i) a simultaneous manner or ii) an alternating and successively repeating manner.

18 . The computer program product of claim 16 , the computer executable code to at least one of:
i) generate the candidate password hash by iteratively encrypting the candidate password; ii) generate the candidate TOTP based on a time authentication factor and a pre-shared key, the pre-shared token stored in the storage medium and provided to an authentication system, the candidate TOTP valid for a predetermined period of time; or iii) determine when the authentication operation is initiated and in response thereto, generate the candidate TOTP based in part on a current time of day as the time authentication factor.

19 . The computer program product of claim 16 , the computer executable code to:
identify an account authentication password from authentication data associate with a first user account; obtain an authentication TOTP; obtain image data representative of the first and second MGI codes; declare a first validation when the candidate password from the first MGI code corresponds to the account authentication password; declare a second validation when the candidate TOTP from the second MGI code corresponds to the authentication TOTP; and verify an authentication operation based on the first and second validations.

20 . The computer program product

Assignees

• Lenovo Singapore Pte Ltd

Inventors

• Li Scott Wentao
• Stolbikov Igor
• Zugasti Alfredo

Classifications

• G06F21/36

  by graphic or iconic representation · CPC title

• G06F2221/2113

  Multi-level security, e.g. mandatory access control · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04W12/06

  Authentication · CPC title