USER AUTHENTICATION VIA DEVICE CHARACTERISTICS

• US 20180083963A1
• Filed: 09/20/2016
• Published: 03/22/2018
• Est. Priority Date: 09/20/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Devdas, Bharat, Kulkarni, Srihari
• Granted Patent: US 10,581,846 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities
• CPC Class Codes: H04W 8/24 Transfer of terminal data

Abstract

An embodiment of the invention may include a method, computer program product and system for authenticating a user device. The embodiment may include receiving a plurality of device parameter from a user device. The embodiment may include selecting a user profile having a plurality of user profile characteristics based on determining a match between at least one device characteristic of the plurality of device characteristics with at least one user profile characteristic of the plurality of user profile characteristics. The embodiment may include determining whether a device parameter from the plurality of device characteristics of the user device matches a user profile parameter of the plurality of user profile characteristics. The embodiment may include increasing a device value based on determining that the device parameter matches the user profile parameter. The embodiment may include authenticating the user device based on determining that the device value is above a threshold value.

Claims

1. A method for authenticating a device, the method comprising:

receiving a plurality of device parameter from a user device;

selecting a user profile having a plurality of user profile characteristics from a device database based on determining a match between at least one device characteristic of the plurality of device characteristics with at least one user profile characteristic of the plurality of user profile characteristics;

determining whether a device parameter from the plurality of device characteristics of the user device matches a user profile parameter of the plurality of user profile characteristics;

based on determining that the device parameter matches the user profile parameter, increasing a device value; and

authenticating the user device based on determining that the device value is above a threshold value.

2. The method of claim 1, wherein increasing the device value comprises:

assigning a weight to each of the plurality of device characteristics; and

based on determining that the device parameter from the plurality of device characteristics matches the user profile parameter of the plurality of user profile characteristics, increasing the device value based on the weight assigned to the device parameter.

3. The method of claim 1, wherein the device parameter comprises at least one element from the group consisting of:

a device ID based on an operating system of the device, an IMEI number, a battery serial number, and a hardware identification number.

4. The method of claim 1 further comprising:

receiving a dynamic device parameter from the user device and a dynamic profile parameter from the device database;

determining whether there is anomalous behavior based on the similarities between the dynamic device parameter and the dynamic profile parameter; and

authenticating the user device based on determining that the device value is above an anomalous threshold value and based on determining that there is no anomalous behavior.

5. The method of claim 4, wherein the dynamic device parameter comprises at least one element from the group consisting of:

a geographic location, a MAC address, and a cell tower location.

6. The method of claim 4, wherein determining whether there is anomalous behavior comprises determining a difference between the dynamic device parameter and the dynamic profile parameter is above a threshold value.

7. The method of claim 1, further comprising:

determining a new device parameter from the plurality of device parameter, wherein the new device parameter is one of the plurality of device characteristics that does not match one of the plurality of user profile characteristics; and

based on authenticating the user device, updating the device database with the new device parameter.

8. A computer program product for authenticating a device, the computer program product comprising:

one or more computer-readable storage devices and program instructions stored on at least one of the one or more tangible storage devices, the program instructions comprising;

program instructions to receive a plurality of device parameter from a user device;

program instructions to select a user profile having a plurality of user profile characteristics from a device database based on determining a match between at least one device characteristic of the plurality of device characteristics with at least one user profile characteristic of the plurality of user profile characteristics;

program instructions to determine whether a device parameter from the plurality of device characteristics of the user device matches a user profile parameter of the plurality of user profile characteristics;

based on determining that the device parameter matches the user profile parameter, program instructions to increase a device value; and

program instructions to authenticate the user device based on determining that the device value is above a threshold value.

9. The computer program product of claim 8, wherein increasing the device value comprises:

program instructions to assign a weight to each of the plurality of device characteristics; and

based on determining that the device parameter from the plurality of device characteristics matches the user profile parameter of the plurality of user profile characteristics, program instructions to increase the device value based on the weight assigned to the device parameter.

10. The computer program product of claim 8, wherein the device parameter comprises at least one element from the group consisting of:

a device ID based on an operating system of the device, an IMEI number, a battery serial number, and a hardware identification number.

11. The computer program product of claim 8 further comprising:

program instructions to receive a dynamic device parameter from the user device and a dynamic profile parameter from the device database;

program instructions to determine whether there is anomalous behavior based on the similarities between the dynamic device parameter and the dynamic profile parameter; and

program instructions to authenticate the user device based on determining that the device value is above an anomalous threshold value and based on determining that there is no anomalous behavior.

12. The computer program product of claim 11, wherein the dynamic device parameter comprises at least one element from the group consisting of:

a geographic location, a MAC address, and a cell tower location.

13. The computer program product of claim 11, wherein determining whether there is anomalous behavior comprises determining a difference between the dynamic device parameter and the dynamic profile parameter is above a threshold value.

14. The computer program product of claim 8, further comprising:

program instructions to determine a new device parameter from the plurality of device parameter, wherein the new device parameter is one of the plurality of device characteristics that does not match one of the plurality of user profile characteristics; and

based on authenticating the user device, program instructions to update the device database with the new device parameter.

15. A computer system for authenticating a device, the computer system comprising:

one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage devices, and program instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the program instructions comprising;

program instructions to receive a plurality of device parameter from a user device;

program instructions to select a user profile having a plurality of user profile characteristics from a device database based on determining a match between at least one device characteristic of the plurality of device characteristics with at least one user profile characteristic of the plurality of user profile characteristics;

program instructions to determine whether a device parameter from the plurality of device characteristics of the user device matches a user profile parameter of the plurality of user profile characteristics;

based on determining that the device parameter matches the user profile parameter, program instructions to increase a device value; and

program instructions to authenticate the user device based on determining that the device value is above a threshold value.

16. The computer system of claim 15, wherein increasing the device value comprises:

program instructions to assign a weight to each of the plurality of device characteristics; and

based on determining that the device parameter from the plurality of device characteristics matches the user profile parameter of the plurality of user profile characteristics, program instructions to increase the device value based on the weight assigned to the device parameter.

17. The computer system of claim 15, wherein the device parameter comprises at least one element from the group consisting of:

a device ID based on an operating system of the device, an IMEI number, a battery serial number, and a hardware identification number.

18. The computer system of claim 15 further comprising:

program instructions to receive a dynamic device parameter from the user device and a dynamic profile parameter from the device database;

program instructions to determine whether there is anomalous behavior based on the similarities between the dynamic device parameter and the dynamic profile parameter; and

program instructions to authenticate the user device based on determining that the device value is above an anomalous threshold value and based on determining that there is no anomalous behavior.

19. The computer system of claim 18, wherein determining whether there is anomalous behavior comprises determining a difference between the dynamic device parameter and the dynamic profile parameter is above a threshold value.

20. The computer system of claim 15, further comprising:

program instructions to determine a new device parameter from the plurality of device parameter, wherein the new device parameter is one of the plurality of device characteristics that does not match one of the plurality of user profile characteristics; and

based on authenticating the user device, program instructions to update the device database with the new device parameter.