IDENTITY VERIFICATION VIA SELECTION OF SENSIBLE OUTPUT FROM RECORDED DIGITAL DATA

• US 20090328175A1
• Filed: 06/24/2009
• Published: 12/31/2009
• Est. Priority Date: 06/24/2008
• Status: Active Grant

• Current Assignee: Gary S. Shuster
• Original Assignee: Gary S. Shuster
• Inventors: Shuster, Gary Stephen
• Granted Patent: US 8,726,355 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A digital data sampler operating in a computer processor selects and stores digital data samples from a data stream used for generating audio-visual output during a session with a client operated by a user. The session generates the data stream independently of the data sampler. The data sampler may collect parameter data correlated to a probability will be remembered by the user at some future time, for each sample. The data sampler may store the data samples and parameter data as shared secret data for use in a future authentication session. During a future authentication session, an authentication device selects test data from the shared secret data to generate sensible output in an authentication process. The authentication process grants access to a controlled resource in response to user input indicating specific knowledge of the shared secret data selected from a presentation of similar sensible outputs.

Claims

1. A method comprising:

selecting digital data samples, using a computer, from a data stream used for generating sensible output during a first session between at least two network nodes initiated under a defined user account;

storing the digital data samples on a computer-readable medium in association with an identifier for the user account under which the first session is initiated;

transmitting the digital data samples and decoy digital data configured for generating discrete sensible outputs to a client for use in an authentication session for a subsequent session initiated at a client under the user account;

authenticating access for the subsequent session in response to receiving input from the client indicating selection of sensible output generated from the digital data samples from a challenge matrix comprising the sensible output generated from the digital data samples and sensible output generated from the decoy digital data.

2. The method of claim 1, wherein the discrete sensible outputs transmitted to the client comprise visible outputs.

3. The method of claim 1, wherein the discrete sensible outputs transmitted to the client comprise audible outputs.

4. The method of claim 1, further comprising monitoring parameters of the first session indicative of likelihood that particular discrete sensible output is receiving user attention at the client node.

5. The method of claim 4, further comprising monitoring the parameters including a quantity of client input data received during each particular discrete sensible output.

6. The method of claim 4, further comprising monitoring the parameters including a period of time used for each particular discrete sensible output from a client node.

7. The method of claim 4, further comprising monitoring the parameters including a time at which each particular discrete sensible output is output from a client node.

8. The method of claim 4, further comprising storing parameter data from monitoring the parameters in association with the digital data samples.

9. The method of claim 8, further comprising selecting the digital data samples transmitted for use in the authentication session from a larger database of digital data samples, using the parameter data.

10. The method of claim 1, further comprising processing the digital data samples to expunge data indicative of the user account.

11. The method of claim 10, wherein the processing comprises blurring textual data in the digital data samples.

12. The method of claim 1, further comprising generating the decoy digital data to product discrete sensible output resembling the sensible output sampled by the digital data samples.

13. The method of claim 1, further comprising generating the challenge matrix comprising multiple-choice questions enabling selection of the sensible output generated from the digital data samples and sensible output generated from the decoy digital data.

14. The method of claim 1, wherein the first session is a secure session.

15. The method of claim 1, further comprising obtaining a portion of the digital data samples from a digital camera operated under the control of one of the at least two network nodes during the first session.

16. A computer-readable medium encoded with instructions configured for causing a computer processor to:

sample a data stream for independently generating visible image output during a first session with a client, to produce data samples;

storing the data samples in a database in association with an identifier for an account under which the first session is operated;

transmitting at least selected ones of the data samples and decoy data configured for generating visible image outputs to a client, for use in a challenge matrix used to secure access to a subsequent session initiated under the account identifier;

permitting access for the subsequent session in response to receiving input indicating successful discrimination between the sensible output generated from the digital data samples and sensible output generated from the decoy data in the challenge matrix.

17. The computer-readable medium of claim 16, the instructions further configured for causing a computer processor to monitor parameters of the first session indicative of likelihood that the particular image output is receiving user attention at the client node.

18. The computer-readable medium of claim 17, the instructions further configured for causing a computer processor to store parameter data from monitoring the parameters in association with the data samples.

19. The computer-readable medium of claim 17, the instructions further configured for causing a computer processor to select the at least selected ones of the data samples using the parameter data to increase likelihood that image output during presentation of the challenge matrix will be remembered by a client-side participant in the first session.

20. The computer-readable medium of claim 16, the instructions further configured for causing a computer processor to identify and expunge data indicative of the account from the data samples.

21. The computer-readable medium of claim 16, the instructions further configured for causing a computer processor to generate reduced-size image facsimiles from the data samples and decoy data for presentation in the challenge matrix.

22. A system, comprising:

hosting means for hosting a secure online process in which images are output at a client device in response to data from the hosting means;

sampling means for sampling the data from the hosting means independently of the secure online process to generate stored sample data configured for replicating images output during the secure online process; and

testing means for presenting images generated from the stored sample data with decoy images to authenticate a client initiating a subsequent process.

23. The system of claim 22, further comprising image processing means for removing indications of a user account from the stored sample data.

24. A method comprising:

obtaining at least one digital data sample by operating a digital camera under the control of a computer during a first session between the computer and a host node initiated under a defined user account;

storing the digital data sample on a computer-readable medium in association with an identifier for the user account under which the first session is initiated;

transmitting the digital data sample and decoy digital data configured for generating discrete images to a client for use in an authentication session for a subsequent session initiated at a client under the user account;

authenticating access for the subsequent session in response to receiving input from the client indicating selection of an image generated from the digital data sample from a challenge matrix comprising the image generated from the digital data sample and decoy images generated from the decoy digital data.