Generating challenge response sets utilizing semantic web technology

Patent metadata

Field	Value
Publication number	US-9516008-B2
Application number	US-201414479813-A
Country	US
Kind code	B2
Filing date	Sep 8, 2014
Priority date	Dec 31, 2013
Publication date	Dec 6, 2016
Grant date	Dec 6, 2016

Abstract

Embodiments of the present invention relate to generating challenge response sets utilizing semantic web technology. In response to detecting an authentication session for a user, a computing device generates a first challenge question that is semantically related to a second challenge question previously responded to by the user, wherein the authentication session seeks to validate an identification of the user. The computing device determines whether a response to the challenge question by the user is valid. In response to determining that the response to the challenge question by the user was valid, the computing device generates a third challenge question or a notification that the response to the challenge question validates the identification of the user.

First claim

What is claimed is:

1. A method for authenticating a user, the method comprising:
generating a first question for the user, with the first question requesting the user to select a secret entity;
receiving, from the user, an original response identifying the secret entity selected by the user, with the original response corresponding to a valid ontology object included in an ontology database;
querying the ontology database to determine a plurality of properties and classes of the valid ontology object corresponding to the secret entity; and
generating, based upon a data generalization strategy using the plurality of properties and classes of the valid ontology object, a generated challenge and response set through the use of semantic web technology so that the generated challenge and response set is related semantically to the original user response and does not directly translate back to the original user response.

2. The method of claim 1 further comprising:
communicating the a challenge portion of the generated challenge and response set to the user;
receiving a secondary response from the user;
comparing the secondary response to a response portion of the generated challenge and response set to determine whether there is a match; and
taking an authentication-related action based upon whether there is a match.

3. The method of claim 2 wherein:
the comparison of the secondary response to the response portion of the generated challenge and response set determines that there is a match; and
the authentication-related action is successful authentication of the user.

Assignees

• IBM

Inventors

• Chow Ken Y
• Tang Weng S
• Xu Liang

Classifications

• G06F21/31

  User authentication · CPC title

• G06F21/316

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title

• G06F2221/2101

  Auditing as a secondary aspect · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F2221/2103

  Challenge-response · CPC title