IDENTITY VERIFICATION VIA SELECTION OF SENSIBLE OUTPUT FROM RECORDED DIGITAL DATA

• US 20140250510A1
• Filed: 05/12/2014
• Published: 09/04/2014
• Est. Priority Date: 06/24/2008
• Status: Active Grant

• Current Assignee: Gary S. Shuster
• Original Assignee: Gary S. Shuster
• Inventors: Shuster, Gary Stephen
• Granted Patent: US 9,288,196 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A digital data sampler operating in a computer processor selects and stores digital data samples from a data stream used for generating audio-visual output during a session with a client operated by a user. The session generates the data stream independently of the data sampler. The data sampler may collect parameter data correlated to a probability will be remembered by the user at some future time, for each sample. The data sampler may store the data samples and parameter data as shared secret data for use in a future authentication session. During a future authentication session, an authentication device selects test data from the shared secret data to generate sensible output in an authentication process. The authentication process grants access to a controlled resource in response to user input indicating specific knowledge of the shared secret data selected from a presentation of similar sensible outputs.

Claims

1. A method comprising:

sampling digital data according to a sampling function operating on a computer from a data stream for generating visible output during one or more observation sessions between at least two network nodes, wherein the one or more observation sessions are conducted for a primary purpose other than image recognition training and are each initiated under a defined user account;

associating the sampled digital data stored on a computer-readable medium an identifier for the user account under which the one or more observation sessions are initiated;

authenticating access for a later session under the user account, in response to receiving input from a client indicating selection of sensible output generated from the sampled digital data from a challenge matrix comprising the sensible output generated from the sampled digital data and decoy digital data.

2. The method of claim 1, further comprising transmitting the sampled digital data and the decoy digital data configured for generating visible outputs to a client for authenticating the later session.

3. The method of claim 1, further comprising monitoring parameters of the one or more observation sessions to identify data for sampling according to the sampling function.

4. The method of claim 3, wherein the parameters characterize client input data received during output of each of the sampled digital data.

5. The method of claim 3, wherein the parameters characterize duration of output for each of the sampled digital data.

6. The method of claim 3, wherein the parameters include a time at which each of the sampled digital data is output from a client node.

7. The method of claim 3, further comprising storing parameter data from monitoring the parameters in association with the sampled digital data.

8. The method of claim 7, further comprising selecting the sampled digital data transmitted for use in the authentication session from a larger database of digital data samples, using the parameter data.

9. The method of claim 1, further comprising processing the sampled digital data to expunge data indicative of the user account.

10. The method of claim 9, wherein the processing comprises blurring textual data in the sampled digital data.

11. The method of claim 1, further comprising generating the decoy digital data to produce discrete sensible output resembling the sensible output sampled by the digital data.

12. The method of claim 1, further comprising generating the challenge matrix comprising multiple-choice questions enabling selection of the sensible output generated from the sampled digital data and sensible output generated from the decoy digital data.

13. The method of claim 1, wherein the one or more observation sessions are each a secure session.

14. The method of claim 1, further comprising obtaining a portion of the sampled digital data from a digital camera operated under the control of one of the at least two network nodes during the one or more observation sessions.

15. An apparatus comprising processor operating instructions, configured for causing a computer to:

sample a data stream for independently generating visible image output during one or more prior sessions with a client, thus producing data sampled according to a sampling function;

store the sampled data in a database in association with an identifier for an account under which the first session is operated; and

permit access for the subsequent session in response to receiving input indicating successful discrimination between the sensible output generated from the sampled data and sensible output generated from decoy data in a challenge matrix used to secure access to a subsequent session initiated under the account identifier

16. The apparatus of claim 15, the instructions further configured for causing the computer to transmit at least selected ones of the sampled data and decoy data configured for generating visible image outputs to a client, for use in the subsequent session.

17. The apparatus of claim 15, the instructions further configured for causing the computer to monitor parameters of the one or more prior sessions indicative of likelihood that the particular image output is receiving user attention at the client node.

18. The apparatus of claim 17, the instructions further configured for causing the computer to store parameter data from monitoring the parameters in association with the sampled data.

19. The apparatus of claim 17, the instructions further configured for causing the computer to select at least a selected one of the sampled data using the parameter data to increase likelihood that image output during presentation of the challenge matrix will be remembered by a client-side participant in the first session.

20. The apparatus of claim 15, the instructions further configured for causing the computer to identify and expunge data indicative of the account from the sampled data.

21. The apparatus of claim 15, the instructions further configured for causing the computer to generate reduced-size image facsimiles from the sampled data and decoy data for presentation in the challenge matrix.

22. A method comprising:

hosting, by at least one computer, a secure online process in which images are output at a client device in response to data from the hosting means;

sampling the data from the hosting independently of the secure online process to generate stored sample data sampled according to a sampling function and configured for replicating images output during the secure online process; and

presenting images generated from the stored sample data with decoy images to authenticate a client initiating a subsequent process.