User Authentication Using Scene Composed of Selected Objects

• US 20200134158A1
• Filed: 10/31/2018
• Published: 04/30/2020
• Est. Priority Date: 10/31/2018
• Status: Active Grant

• Current Assignee: RSA Security LLC (Symphony Technology Group LLC)
• Original Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Inventors: Mullins, Brian, Machani, Salah, Ng, Millie
• Granted Patent: US 10,949,524 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

User authentication techniques are provided using a scene composed of selected objects. An exemplary method comprises obtaining enrollment information from a user, wherein the enrollment information comprises a first scene comprised of a first selection of objects; initiating a challenge to the user in connection with an authentication request by the user to access a protected resource; processing a second scene comprised of a second selection of objects submitted by the user in response to the challenge, and wherein the processing comprises determining a likelihood that the submitted second scene comprised of the second selection of objects matches the first scene comprised of the first selection of objects submitted by the user with the enrollment information; and resolving the authentication request based on the likelihood. Objects in the first selection of objects are optionally selected from a catalog and arranged into the first scene.

Claims

1. A method, comprising:

obtaining enrollment information from a user, wherein the enrollment information comprises a first scene comprised of a first selection of objects;

initiating a challenge to the user in connection with an authentication request by the user to access a protected resource;

processing, using at least one processing device, a second scene comprised of a second selection of objects submitted by the user in response to the challenge, and wherein the processing comprises determining a likelihood that the submitted second scene comprised of the second selection of objects matches the first scene comprised of the first selection of objects submitted by the user with the enrollment information; and

resolving, using the at least one processing device, the authentication request based on the likelihood.

2. The method of claim 1, wherein the user provides the second scene using a virtual reality input device.

3. The method of claim 1, wherein the first selection of objects comprises one or more objects selected from a catalog and arranged into the first scene.

4. The method of claim 3, wherein one or more objects in the catalog expire according to an expiration policy.

5. The method of claim 1, wherein the first selection of objects comprises an avatar of the user arranged into the first scene.

6. The method of claim 1, wherein the first selection of objects comprises at least one object having a plurality of states and wherein a particular state of the plurality of states is selected for the at least one object.

7. The method of claim 1, wherein the first selection of objects comprises at least one non-visible object.

8. The method of claim 1, wherein the first scene comprises an image of an environment of the user and wherein the first selection of objects is arranged into the first scene of the environment of the user.

9. The method of claim 8, wherein the first selection of objects comprises one or more objects selected from a location dependent catalog.

10. The method of claim 1, wherein an entropy is established to satisfy a predefined policy by varying one or more of:

a size of an object catalog;

a number of objects selected in the first selection;

an ordering of the selected objects in the first selection;

a placement of the objects within the first selection;

a state of the one or more of the selected objects; and

a physical surrounding of the first scene.

11. A system, comprising:

a memory; and

at least one processing device, coupled to the memory, operative to implement the following steps;

obtaining enrollment information from a user, wherein the enrollment information comprises a first scene comprised of a first selection of objects;

initiating a challenge to the user in connection with an authentication request by the user to access a protected resource;

processing a second scene comprised of a second selection of objects submitted by the user in response to the challenge, and wherein the processing comprises determining a likelihood that the submitted second scene comprised of the second selection of objects matches the first scene comprised of the first selection of objects submitted by the user with the enrollment information; and

resolving the authentication request based on the likelihood.

12. The system of claim 11, wherein the first selection of objects comprises one or more objects selected from a catalog and arranged into the first scene.

13. The system of claim 11, wherein at least one object in the first scene has a plurality of states and wherein a particular state of the plurality of states is selected for the at least one object.

14. The system of claim 11, wherein the first scene comprises an image of an environment of the user and wherein the first selection of objects is arranged into the first scene of the environment of the user and wherein the first selection of objects comprises one or more objects selected from a location dependent catalog.

15. The system of claim 11, wherein an entropy is established to satisfy a predefined policy by varying one or more of:

a size of an object catalog;

a number of objects selected in the first selection;

an ordering of the selected objects in the first selection;

a placement of the objects within the first selection;

a state of the one or more of the selected objects; and

a physical surrounding of the first scene.

16. A computer program product, comprising a tangible machine-readable storage medium having encoded therein executable code of one or more software programs, wherein the one or more software programs when executed by at least one processing device perform the following steps:

obtaining enrollment information from a user, wherein the enrollment information comprises a first scene comprised of a first selection of objects;

initiating a challenge to the user in connection with an authentication request by the user to access a protected resource;

processing a second scene comprised of a second selection of objects submitted by the user in response to the challenge, and wherein the processing comprises determining a likelihood that the submitted second scene comprised of the second selection of objects matches the first scene comprised of the first selection of objects submitted by the user with the enrollment information; and

resolving the authentication request based on the likelihood.

17. The computer program product of claim 16, wherein the first selection of objects comprises one or more objects selected from a catalog and arranged into the first scene.

18. The computer program product of claim 16, wherein at least one object in the first scene has a plurality of states and wherein a particular state of the plurality of states is selected for the at least one object.

19. The computer program product of claim 16, wherein the first scene comprises an image of an environment of the user and wherein the first selection of objects is arranged into the first scene of the environment of the user and wherein the first selection of objects comprises one or more objects selected from a location dependent catalog.

20. The computer program product of claim 16, wherein an entropy is established to satisfy a predefined policy by varying one or more of:

a size of an object catalog;

a number of objects selected in the first selection;

an ordering of the selected objects in the first selection;

a placement of the objects within the first selection;

a state of the one or more of the selected objects; and

a physical surrounding of the first scene.