Identity Verification for at Least One Party to a Text-Based Communication

• US 20130198860A1
• Filed: 01/31/2012
• Published: 08/01/2013
• Est. Priority Date: 01/31/2012
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Guo, Shang Q., Lenchner, Jonathan
• Granted Patent: US 9,077,749 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12

Abstract

Methods and apparatus are provided for identity verification for at least one user to a text-based communication. An identity of at least one user to a text-based communication is verified by obtaining a plurality of characteristic features of at least one prior text-based communication between the at least one user and at least one additional user; comparing the plurality of characteristic features to a current session of the text-based communication; and verifying the identity of the at least one user based on a result of the comparison. The text-based communication can optionally be suspended if a user is not verified and/or an alarm can be generated.

Claims

1. (canceled)

12. The method of claim 1, further comprising the step of generating a confidence score that is used by said verifying step.

2. (canceled)

3. (canceled)

4. (canceled)

5. (canceled)

6. (canceled)

7. (canceled)

8. (canceled)

9. (canceled)

10. (canceled)

11. (canceled)

13. An apparatus for verifying an identity of at least one user to a text-based communication, comprising:

a memory; and

at least one hardware device, coupled to the memory, operative to;

obtain a plurality of characteristic features of at least one prior text-based communication between said at least one user and at least one additional user;

compare the plurality of characteristic features to a current session of said text-based communication; and

verify said identity of said at least one user based on a result of said comparison.

14. The apparatus of claim 13, wherein the plurality of characteristic features are compared to a current session using the statistical properties of the words entered by the user.

15. The apparatus of claim 13, wherein the plurality of characteristic features are compared to a current session using the statistical properties of the dynamics of user keystrokes

16. The apparatus of claim 13, wherein said text-based communication comprises one or more of instant messaging, text messaging and electronic mail.

17. The apparatus of claim 13, wherein said plurality of characteristic features are obtained using machine learning techniques.

18. The apparatus of claim 13, wherein said at least one hardware device is further configured to observe said text-based communication between said at least one user and at least one additional user using machine learning techniques to determine said plurality of characteristic features.

19. The apparatus of claim 13, wherein said plurality of characteristic features are recorded in at least one feature vector.

20. The apparatus of claim 19, wherein said at least one hardware device is further configured to update said at least one feature vector.

21. The apparatus of claim 13, wherein said plurality of characteristic features are recorded in one or more rules.

22. The apparatus of claim 13, wherein said at least one hardware device is further configured to suspend said text-based communication if said at least one user is not verified.

23. The apparatus of claim 13, wherein said at least one hardware device is further configured to generate an alarm if said at least one user is not verified.

24. The apparatus of claim 13, wherein said at least one hardware device is further configured to generate a confidence score that is used to verify said identity.

25. An article of manufacture for verifying an identity of at least one user to a text-based communication, comprising a tangible machine readable recordable medium containing one or more programs which when executed implement the steps of:

obtaining a plurality of characteristic features of at least one prior text-based communication between said at least one user and at least one additional user;

comparing the plurality of characteristic features to a current session of said text-based communication; and

verifying said identity of said at least one user based on a result of said comparison