SYSTEM, DEVICE, AND METHOD OF VISUAL LOGIN AND STOCHASTIC CRYPTOGRAPHY

• US 20160371476A1
• Filed: 09/06/2016
• Published: 12/22/2016
• Est. Priority Date: 11/29/2010
• Status: Active Grant

• Current Assignee: Biocatch Ltd.
• Original Assignee: Biocatch Ltd.
• Inventors: Turgeman, Avi, Rivner, Uri
• Granted Patent: US 10,032,010 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: G06F 3/0486 Drag-and-drop
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: H04L 12/06 Answer-back mechanisms or circuits
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

Devices, systems, and methods of detecting user identity, differentiating between users of a computerized service, and detecting a possible attacker. A log-in process or a user-authentication process, is augmented or enriched by one or more incidental tasks, which force the user to perform additional on-screen interactions or input-unit interactions, which in turn enrich and augment the pool of user interactions from which the system extracts one or more user-specific features. The extracted user-specific features are used as part of the user authentication process, and are further used to differentiate among users.

Claims

1. A method comprising:

(a) generating an interactions-enriched log-in process for authenticating a user of an electronic device, by generating a log-in process that requires the user;

(i) to enter at least a password, and (ii) to perform an on-screen incidental task that enriches an ability of a user-interactions tracker to extract a user-specific feature from user interactions while performing said on-screen incidental task;

(b) tracking the user interactions while the user performs said on-screen incidental task of said interactions-enriched log-in process, and extracting from said user interactions a user-specific feature;

(c) determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches a pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from other interactions of said user.

2. The method of claim 1, wherein step (c) comprises:

determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches a pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

3. The method of claim 1, wherein step (c) comprises:

determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches a pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous usage sessions in which said user was already authenticated as a logged-in user.

4. The method of claim 1, wherein step (a) comprises:

generating said interactions-enriched log-in process which requires the user to perform an on-screen drag-and-drop operation;

extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen drag-and-drop operation of said interactions-enriched log-in process;

determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches the pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen drag-and-drop operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

5. The method of claim 1, wherein step (a) comprises:

generating said interactions-enriched log-in process which requires the user to perform a set of multiple on-screen drag-and-drop operations;

wherein step (b) comprises;

extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen drag-and-drop operation of said interactions-enriched log-in process, wherein the user-specific feature reflects at least an order in which said user chooses to perform said set of multiple on-screen drag-and-drop operations;

wherein step (c) comprises;

determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches the pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from the order in which the user performs said set of multiple on-screen drag-and-drop operations as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

6. The method of claim 1, wherein step (a) comprises:

generating said interactions-enriched log-in process which requires the user to perform an on-screen operation having an on-screen route that corresponds to at least a part of a circle;

wherein step (b) comprises;

extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen operation of said interactions-enriched log-in process;

wherein step (c) comprises;

determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches the pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

7. The method of claim 1, wherein step (a) comprises:

generating said interactions-enriched log-in process which requires the user to perform an on-screen operation having an on-screen route that corresponds to at least a part of a circle;

wherein step (b) comprises;

extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen operation of said interactions-enriched log-in process, wherein said user-specific feature indicates whether said user performs either (i) a clockwise movement to achieve said at least part of the circle, or (ii) a counter-clockwise movement to achieve said at least part of the circle;

wherein step (c) comprises;

determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches the pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

8. The method of claim 1, wherein step (a) comprises:

generating said interactions-enriched log-in process which requires the user to perform an on-screen task of drawing an on-screen shape;

wherein step (b) comprises;

extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen operation of said interactions-enriched log-in process, wherein said user-specific feature indicates whether said user performs either (i) a generally-clockwise movement to draw said on-screen shape, or (ii) a generally counter-clockwise movement to draw said on-screen shape;

wherein step (c) comprises;

determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches the pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

9. The method of claim 1, wherein step (a) comprises:

generating said interactions-enriched log-in process which requires the user to perform an on-screen task of drawing an on-screen shape;

wherein step (b) comprises;

extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen operation of said interactions-enriched log-in process, wherein said user-specific feature indicates whether said user performs either (i) a single on-screen stroke in which the user continuously draws an entirety of said on-screen shape without a non-drawing interaction, or (ii) a multiple-stroke interaction in which the user draws said on-screen shape by performing at least two separate input-unit strokes;

wherein step (c) comprises;

determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches the pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

10. The method of claim 1, wherein step (a) comprises:

generating said interactions-enriched log-in process which requires the user to perform an on-screen task of on-screen tracing of an on-screen shape;

wherein step (b) comprises;

extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen tracing of said on-screen shape as part of said interactions-enriched log-in process;

wherein step (c) comprises;

determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches the pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen tracing as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

11. The method of claim 1, wherein step (a) comprises:

generating said interactions-enriched log-in process which requires the user to perform on-screen hand-writing a pre-defined string of characters;

wherein step (b) comprises;

extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen hand-writing of said pre-defined string of characters;

wherein step (c) comprises;

determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches the pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen hand-writing of said pre-defined string of characters as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

12. The method of claim 1, wherein step (a) comprises:

generating said interactions-enriched log-in process which requires the user to perform an on-screen task of on-screen drawing using at least two fingers of the user on a touch-screen of an electronic device;

wherein step (b) comprises;

extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen drawing using at least two fingers as part of said interactions-enriched log-in process, wherein said user-specific feature reflects at least a user-specific feature that is extractable due to utilization of two fingers on said touch-screen and that is non-extractable from a corresponding on-screen interaction performed with a single finger;

wherein step (c) comprises;

determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches the pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen drawing using at least two fingers as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

13. The method of claim 1, comprising:

distinguishing between said user, and one or more other users, based on said user-specific feature that is extracted from said interactions-enriched log-in process.

14. The method of claim 1, comprising:

generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted.

15. The method of claim 1, comprising:

generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted;

wherein injecting the abnormality comprises;

causing an on-screen pointer to temporarily disappear during said interactions-enriched log-in process.

16. The method of claim 1, comprising:

generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted;

wherein injecting the abnormality comprises;

causing an on-screen graphical user interface (GUI) element to temporarily disappear during said interactions-enriched log-in process.

17. The method of claim 1, comprising:

generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted;

wherein injecting the abnormality comprises;

causing an on-screen pointer to perform an abnormal on-screen jump during said interactions-enriched log-in process, by causing said on-screen pointer to disappear from a first, regular, on-screen location thereof and to re-appear at a second, irregular, on-screen location.

18. The method of claim 1, comprising:

generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted;

wherein injecting the abnormality comprises;

causing an on-screen pointer that is being moved by the user via said input unit, to travel in a deviated on-screen route that deviates relative to a regular on-screen route of said on-screen pointer.

19. The method of claim 1, comprising:

generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted;

wherein injecting the abnormality comprises;

causing an on-screen pointer that is being moved by the user via said input unit, to travel at an irregular on-screen speed that is different from a regular on-screen speed of said on-screen pointer.

20. A system comprising at least a hardware processor which is configured to perform:

(a) generating an interactions-enriched log-in process for authenticating a user of an electronic device, by generating a log-in process that requires the user;

(i) to enter at least a password, and (ii) to perform an on-screen incidental task that enriches an ability of a user-interactions tracker to extract a user-specific feature from user interactions while performing said on-screen incidental task;

(b) tracking the user interactions while the user performs said on-screen incidental task of said interactions-enriched log-in process, and extracting from said user interactions a user-specific feature;

(c) determining that said user is authenticated, based on a combination of both;

(I) whether the password entered by the user matches a pre-defined reference password,

and also

(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from other interactions of said user.