Method and apparatus for using a multi-factor password or a dynamic password for enhanced security on a device

Patent metadata

Field	Value
Publication number	US-9892245-B2
Application number	US-201715487093-A
Country	US
Kind code	B2
Filing date	Apr 13, 2017
Priority date	Aug 2, 2011
Publication date	Feb 13, 2018
Grant date	Feb 13, 2018

Abstract

A method and apparatus for performing authentication may comprise: determining a first value of a dynamic password applicable for a first scenario, the dynamic password having a plurality of values for a plurality of scenarios defined by at least one parameter; authenticating a user in the first scenario by a device based on the first value of the dynamic password; determining a second value of the dynamic password applicable for a second scenario; and authenticating the user in the second scenario by the device based on the second value of the dynamic password.

First claim

The invention claimed is:

1. A method of performing authentication, comprising:
receiving, during a training phase, a dynamic password comprising a plurality of password values, each password value of the plurality of password values being associated with one of a plurality of scenarios defined by at least one parameter;
determining a first scenario of the plurality of scenarios for the dynamic password, the first scenario determined based on a current state of the at least one parameter;
obtaining a first password value from the plurality of password values that is associated with the first scenario;
authenticating a user by a device using a user supplied value for the dynamic password based on the first password value;
determining a second scenario of the plurality of scenarios for the dynamic password, the second scenario determined based on a new current state of the at least one parameter;
obtaining a second password value from the plurality of password values that is associated with the second scenario; and
authenticating the user by the device using a second user supplied value for the dynamic password based on the second password value.

2. The method of claim 1 , further comprising:
recording the plurality of values of the dynamic password for the plurality of scenarios during the training phase; and
storing the plurality of values of the dynamic password for the plurality of scenarios.

3. The method of claim 1 , wherein the at least one parameter comprises a parameter for time, wherein the first scenario corresponds to a first range of time, and wherein the second scenario corresponds to a second range of time.

4. The method of claim 1 , wherein the at least one parameter comprises a parameter for location, wherein the first scenario corresponds to a first location for the device, and wherein the second scenario corresponds to a second location for the device.

5. The method of claim 1 , wherein the plurality of scenarios are defined by the user.

6. The method of claim 1 , further comprising:
determining the current state of the at least one parameter based on at least one sensor on the device.

7. The method of claim 1 , wherein the dynamic password comprises a plurality of factors, with at least one of the plurality of factors being selected by the user.

8. An apparatus for performing authentication, comprising:
means for receiving, during a training phase, a dynamic password comprising a plurality of password values, each password value of the plurality of password values being associated with one of a plurality of scenarios defined by at least one parameter;
means for determining a first scenario of the plurality of scenarios for the dynamic password, the first scenario determined based on a current state of the at least one parameter;
means for obtaining a first password value from the plurality of password values that is associated with the first scenario;
means for authenticating a user using a user supplied value for the dynamic password based on the first password value;
means for determining a second scenario of the plurality of scenarios for the dynamic password, the second scenario determined based on a new current state of the at least one parameter;
means for obtaining a second password value from the plurality of password values that is associated with the second scenario; and
means for authenticating the user using a second user supplied value for the dynamic password based on the second password value.

9. The apparatus of claim 8 , wherein the at least one parameter comprises a parameter for time, wherein the first scenario corresponds to a first range of time, and wherein the second scenario corresponds to a second range of time.

10. The apparatus of claim 8 , wherein the at least one parameter comprises a parameter for location, wherein the first scenario corresponds to a first location for the apparatus, and wherein the second scenario corresponds to a second location for the apparatus.

11. The apparatus of claim 8 , wherein the dynamic password comprises a plurality of factors, with at least one of the plurality of factors being selected by the user.

12. An apparatus for performing authentication, comprising:
at least one processor configured to:
define, during a training phase, a dynamic password comprising a plurality of password values, each password value of the plurality of password values being associated with one of a plurality of scenarios defined by at least one parameter;
determine a first scenario of the plurality of scenarios for the dynamic password, the first scenario determined based on a current state of the at least one parameter;
obtain a first password value from the plurality of password values that is associated with the first scenario;
authenticate a user using a user supplied value for the dynamic password based on the first password value;
determine a second scenario of the plurality of scenarios for the dynamic password, the second scenario determined based on a new current state of the at least one parameter;
obtain a second password value from the plurality of password values that is associated with the second scenario; and
authenticate the user using a second user supplied value for the dynamic password based on the second password value.

13. The apparatus of claim 12 , wherein the at least one parameter comprises a parameter for time, wherein the first scenario corresponds to a first range of time, and wherein the second scenario corresponds to a second range of time.

14. The apparatus of claim 12 , wherein the at least one parameter comprises a parameter for location, wherein the first scenario corresponds to a first location for the apparatus, and wherein the second scenario corresponds to a second location for the apparatus.

15. The apparatus of claim 12 , wherein the dynamic password comprises a plurality of factors, with at least one of the plurality of factors being selected by the user.

16. A computer program product, comprising:
a computer-readable medium comprising:
code for causing at least one processor to define, during a training phase, a dynamic password comprising a plurality of password values, each password value of the plurality of password values being associated with one of a plurality of scenarios defined by at least one parameter,
code for causing at least one processor to determine a first scenario of the plurality of scenarios for the dynamic password, the first scenario determined based on a current state of the at least one parameter,
code for causing at least one processor to obtain a first password value from the plurality of password values that is associated with the first scenario,
code for causing the at least one processor to authenticate a user using a user supplied value for the dynamic password based on the first password value,
code for causing at least one processor to determine a second scenario of the plurality of scenarios for the dynamic password, the second scenario determined based on a new current state of the at least one parameter,
code for causing the at least one processor to obtain a second password value from the plurality of password values that is associated with the second scenario, and
code for causing the at least one processor to authenticate the user using a second user supplied value for the dynamic password based on the second password value.

17. The computer program product of claim 16 , wherein the at least one parameter comprises a parameter for time, wherein the first scenario corresponds to a first range of time, and

Assignees

• Qualcomm Inc

Inventors

• Krishnamurthi Govindarajan

Classifications

• G06F21/40

  by quorum, i.e. whereby two or more security principals are required · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title

• G06F21/32 Primary

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title