Multi-granular authentication techniques

Patent metadata

Field	Value
Publication number	US-9407754-B1
Application number	US-201514622742-A
Country	US
Kind code	B1
Filing date	Feb 13, 2015
Priority date	Feb 13, 2015
Publication date	Aug 2, 2016
Grant date	Aug 2, 2016

Abstract

Techniques for authenticating a user of a mobile device at a computing platform are provided. A method according to these techniques includes generating a first profile and second profile of user behavior for the user of the mobile device, the first profile comprising a first type of profile having at least a first duration and the second profile comprising a second type of profile having a second duration that is shorter than the first duration, monitoring user behavior to generate usage behavior data, comparing the usage behavior data to the first profile and the second profile, performing a first type of authentication action responsive to the usage behavior data deviating from the first profile, and performing a second type of authentication action responsive to the usage behavior data deviating from the second profile.

First claim

What is claimed is:

1. A method for authenticating a user of a mobile device, the method comprising:
generating a first profile and second profile of user behavior for an authorized user of the mobile device, the first profile comprising a first type of profile having at least a first duration and comprising information indicative of expected behavior of the authorized user over at least the first duration, the second profile comprising a second type of profile having a second duration that is shorter than the first duration and comprising information indicative of expected behavior of the authorized user over at least the second duration;
monitoring user behavior to generate usage behavior data;
comparing the usage behavior data to the first profile and the second profile;
performing a first type of authentication action responsive to the usage behavior data deviating from the first profile; and
performing a second type of authentication action responsive to the usage behavior data deviating from the second profile.

2. The method of claim 1 , wherein monitoring the user behavior to generate the usage behavior data comprises monitoring the user behavior while the mobile device is in a sleep state.

3. The method of claim 1 , wherein performing the first type of authentication action or the second type of authentication action comprises performing an authentication procedure which locks the mobile device until an authentication input is received by the mobile device.

4. The method of claim 3 , wherein performing the first type of authentication action comprises performing a strong authentication procedure which locks the mobile device until a strong authentication input is received by the mobile device, the strong authentication input being different from the authentication input required in the second type of authentication action.

5. The method of claim 1 , wherein generating the second profile comprises:
collecting user-related data for a predetermined period of time at the mobile device during a training period; and
generating the second profile based on the user-related data.

6. The method of claim 1 , wherein generating the first profile comprises:
collecting user-related data at the mobile device during a training period; and
generating the first profile based on the user-related data.

7. The method of claim 1 , wherein performing the second type of authentication action comprises:
determining an authentication action associated with the user behavior;
receiving an authentication input based on the authentication action; and
determining whether the authentication input satisfies requirements of the authentication action.

8. The method of claim 1 , wherein performing the first type of authentication action comprises:
determining a strong authentication action associated with the user behavior;
receiving an authentication input based on the strong authentication action; and
determining whether the authentication input satisfies requirements of the strong authentication action.

9. The method of claim 1 , further comprising:
refining the first profile based at least in part on the usage behavior data.

10. An apparatus comprising:
means for generating a first profile and second profile of user behavior for an authorized user of the mobile device, the first profile comprising a first type of profile having at least a first duration and comprising information indicative of expected behavior of the authorized user over at least the first duration, the second profile comprising a second type of profile having a second duration that is shorter than the first duration and comprising information indicative of expected behavior of the authorized user over at least the second duration;
means for monitoring user behavior to generate usage behavior data;
means for comparing the usage behavior data to the first profile and the second profile;
means for performing a first type of authentication action responsive to the usage behavior data deviating from the first profile; and
means for performing a second type of authentication action responsive to the usage behavior data deviating from the second profile.

11. The apparatus of claim 10 , wherein the means for monitoring the user behavior to generate the usage behavior data comprises means for monitoring the user behavior while the mobile device is in a sleep state.

12. The apparatus of claim 10 , wherein the means for performing the first type of authentication action or the second type of authentication action comprises means for performing an authentication procedure which locks the mobile device until an authentication input is received by the mobile device.

13. The apparatus of claim 12 , wherein the means for performing the first type of authentication action comprises means for performing a strong authentication procedure which locks the mobile device until a strong authentication input is received by the mobile device, the strong authentication input being different from the authentication input required in the second type of authentication action.

14. The apparatus of claim 10 , wherein the means for generating the second profile comprises:
means for collecting user-related data for a predetermined period of time at the mobile device during a training period; and
means for generating the second profile based on the user-related data.

15. The apparatus of claim 10 , wherein the means for generating the first profile comprises:
means for collecting user-related data at the mobile device during a training period; and
means for generating the first profile based on the user-related data.

16. The apparatus of claim 10 , wherein the means for performing the second type of authentication action comprises:
means for determining an authentication action associated with the user behavior;
means for receiving an authentication input based on the authentication action; and
means for determining whether the authentication input satisfies requirements of the authentication action.

17. The apparatus of claim 10 , wherein the means for performing the first type of authentication action comprises:
means for determining a strong authentication action associated with the user behavior;
means for receiving an authentication input based on the strong authentication action; and
means for determining whether the authentication input satisfies requirements of the strong authentication action.

18. A computing device comprising:
a processor configured to:
generate a first profile and second profile of user behavior for an authorized user of the mobile device, the first profile comprising a first type of profile having at least a first duration and comprising information indicative of expected behavior of the authorized user over at least the first duration, the second profile comprising a second type of profile having a second duration that is shorter than the first duration and comprising information indicative of expected behavior of the authorized user over at least the second duration;
monitor user behavior to generate usage behavior data;
compare the usage behavior data to the first profile and the second profile;
perform a first type of authentication action responsive to the usage behavior data deviating from the first profile; and
perform a second type of authentication action responsive to the usage behavior data deviating from the second profile.

19. The computing device of claim 18 , wherein the processor is configured to monitor the user behavior wh

Assignees

• Qualcomm Inc

Inventors

• Benoit Olivier Jean
• Nithyanand Rishab
• Cammarota Rosario
• Palanigounder Anand

Classifications

• H04L63/1425 Primary

  Traffic logging, e.g. anomaly detection · CPC title

• H04M1/724631

  by limiting the access to the user interface, e.g. locking a touch-screen or a keypad · CPC title

• H04W12/06

  Authentication · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04W12/12

  Detection or prevention of fraud · CPC title