Pressure-based authentication

• US 10,530,770 B2
• Filed: 06/28/2017
• Issued: 01/07/2020
• Est. Priority Date: 06/28/2017
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Goldberg, Itzhack, McGregor, Harry R., Mesika, Yossi, Moore, Christopher B.
• Primary Examiner(s): Schmidt, Kari L
• Application Number:
  US15/635,762
• Publication Number:
  US 20190007397A1
• Time in Patent Office: 923 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 3/04883 for inputting data by handwriting, e.g. gesture or text
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security

Abstract

In an approach to securing data using alternative value identification schemes, one or more computer processors receive user registration data, wherein the user registration data includes one or more authentication parameters, wherein the one or more authentication parameters includes one or more physical pressure-based inputs by a user. The one or more computer processors receive an access request requiring an authentication from the user, wherein the access request includes the one or more physical pressure-based inputs by the user associated with the one or more authentication parameters. The one or more computer processors determine whether the one or more authentication parameters match the user registration data. Responsive to determining that the authentication data matches the registration data, The one or more computer processors authenticate access for the user.

Claims

1. A computer-implemented method (CIM) comprising:

receiving user registration data, wherein the user registration data includes a set of authentication parameters, wherein a given authentication parameter is associated with at least one physical pressure-based input value(s) corresponding to a force value applied to a pressure-sensitive input module, and the set of authentication parameters includes the following parameters;

(i) an access code, (ii) a time, (iii) a name of the user, and (iv) a geographical location, where a given physical pressure-based input of the at least one physical pressure-based input value(s) associated with the access code is associated with a single character of an access code string and further associated with a sound corresponding to the force value applied to a pressure-sensitive input module, where single characters of the access code string are either an alphanumeric character or a symbol character;

receiving, by the one or more computer processors, an access request requiring an authentication from the user, wherein the access request includes the one or more physical pressure-based input value(s) by the user associated with the set of authentication parameters, wherein the pressure-based authentication includes both a pressure input value and the sound based on the pressure input value for a given character of the access code string;

determining, by the one or more computer processors, whether the set of authentication parameters of the access request match the user registration data; and

responsive to determining that the authentication data matches the registration data, authenticating, by the one or more computer processors, access for the user.

2. The method of claim 1, further comprising:

identifying, by the one or more computer processors, one or more credentials associated with the user;

determining, by the one or more computer processors, whether the identified user meets one or more authorization parameters; and

responsive to determining that the identified user meets the one or more authorization parameters, allowing, by the one or more computer processors, the identified user to input the authentication.

3. The method of claim 1, wherein the pressure input value is displayed with an alphanumeric character and a color is displayed with an alphanumeric character.

4. The method of claim 1, wherein receiving the access request requiring the authentication from the user further comprises:

retrieving, by the one or more computer processors, one or more pressure value ratios for the device associated with the access request; and

applying, by the one or more computer processors, the one or more pressure value ratios for the device associated with the access request to the authentication from the user.

5. The method of claim 1, wherein user access is further restricted by an internet protocol (IP) address associated with the user registration data.

6. The method of claim 1, wherein the pressure-based authentication is based on one or more non-pressure-based inputs.

7. The method of claim 1, wherein receiving the access request requiring the authentication from the user, wherein the access request includes the one or more physical pressure-based inputs values by the user associated with the set of authentication parameters further comprises:

detecting, by the one or more computer processors, an input pressure using one or more pressure sensors associated with an input medium;

determining, by the one or more computer processors, an input pressure value based on an amount of pressure exerted on the input medium; and

associating, by the one or more computer processors, the input pressure value with a given physical pressure-based input corresponding to the authentication of the one or more physical-pressure based inputs corresponding to the authentication.

8. The method of claim 7, wherein the determined input pressure value is selected from a group consisting of:

an alphanumeric character, a visual feedback, a mechanical feedback, a color, and a sound-based feedback.

9. The method of claim 7, wherein determining an input pressure value based on an amount of pressure exerted on the input medium further comprises:

calculating, by the one or more computer processors, a minimum detectable pressure and a maximum detectable pressure associated with the input medium associated with the device;

determining, by the one or more computer processors, a pressure sensitivity scale based on the minimum detectable pressure and the maximum detectable pressure associated with the input medium;

comparing, by the one or more computer processors, the pressure sensitivity scale to a standardized pressure sensitivity scale; and

calculating, by the one or more computer processors, a pressure value ratio to match the standardized pressure sensitivity scale on the input medium.

10. The method of claim 7, wherein determining an input pressure value based on the amount of pressure exerted on the input medium further comprises:

receiving, by the one or more computer processors, an annotation from a particular device;

comparing, by the one or more computer processors, the input pressure value associated with the annotation for the particular device using a device-specific key; and

determining, by the one or more computer processors, the input pressure value associated with the annotation from the particular device based on the device-specific key.

11. A computer program product comprising:

one or more computer readable storage device; and

program instructions stored on the one or more computer readable storage devices, with the stored program instructions including instructions for causing one or more computer processors to perform operations including the following;

receiving user registration data, wherein the user registration data includes a set of authentication parameters, wherein a given authentication parameter is associated with at least one physical pressure-based input value(s) corresponding to a force value applied to a pressure-sensitive input module, and the set of authentication parameters includes the following parameters;

(i) an access code, (ii) a time, (iii) a name of the user, and (iv) a geographical location, where a given physical pressure-based input of the at least one physical pressure-based input value(s) associated with the access code is associated with a single character of an access code string and further associated with a sound corresponding to the force value applied to a pressure-sensitive input module, where single characters of the access code string are either an alphanumeric character or a symbol character,

receiving an access request requiring an authentication from the user, wherein the access request includes the one or more physical pressure-based input value(s) by the user associated with the set of authentication parameters, wherein the pressure-based authentication includes both a pressure input value and the sound based on the pressure input value for a given character of the access code string,

determining whether the set of authentication parameters of the access request match the user registration data, and

responsive to determining that the authentication data matches the registration data, authenticating access for the user.

12. The computer program product of claim 11 further comprising:

identifying one or more credentials associated with the user;

determining whether the identified user meets one or more authorization parameters; and

responsive to determining that the identified user meets the one or more authorization parameters, allowing the identified user to input the authentication.

13. The computer program product of claim 11, wherein receiving the access request requiring the authentication from the user further comprises:

retrieving one or more pressure value ratios for the device associated with the access request; and

applying the one or more pressure value ratios for the device associated with the access request to the authentication from the user.

14. The computer program product of claim 11, wherein user access is restricted further restricted by an internet protocol (IP) address associated with the user registration data.

15. The computer program product of claim 11, wherein receiving the access request requiring the authentication from the user, wherein the access request includes the one or more physical pressure-based inputs by the user associated with the set of authentication parameters further comprises:

detecting an input pressure using one or more pressure sensors associated with an input medium;

determining an input pressure value based on an amount of pressure exerted on the input medium; and

associating the input pressure value with a given physical pressure-based input corresponding to the authentication of the one or more physical-pressure based inputs corresponding to the authentication.

16. The computer program product of claim 15, wherein the determined input pressure value is selected from a group consisting of:

an alphanumeric character, a visual feedback, a mechanical feedback, a color, and a sound-based feedback.

17. The computer program product of claim 15, wherein determining an input pressure value based on an amount of pressure exerted on the input medium further comprises:

calculating a minimum detectable pressure and a maximum detectable pressure associated with the input medium associated with the device;

determining a pressure sensitivity scale based on the minimum detectable pressure and the maximum detectable pressure associated with the input medium;

comparing the pressure sensitivity scale to a standardized pressure sensitivity scale; and

calculating a pressure value ratio to match the standardized pressure sensitivity scale on the input medium.

18. The computer program product of claim 15, wherein determining an input pressure value based on the amount of pressure exerted on the input medium further comprises:

receiving an annotation from a particular device;

comparing the input pressure value associated with the annotation for the particular device using a device-specific key; and

determining the input pressure value associated with the annotation from the particular device based on the device-specific key.

19. A computer system comprising:

one or more computer processors;

one or more computer readable storage devices;

program instructions stored on the one or more computer readable storage devices for execution by at least one of the one or more computer processors, with the stored program instructions including instructions for causing one or more computer processors to perform operations including the following;

receiving user registration data, wherein the user registration data, includes a set of authentication parameters, wherein a given authentication parameter is associated with at least one physical pressure-based input value(s) corresponding to a force value applied to a pressure-sensitive input module, and the set of authentication parameters includes the following parameters;

(i) an access code, (ii) a time, (iii) a name of the user, and (iv) a geographical location, where a given physical pressure-based input of the at least one physical pressure-based input value(s) associated with the access code is associated with a single character of an access code string and further associated with a sound corresponding to the force value applied to a pressure-sensitive input module, where single characters of the access code string are either an alphanumeric character or a symbol character;

receiving an access request requiring an authentication from the user, wherein the access request includes the one or more physical pressure-based input values by the user associated with the set of authentication parameters, wherein the pressure-based authentication includes both a pressure input value and the sound based on the pressure input value for a given character of the access code string;

determining whether the set of authentication parameters of the access request match the user registration data; and

responsive to determining that the authentication data matches the registration data, authenticating access for the user.

20. The computer system of claim 19, wherein receiving the access request requiring the authentication from the user, wherein the access request includes the one or more physical pressure-based inputs by the user associated with the set of authentication parameters further comprises:

detecting an input pressure using one or more pressure sensors associated with an input medium;

determining an input pressure value based on an amount of pressure exerted on the input medium; and

associating the input pressure value with a given physical pressure-based input corresponding to the authentication of the one or more physical-pressure based inputs corresponding to the authentication.