Rhythm-based user authentication

Patent metadata

Field	Value
Publication number	US-9495525-B2
Application number	US-201615047399-A
Country	US
Kind code	B2
Filing date	Feb 18, 2016
Priority date	Apr 10, 2014
Publication date	Nov 15, 2016
Grant date	Nov 15, 2016

Abstract

The present invention is directed to an apparatus, a method, and a computer program product for authenticating a user based on a sequence of rhythmic inputs. The user via a mobile device provides one or more inputs (e.g., pushing a button, tapping a touchscreen, a biometric, or the like) to one or more sensors associated with the mobile device as an attempt of authorization. The one or more inputs may be provided in a rhythmic manner (e.g., provided in time with music). The present invention then compares the provided one or more inputs to one or more predetermined sequences of inputs that are associated with positive authentication of the user (e.g., a known password). The phone determines that the one or more provided inputs match one or more predetermined rhythmic sequences associated with positive authentication of the user and authenticates the user.

First claim

What is claimed is:

1. A computer program product for authenticating a user based on a rhythmic pattern, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:
receive an indication from a user to execute an action associated with an online banking application;
determine that the action is associated with one or more actions that require user authentication;
initiate a presentation of a predetermined sequence of musical notes associated with the action, wherein the predetermined sequence of musical notes are played on a speaker associated with a wearable computing device;
receive via at least one sensor a plurality of rhythmic inputs from the user to match the sequence of musical notes associated with the action, wherein the plurality of rhythmic inputs are received using the wearable computing device, the wearable computing device comprising a sensor configured to sense the plurality of rhythmic inputs from the user, wherein the plurality of rhythmic inputs comprise a combination of input types, wherein the input types comprise one or more inputs associated with one or more sensors associated with the wearable computing device and one or more inputs by physically pressing one or more buttons associated with the wearable computing device;
process the plurality of rhythmic inputs, wherein processing the plurality of rhythmic inputs includes comparing the plurality of rhythmic inputs received using the wearable computing device to the predetermined sequence of musical notes played on the speaker associated with the wearable computing device to determine that the plurality of rhythmic inputs matches at least one predetermined rhythmic pattern associated with authentication of the user, wherein processing the plurality of rhythmic inputs comprises determining at least an input type, an input length, an input duration, an input time, a length of time between the plurality of rhythmic inputs, a rhythm, a tempo, a velocity, and a pitch;
authenticate the user in response to determining that the plurality of rhythmic inputs matches the predetermined sequence of musical notes played on the speaker associated with the wearable computing device, wherein determining further comprises determining at least a partial match between the plurality of rhythmic inputs and at least one predetermined rhythmic pattern, wherein determining a partial match provides partial authentication of the user; and
enable the user to execute the action based on at least authenticating the user.

2. The computer program product of claim 1 , wherein the wearable computing device is at least one of a bracelet, a ring, a watch, glasses, jewelry, a pen, or a stylus.

3. The computer program product of claim 1 , wherein the apparatus is at least one of a smart phone, a tablet, a laptop, a computer, a mobile device, a personal digital assistant (PDA), or a touch screen computer.

4. The computer program product of claim 3 , wherein the at least one sensor is associated with at least one of a touchscreen, a button associated with the apparatus, an application associated with the apparatus, or an operating system associated with the apparatus.

5. The computer program product of claim 1 , wherein the plurality of rhythmic inputs includes at least one of a gesture, a button push, a button slide, a button hold, a button tap, a touchscreen swipe, a touchscreen push, a touchscreen slide, a touchscreen tap, a touchscreen hold, a touchscreen swim, a mouse click, a scroll, a toggle, a selection, a zoom, a knock, a download, a biometric interaction, an upload, or an action.

6. The computer program product of claim 5 , wherein the plurality of rhythmic inputs is received via the at least one sensor as a rhythmic sequence of inputs spaced out by the user over a predetermined period of time.

7. The computer program product of claim 1 , wherein music is played only when headphones are coupled to the apparatus.

8. The computer program product of claim 1 , wherein the at least one predetermined rhythmic pattern is configurable by the user.

9. The computer program product of claim 1 , wherein the at least one predetermined rhythmic pattern is associated with authentication of more than one user.

10. The computer program product of claim 1 , wherein authenticating the user includes executing an action, wherein the action is at least one of a gesture, a transaction, a viewing of a summary of information, a deposit, a withdrawal, a selection, a download, an upload, a zoom, a scroll, a click, or a slide.

11. The computer program product of claim 1 comprising denying authentication of the user based on determining that the plurality of rhythmic inputs does not at least partially match at least one predetermined rhythmic pattern, wherein denying authentication of the user prompts the user via an interface for reattempting authentication of the user.

12. The computer program product of claim 1 , wherein at least one of the plurality of rhythmic inputs or the at least one predetermined rhythmic pattern includes a combination of different inputs.

13. The computer program product of claim 1 , wherein determining if the plurality of rhythmic inputs matches at least one predetermined rhythmic pattern associated with authentication of the user includes determining a level of complexity associated with the plurality of rhythmic inputs, wherein the level of complexity associated with the plurality of rhythmic inputs corresponds to a level of user access.

14. The computer program product of claim 13 , wherein a predeterminedly high level of complexity corresponds to a predeterminedly high level of user access and a predeterminedly low level of complexity corresponds to a predeterminedly low level of user access.

15. A method for authenticating a user based on a rhythmic pattern, the method comprising:
receiving an indication from a user to execute an action associated with an online banking application;
determining that the action is associated with one or more actions that require user authentication;
initiating a presentation of a predetermined sequence of musical notes associated with the action, wherein the predetermined sequence of musical notes are played on a speaker associated with a wearable computing device;
receiving via at least one sensor a plurality of rhythmic inputs from the user to match the sequence of musical notes associated with the action, wherein the plurality of rhythmic inputs are received using the wearable computing device, the wearable computing device comprising a sensor configured to sense the plurality of rhythmic inputs from the user, wherein the plurality of rhythmic inputs comprise a combination of input types, wherein the input types comprise one or more inputs associated with one or more sensors associated with the wearable computing device and one or more inputs by physically pressing one or more buttons associated with the wearable computing device;
processing the plurality of rhythmic inputs, wherein processing the plurality of rhythmic inputs includes comparing the plurality of rhythmic inputs received using the wearable computing device to the predetermined sequence of musical notes played on the speaker associated with the wearable computing device to determine that the plurality of rhythmic inputs matches at least one predetermined rhythmic pattern associated with authentication of the user, wherein processing the plurality of rhythmic inputs comprises determining at least an input type, an input length, an input duration, an input time, a length of time between the plurality of rhythmic

Assignees

• Bank Of America

Inventors

• Grigg David M
• Starbuck Richard Andrew
• Hanson Carrie Anne

Classifications

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F21/31

  User authentication · CPC title

• G06F21/35

  communicating wirelessly · CPC title

• G06F3/0488

  using a touch-screen or digitiser, e.g. input of commands through traced gestures · CPC title

• H04W12/06 Primary

  Authentication · CPC title