User authentication via device characteristics

• US 10,581,846 B2
• Filed: 09/20/2016
• Issued: 03/03/2020
• Est. Priority Date: 09/20/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Devdas, Bharat, Kulkarni, Srihari
• Primary Examiner(s): Perungavoor, Venkat
• Application Number:
  US15/270,020
• Publication Number:
  US 20180083963A1
• Time in Patent Office: 1,260 Days
• Field of Search: None
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities
• CPC Class Codes: H04W 8/24 Transfer of terminal data

Abstract

An embodiment of the invention may include a method, computer program product and system for authenticating a user device. The embodiment may include receiving a plurality of device parameter from a user device. The embodiment may include selecting a user profile having a plurality of user profile characteristics based on determining a match between at least one device characteristic of the plurality of device characteristics with at least one user profile characteristic of the plurality of user profile characteristics. The embodiment may include determining whether a device parameter from the plurality of device characteristics of the user device matches a user profile parameter of the plurality of user profile characteristics. The embodiment may include increasing a device value based on determining that the device parameter matches the user profile parameter. The embodiment may include authenticating the user device based on determining that the device value is above a threshold value.

Claims

1. A method for authenticating a device, the method comprising:

receiving a plurality of device parameters from a user device, wherein the plurality of device parameters comprise a device ID based on an operating system of the device, an IMEI number, a battery serial number, and a hardware identification number;

selecting a user profile having a plurality of user profile characteristics from a device database based on determining a match between at least one device characteristic of the plurality of device characteristics with at least one user profile characteristic of the plurality of user profile characteristics;

determining a device value based on a summation of W_N * E_N, wherein W_N is the weight associated with the Nth device parameter, and wherein E_N is a binary representation based on the match between Nth device parameter from the user device with the Nth user profile characteristic, and wherein at least one device parameter does not match the associated user profile characteristic;

determining whether a difference in values for the at least one device parameter that does not match the associated user profile characteristic is possible;

based on determining that the device value is above a threshold value and based on determining that the difference in values is possible, authenticating the user device; and

based on authenticating the user device, updating the user profile having the plurality of user profile characteristics from the device database with the at least one device parameter that does not match the associated user profile characteristic.

2. The method of claim 1, wherein increasing the device value comprises:

assigning a weight to each of the plurality of device characteristics; and

based on determining that the device parameter from the plurality of device characteristics matches the user profile parameter of the plurality of user profile characteristics, increasing the device value based on the weight assigned to the device parameter.

3. The method of claim 1 further comprising receiving at least one device characteristic from the group consisting of:

a geographic location, a MAC address, and a cell tower location.

4. The method of claim 3 further comprising:

determining whether a difference in values for the device characteristic and the associated user profile characteristic is possible; and

based on determining that the device value is above a threshold value and based on determining that the difference in values is possible, authenticating the user device.

5. A computer program product for authenticating a device, the computer program product comprising:

one or more computer-readable storage devices and program instructions stored on at least one of the one or more tangible storage devices, the program instructions comprising;

program instructions to receive a plurality of device parameters from a user device, wherein the plurality of device parameters comprise a device ID based on an operating system of the device, an IMEI number, a battery serial number, and a hardware identification number;

program instructions to select a user profile having a plurality of user profile characteristics from a device database based on determining a match between at least one device characteristic of the plurality of device characteristics with at least one user profile characteristic of the plurality of user profile characteristics;

determining a device value based on a summation of W_N * E_N , wherein W_N is the weight associated with the Nth device parameter, and wherein E_N is a binary representation based on the match between Nth device parameter from the user device with the Nth user profile characteristic, and wherein at least one device parameter does not match the associated user profile characteristic;

program instructions to determine whether a difference in values for the at least one device parameter that does not match the associated user profile characteristic is possible;

based on determining that the device value is above a threshold value and based on determining that the difference in values is possible, program instructions to authenticate the user device; and

based on authenticating the user device, program instructions to update the user profile having the plurality of user profile characteristics from the device database with the at least one device parameter that does not match the associated user profile characteristic.

6. The computer program product of claim 5, wherein increasing the device value comprises:

program instructions to assign a weight to each of the plurality of device characteristics; and

based on determining that the device parameter from the plurality of device characteristics matches the user profile parameter of the plurality of user profile characteristics, program instructions to increase the device value based on the weight assigned to the device parameter.

7. The computer program product of claim 5 further comprising receiving at least one device characteristic from the group consisting of:

a geographic location, a MAC address, and a cell tower location.

8. The computer program product of claim 7 further comprising:

determining whether a difference in values for the device characteristic and the associated user profile characteristic is possible; and

based on determining that the device value is above a threshold value and based on determining that the difference in values is possible, authenticating the user device.

9. A computer system for authenticating a device, the computer system comprising:

one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage devices, and program instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the program instructions comprising;

program instructions to receive a plurality of device parameters from a user device, wherein the plurality of device parameters comprise a device ID based on an operating system of the device, an IMEI number, a battery serial number, and a hardware identification number;

program instructions to select a user profile having a plurality of user profile characteristics from a device database based on determining a match between at least one device characteristic of the plurality of device characteristics with at least one user profile characteristic of the plurality of user profile characteristics;

determining a device value based on a summation of W_N * E_N , wherein W_N is the weight associated with the Nth device parameter, and wherein E_N is a binary representation based on the match between Nth device parameter from the user device with the Nth user profile characteristic, and wherein at least one device parameter does not match the associated user profile characteristic;

program instructions to determine whether a difference in values for the at least one device parameter that does not match the associated user profile characteristic is possible;

based on determining that the device value is above a threshold value and based on determining that the difference in values is possible, program instructions to authenticate the user device; and

based on authenticating the user device, program instructions to update the user profile having the plurality of user profile characteristics from the device database with the at least one device parameter that does not match the associated user profile characteristic.

10. The computer system of claim 9, wherein increasing the device value comprises:

program instructions to assign a weight to each of the plurality of device characteristics; and

based on determining that the device parameter from the plurality of device characteristics matches the user profile parameter of the plurality of user profile characteristics, program instructions to increase the device value based on the weight assigned to the device parameter.