Multi-touch device behaviormetric user authentication and dynamic usability system

• US 20080092245A1
• Filed: 09/17/2007
• Published: 04/17/2008
• Est. Priority Date: 09/15/2006
• Status: Active Grant

• Current Assignee: Identity Metrics Incorporated
• Original Assignee: NeoKinetics Corp.
• Inventors: Straub III, James, Meehan, Timothy, Carr, Norman, Hust, Robert, Alward, Herbert
• Granted Patent: US 8,452,978 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof

Abstract

This invention discloses a system for determining whether a purported or alleged authorized user is in fact the authorized user, by comparing new data on a real-time basis against probability distribution representations including an authorized user probability distribution representation and a global or wide population probability distribution representation, to provide a probability as to whether the purported authorized user is the authorized user. This invention may utilize touch dynamics or data, or other data from similar measurable characteristics, to determine the probability that the new data from the purported authorized user indicates or identifies that user as the authorized user. This invention uses the same data to determine the probability for the most optimal position and sizes for user interface components.

Claims

1. An authorized user authentication method with a frustrated total internal reflection device, comprising:

accessing data from an authorized user, said data being touch dynamic data;

using the data to create a first characteristic probability distribution representation indicative of the authorized user;

accessing new data from a purported authorized user, said new data being touch dynamic data;

comparing the new data of the purported authorized user to the first characteristic probability distribution representation for the authorized user; and

determining a probability that the purported authorized user is the authorized user based on the comparing.

2. An authorized user authentication method with a frustrated total internal reflection device as recited in claim 1, and further comprising:

accessing the data from the authorized user;

using the data to create a second characteristic probability distribution representation indicative of the authorized user;

accessing the new data from a purported authorized user;

comparing the new data of the purported authorized user to the second characteristic probability distribution representation for the authorized user; and

determining a probability that the purported authorized user is the authorized user based on the comparing of the new data to the first characteristic probability distribution representation and to the second characteristic probability distribution representation for the authorized user.

3. An authorized user authentication method with a frustrated total internal reflection device as recited in claim 1, and further comprising:

providing a wide population first characteristic probability distribution representation indicative of the first characteristic of a wide population;

comparing the new data of the purported authorized user to the first characteristic probability distribution representation for the authorized user and to the wide population first characteristic probability distribution representation; and

determining a probability that the purported authorized user is the authorized user based on the comparing.

4. An authorized user authentication method with a frustrated total internal reflection device as recited in claim 3, and further wherein determining the probability that the purported authorized user is the authorized user through the application of Bayes Rule to the new data, the first characteristic probability distribution representation for the authorized user, and the wide population first characteristic probability distribution representation.

5. An authorized user authentication method with a frustrated total internal reflection device as recited in claim 4, and further wherein determining the probability that the purported authorized user is the authorized user is one of a positive and a negative indication.

6. An authorized user authentication method with a frustrated total internal reflection device as recited in claim 1 and further wherein the touch dynamic data is at least one of touch movement data and touch imprint data.

7. An authorized user authentication method with a frustrated total internal reflection device as recited in claim 1, and further applying Fitts Law to determine a first data parameter from the accessing data from the authorized user and further applying Fitts Law to determine a second data parameter from the new data.

8. An authorized user authentication method with a frustrated total internal reflection device as recited in claim 3, and further wherein Fitts Law is utilized to determine the first characteristic probability distribution representation for the authorized user, and to determine the wide population first characteristic probability distribution representation, and then applying Fitts Law to the new data to determine the probability that the purported authorized user is the authorized user.

9. An authorized user authentication method with a frustrated total internal reflection device as recited in claim 1, and further wherein the data is a touchscreen device dynamic.

10. A method for determining a more probable authentication method with a frustrated total internal reflection device, comprising:

accessing data from an authorized user;

using the data to create a first characteristic probability distribution representation indicative of the authorized user;

using the data to create a second characteristic probability distribution representation indicative of the authorized user;

providing a wide population first characteristic probability distribution representation indicative of the first characteristic of a wide population;

providing a wide population second characteristic probability distribution representation indicative of the second characteristic of a wide population;

comparing the first characteristic probability distribution representation indicative of the authorized user to the wide population first characteristic probability distribution representation indicative of the first characteristic of a wide population;

comparing the second characteristic probability distribution representation indicative of the authorized user to the wide population second characteristic probability distribution representation indicative of the second characteristic of a wide population determining which of the comparings yields a more probable characteristic for authenticating the authorized user from the wide population.

11. A method for determining a more probable authentication method with a frustrated total internal reflection device as recited in claim 10, and further comprising:

accessing new data from a purported authorized user;

comparing the new data of the purported authorized to probability distribution representations of the more probable characteristic for authenticating the authorized user from the wide population.

12. A method for determining a more probable authentication method with a frustrated total internal reflection device as recited in claim 10, and further wherein the first characteristic probability distribution representation indicative of the authorized user is a touch dynamic on a touchscreen.

13. A method for determining a more probable authentication method with a frustrated total internal reflection device as recited in claim 10 and further:

applying Fitts law to the data to create the first characteristic probability distribution representation indicative of the authorized user;

applying Fitts law to create the second characteristic probability distribution representation indicative of the authorized user;

wherein the wide population first characteristic probability distribution representation indicative of the first characteristic of a wide population, and the wide population second characteristic probability distribution representation indicative of the second characteristic of a wide population, are characteristics from Fitts Law.