TEMPORAL MODIFICATION OF AUTHENTICATION CHALLENGES

• US 20160149902A1
• Filed: 11/25/2014
• Published: 05/26/2016
• Est. Priority Date: 11/25/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: ARUNKUMAR, SARITHA, Pipes, Stephen D.
• Granted Patent: US 9,699,178 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles

Abstract

A method for authenticating a user of a computing device. The method includes a computer processor receiving an indication that a user of a computing device is accessing an object that utilizes an authentication process. The method further includes a computer processor selecting a first multi-media file that is associated with a user profile of the user and the object of the authentication process, wherein the first multi-media file is associated with a baseline user input authentication sequence. The method further includes creating a first temporal manipulation vector based on the user profile and a security requirement of the object of the authentication process, wherein the temporal manipulation vector modifies a presentation of a multi-media file and a corresponding time sequence of a user input authentication sequence in the multi-media file. The method further includes transmitting the first temporal manipulation vector and the first multi-media file to the computing device.

Claims

1-7. -7. (canceled)

8. A computer program product for authenticating a user of a computing device, the computer program product comprising:

one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising;

program instructions to receive an indication that a user of a computing device is accessing an object that utilizes an authentication process;

program instructions to select a first multi-media file that is associated with a user profile of the user and the object of the authentication process, wherein the first multi-media file is associated with a baseline user input authentication sequence;

program instructions to create a first temporal manipulation vector based, at least in part, on the user profile and a security requirement of the object of the authentication process, wherein the temporal manipulation vector modifies a presentation of a multi-media file and a corresponding time sequence of a user input authentication sequence in the multi-media file; and

program instructions to transmit the first temporal manipulation vector and the first multi-media file to the computing device.

9. The computer program product of claim 8, further comprising:

program instructions to receive an authentication sequence input by the user of the computing device;

program instructions to normalize the received authentication sequence, wherein normalizing comprises removing effects of the first temporal manipulation vector from the time sequence of the received authentication sequence;

program instructions to determine whether the time sequence of the normalized authentication sequence substantially matches, within a predetermined threshold, the time sequence of the baseline user input authentication sequence of the first multi-media file; and

program instructions to respond to a determination that the time sequence of the received authentication sequence does substantially match program instructions to authenticate the user to access the object.

10. The computer program product of claim 9, wherein the receiving of the authentication sequence input by the user of the computing device further comprises:

program instructions to receive user input in response to a presentation of the first multi-media file;

wherein the presentation is modified by the first temporal manipulation vector; and

wherein the received user input comprises the user respectively reproducing one or more user interactions associated with the baseline user input authentication sequence associated with the first multi-media file.

11. The computer program product of claim 8, wherein the creating of the temporal manipulation vector further comprises:

program instructions to create a set of temporal manipulation vectors associated with the first multi-media file, wherein the set of temporal manipulation vectors is comprised of at least two different temporal manipulation vectors;

program instructions to assign a respective unique identifier to each temporal manipulation vector of the set of temporal manipulation vectors; and

program instructions to associate the assigned unique identifiers to the first multi-media file that is associated with a user profile of the user and the object of the authentication process.

12. The computer program product of claim 11, further comprising:

program instructions to transmit unique identifier associated with the set of temporal manipulation vectors; and

program instructions to respond to transmitting the unique identifier by identifying a second temporal manipulation vector within the set of temporal manipulation vectors based, at least in part, on the unique identifier.

13. The computer program product of claim 8, further comprising:

program instructions to transmit a second temporal manipulation vector to the computing device, wherein transmitting occurs at a point in time that does not coincide with a second authentication; and

program instructions to replace the first temporal manipulation vector on the computing device with the second temporal manipulation vector.

14. The computer program product of claim 8, further comprising:

program instructions to modify the first multi-media file as dictated by the first temporal manipulation vector, wherein modifying creates a second multi-media file; and

program instructions to transmit the second multi-media file to the computing device, wherein the second multi-media file is presented without further temporal manipulation on the computing device.

15. A computer system for authenticating a user of a computing device, the computer system comprising:

one or more computer processors;

one or more computer readable storage media;

program instructions stored on the computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising;

program instructions to receive an indication that a user of a computing device is accessing an object that utilizes an authentication process;

program instructions to select a first multi-media file that is associated with a user profile of the user and the object of the authentication process, wherein the first multi-media file is associated with a baseline user input authentication sequence;

program instructions to create a first temporal manipulation vector based, at least in part, on the user profile and a security requirement of the object of the authentication process, wherein the temporal manipulation vector modifies a presentation of a multi-media file and a corresponding time sequence of a user input authentication sequence in the multi-media file; and

program instructions to transmit the first temporal manipulation vector and the first multi-media file to the computing device.

16. The computer system of claim 15, further comprising:

program instructions to receive an authentication sequence input by the user of the computing device;

program instructions to normalize the received authentication sequence, wherein normalizing comprises removing effects of the first temporal manipulation vector from the time sequence of the received authentication sequence;

program instructions to determine whether the time sequence of the normalized authentication sequence substantially matches, within a predetermined threshold, the time sequence of the baseline user input authentication sequence of the first multi-media file; and

program instructions to respond to a determination that the time sequence of the received authentication sequence does substantially match program instructions to authenticate the user to access the object.

17. The computer system of claim 15, wherein the receiving of the authentication sequence input by the user of the computing device further comprises:

program instructions to receive user input in response to a presentation of the first multi-media file;

wherein the presentation is modified by the first temporal manipulation vector; and

wherein the received user input comprises the user respectively reproducing one or more user interactions associated with the baseline user input authentication sequence associated with the first multi-media file.

18. The computer system of claim 15, wherein the creating of the temporal manipulation vector further comprises:

program instructions to create a set of temporal manipulation vectors associated with the first multi-media file, wherein the set of temporal manipulation vectors is comprised of at least two different temporal manipulation vectors;

program instructions to assign a respective unique identifier to each temporal manipulation vector of the set of temporal manipulation vectors; and

program instructions to associate the assigned unique identifiers to the first multi-media file that is associated with a user profile of the user and the object of the authentication process.

19. The computer system of claim 18, further comprising:

program instructions to transmit unique identifier associated with the set of temporal manipulation vectors; and

program instructions to respond to transmitting the unique identifier by identifying a second temporal manipulation vector within the set of temporal manipulation vectors based, at least in part, on the unique identifier.

20. The computer program product of claim 15, further comprising:

program instructions to transmit a second temporal manipulation vector to the computing device, wherein transmitting occurs at a point in time that does not coincide with a second authentication; and

program instructions to replace the first temporal manipulation vector on the computing device with the second temporal manipulation vector.