Dynamic password-less user verification

Patent metadata

Field	Value
Publication number	US-9338652-B1
Application number	US-201414541097-A
Country	US
Kind code	B1
Filing date	Nov 13, 2014
Priority date	Nov 13, 2014
Publication date	May 10, 2016
Grant date	May 10, 2016

Abstract

A method, system, and computer program product for dynamic password-less user verification in a mobile device are provided in the illustrative embodiments. Using a processor and a memory in the mobile device, a first portion of a call log stored in the mobile device is selected. Using a transformation function, a first transformed value corresponding to the first portion is obtained. A second portion of a call log stored in a repository of a service provider is obtained from the service provider, the service provider facilitating voice communications from the mobile device, and the second portion corresponding to the first portion. Using the transformation function, a second transformed value corresponding to the second portion is obtained. Responsive to the first transformed value matching the second transformed value within a tolerance limit, a conclusion is generated that the user verification is successful.

First claim

What is claimed is:

1. A method for user verification in a mobile device, the method comprising:
selecting, using a processor and a memory in the mobile device, a first portion of a call log stored in the mobile device;
obtaining, using a transformation function, a first transformed value corresponding to the first portion;
obtaining, from a service provider, a second portion of a call log stored in a repository of the service provider, the service provider facilitating voice communications from the mobile device, and the second portion corresponding to the first portion;
obtaining, using the transformation function, a second transformed value corresponding to the second portion; and
concluding, responsive to the first transformed value matching the second transformed value within a tolerance limit, that the user verification is successful.

2. The method of claim 1 , wherein the obtaining the first transformed value and obtaining the second transformed value is each performed using the processor and the memory in the mobile device.

3. The method of claim 1 , wherein the obtaining the first transformed value and obtaining the second transformed value is each performed using a processor and a memory in a data processing system distinct from the mobile device.

4. The method of claim 1 , further comprising:
detecting, in the mobile device, in a communication from a content provider application, a request for the user verification; and
communicating to the content provider application, responsive to the concluding, information corresponding to the successful user verification.

5. The method of claim 4 , further comprising:
communicating to the content provider application, responsive to the concluding, identifying information corresponding to the mobile device, wherein the information corresponding to the successful user verification and the identifying information corresponding to the mobile device are encrypted.

6. The method of claim 1 , further comprising:
comparing the first transformed value and the second transformed value, wherein the comparing occurs in the mobile device.

7. The method of claim 1 , wherein the first portion and the second portion each includes records over a same time period.

8. The method of claim 1 , wherein the call log stored in the mobile device comprises a plurality of records of voice calls performed using the mobile device, and wherein the voice calls are performed using different voice communication service providers, the service provider being one of the different voice communication service providers.

9. The method of claim 1 , wherein the call log stored in the mobile device comprises a plurality of call logs, each distinct call log in the plurality of call logs comprising records of voice calls performed using the mobile device and a corresponding distinct voice communication service provider, the service provider being one distinct voice communication service provider.

10. The method of claim 1 , further comprising:
selecting, using the processor and the memory in the mobile device, a third portion of the call log stored in the mobile device;
obtaining, using a second transformation function, a third transformed value corresponding to the third portion;
obtaining, from the service provider, a fourth portion of the call log stored in the repository of the service provider, the fourth portion corresponding to the third portion;
obtaining, using the second transformation function, a fourth transformed value corresponding to the fourth portion; and
concluding, responsive to the third transformed value not matching the fourth transformed value within the tolerance limit, that the user verification is unsuccessful.

11. The method of claim 10 , further comprising:
detecting, in the mobile device, in a communication from a content provider application, to a second application executing in the mobile device, a request for the user verification; and
forwarding to the second application, responsive to the concluding that the user verification is unsuccessful, the request for the user verification.

12. A computer usable program product comprising a computer readable storage device including computer usable code for user verification in a mobile device, the computer usable code comprising:
computer usable code for selecting, using a processor and a memory in the mobile device, a first portion of a call log stored in the mobile device;
computer usable code for obtaining, using a transformation function, a first transformed value corresponding to the first portion;
computer usable code for obtaining, from a service provider, a second portion of a call log stored in a repository of the service provider, the service provider facilitating voice communications from the mobile device, and the second portion corresponding to the first portion;
computer usable code for obtaining, using the transformation function, a second transformed value corresponding to the second portion; and
computer usable code for concluding, responsive to the first transformed value matching the second transformed value within a tolerance limit, that the user verification is successful.

13. The computer usable program product of claim 12 , wherein the computer usable code for obtaining the first transformed value and the computer usable code for obtaining the second transformed value is each performed using the processor and the memory in the mobile device.

14. The computer usable program product of claim 12 , wherein the computer usable code for obtaining the first transformed value and the computer usable code for obtaining the second transformed value is each performed using a processor and a memory in a data processing system distinct from the mobile device.

15. The computer usable program product of claim 12 , further comprising:
computer usable code for detecting, in the mobile device, in a communication from a content provider application, a request for the user verification; and
computer usable code for communicating to the content provider application, responsive to the concluding, information corresponding to the successful user verification.

16. The computer usable program product of claim 15 , further comprising:
computer usable code for communicating to the content provider application, responsive to the concluding, identifying information corresponding to the mobile device, wherein the information corresponding to the successful user verification and the identifying information corresponding to the mobile device are encrypted.

17. The computer usable program product of claim 12 , further comprising:
computer usable code for comparing the first transformed value and the second transformed value, wherein the comparing occurs in the mobile device.

18. The computer usable program product of claim 12 , wherein the computer usable code is stored in a computer readable storage medium in a data processing system, and wherein the computer usable code is transferred over a network from a remote data processing system.

19. The computer usable program product of claim 12 , wherein the computer usable code is stored in a computer readable storage medium in a server data processing system, and wherein the computer usable code is downloaded over a network to a remote data processing system for use in a computer readable storage medium associated with the remote data processing system.

20. A mobile device for user verification, the mobile device comprising:
a storage device including a storage mediu

Assignees

• IBM

Inventors

• Allen Corville O
• Boggarapu Ramakrishna
• Muthukrishnan Ravi K
• Nagaratnam Nataraj
• Walker Sherk L

Classifications

• H04M1/67

  by electronic means · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• G06F21/316

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title