TEMPORAL MODIFICATION OF AUTHENTICATION CHALLENGES

• US 20160149883A1
• Filed: 04/15/2015
• Published: 05/26/2016
• Est. Priority Date: 11/25/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Pipes, Stephen D., Arunkumar, Saritha
• Granted Patent: US 9,699,179 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles

Abstract

A method for authenticating a user of a computing device. The method includes a computer processor receiving an indication that a user of a computing device is accessing an object that utilizes an authentication process. The method further includes a computer processor selecting a first multi-media file that is associated with a user profile of the user and the object of the authentication process, wherein the first multi-media file is associated with a baseline user input authentication sequence. The method further includes creating a first temporal manipulation vector based on the user profile and a security requirement of the object of the authentication process, wherein the temporal manipulation vector modifies a presentation of a multi-media file and a corresponding time sequence of a user input authentication sequence in the multi-media file. The method further includes transmitting the first temporal manipulation vector and the first multi-media file to the computing device.

Claims

1. A method for authenticating a user of a computing device, the method comprising:

receiving, by one or more computer processors, an indication that a user of a computing device is accessing an object that utilizes an authentication process;

selecting, by one or more computer processors, a first multi-media file that is associated with a user profile of the user and the object of the authentication process, wherein the first multi-media file is associated with a baseline user input authentication sequence;

creating, by one or more computer processors, a first temporal manipulation vector based, at least in part, on the user profile and a security requirement of the object of the authentication process, wherein the temporal manipulation vector modifies a presentation of a multi-media file and a corresponding time sequence of a user input authentication sequence in the multi-media file; and

transmitting, by one or more computer processors, the first temporal manipulation vector and the first multi-media file to the computing device.

2. The method of claim 1, further comprising:

receiving, by one or more computer processors, an authentication sequence input by the user of the computing device;

normalizing, by one or more computer processors, the received authentication sequence, wherein normalizing comprises removing effects of the first temporal manipulation vector from the time sequence of the received authentication sequence;

determining, by one or more computer processors, whether the time sequence of the normalized authentication sequence substantially matches, within a predetermined threshold, the time sequence of the baseline user input authentication sequence of the first multi-media file; and

in response to determining that the time sequence of the received authentication sequence does substantially match, authenticating, by one or more computer processors, the user to access the object.

3. The method of claim 2, wherein the receiving of the authentication sequence input by the user of the computing device further comprises:

receiving, by one or more computer processors, user input in response to a presentation of the first multi-media file;

wherein the presentation is modified by the first temporal manipulation vector; and

wherein the received user input comprises the user respectively reproducing one or more user interactions associated with the baseline user input authentication sequence associated with the first multi-media file.

4. The method of claim 1, wherein the creating of the temporal manipulation vector further comprises:

creating, by one or more computer processors, a set of temporal manipulation vectors associated with the first multi-media file, wherein the set of temporal manipulation vectors is comprised of at least two different temporal manipulation vectors;

assigning, by one or more computer processors, a respective unique identifier to each temporal manipulation vector of the set of temporal manipulation vectors; and

associating, by one or more computer processors, the assigned unique identifiers to the first multi-media file that is associated with a user profile of the user and the object of the authentication process.

5. The method of claim 4, further comprising:

transmitting, by one or more computer processors, a unique identifier associated with the set of temporal manipulation vectors; and

in response to transmitting the unique identifier, identifying, by one or more computer processors, a second temporal manipulation vector within the set of temporal manipulation vectors based, at least in part, on the unique identifier.

6. The method of claim 1, further comprising:

transmitting, by one or more computer processors, a second temporal manipulation vector to the computing device, wherein transmitting occurs at a point in time that does not coincide with a second authentication; and

replacing, by one or more computer processors, the first temporal manipulation vector on the computing device with the second temporal manipulation vector.

7. The method of claim 1, further comprising:

modifying, by one or more computer processors, the first multi-media file as dictated by the first temporal manipulation vector, wherein modifying creates a second multi-media file; and

transmitting, by one or more computer processors, the second multi-media file to the computing device, wherein the second multi-media file is presented without further temporal manipulation on the computing device.