Motion-detecting device user authentication

• US 8,522,037 B1
• Filed: 01/06/2012
• Issued: 08/27/2013
• Est. Priority Date: 12/29/2008
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Shnowske, Daniel P., Treadwell, William, Inskeep, Todd Keith, Mele, Helene Urban
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): JACKSON, JENISE E
• Application Number:
  US13/345,434
• Time in Patent Office: 599 Days
• Field of Search: 380/251, 713/183, 463/29, 725/10, 725/16
• US Class Current: 713/183
• CPC Class Codes: A63F 13/71 using secure communication between game devices and game servers, e.g. by encrypting game data or authenticating players
• CPC Class Codes: A63F 2300/105 using inertial sensors, e.g. accelerometers, gyroscopes
• CPC Class Codes: A63F 2300/401 Secure communication, e.g. using encryption or authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2109 Game systems
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07F 17/32 for games, toys, sports, or amusements
• CPC Class Codes: G07F 17/3255 Incentive, loyalty and/or promotion schemes, e.g. comps, gaming associated with a purchase, gaming funded by advertisements

Abstract

Systems, methods, and computer program products are provided for user authentication required for conducting online financial institution transactions. The disclosed embodiments leverage the capabilities of platforms other than conventional personal computers and laptops, such as gaming consoles and wireless devices. Unique intrinsic user activities, such as controller motions or activities, built-in hardware signatures or other input data are used as the authentication mechanism, so as to provide a higher degree of security in the overall authentication process by lessening the likelihood of password replication or interception during network communication.

Claims

1. A method for user authentication, the method comprising:

receiving, at a gaming console, a gaming console-specific user authentication input, wherein the gaming console-specific user authentication is a pre-determined motion to a motion-sensing game controller;

converting the gaming console-specific user authentication input to a numeric value;

applying one of a private-key encryption routine or a public-key encryption routine to the numeric value to create a password;

applying a hash algorithm to the password to create a hashed password;

communicating the hashed password to a the network entity; and

receiving verification of user authentication based on password verification at the network entity.

2. The method of claim 1, wherein receiving the gaming console-specific user authentication input further comprises receiving the gaming console-specific user authentication input for authentication of a user of a gaming-console-based financial institution application.

3. The method of claim 1, wherein converting the gaming console-specific user authentication input to a numeric value further comprises converting a plurality of dimensional vectors and a time vector associated with the pre-determined motion to a numeric value.

4. A method for user authentication, the method comprising:

receiving, at a motion-detecting device, a user authentication input that comprises a user-configured pre-determined motion to the device;

converting, at the motion-detecting device, the user authentication input to a numeric value, wherein the numeric value represents one or more vectors;

applying, at the motion-sensing device, an encryption routine to the numeric value to create a password;

communicating, from the motion-detecting device, the password to a network entity; and

receiving, at the motion-detecting device, verification of user authorization based on password verification at the network entity.

5. The method of claim 4, wherein receiving the user authentication input further comprises receiving the user authentication input for authentication of a user of a financial institution application.

6. The method of claim 4, wherein converting the user authentication input to the numeric value further comprises converting a plurality of dimensional vectors and a time vector associated with the user-configured pre-determined motion to the numeric value.

7. The method of claim 4, wherein applying the encryption routine to the numeric value further comprises applying a private-key encryption scheme to the numeric value to create the password.

8. The method of claim 4, wherein applying the encryption routine to the numeric value further comprises applying a public-key encryption scheme to the numeric value to create the password.

9. The method of claim 4, further comprising applying a hash algorithm to the password prior to communicating the password to the network entity.

10. A system for authenticating a user, the system comprising:

a motion-detecting device including a computing platform having at least one processor and a memory in communication with the processor; and

an application operable to be loaded into the memory of the motion-detecting device and executed on the device, wherein the application includes;

a user authentication routine operable to (1) receive a user authentication input that comprises a user-configured pre-determined motion to the device, (2) convert the user authentication input to a numeric value, wherein the numeric value represents one or more vectors, (3) apply an encryption routine to the numeric value to create a password, (4) communicate the password to a network entity and (5) receive verification of user authorization based on password verification at the network entity.

11. The system of claim 10, wherein the application is further defined as an online financial customer service application.

12. The system of claim 10, wherein the user authentication routine is further operable to convert a plurality of dimensional vectors and a time vector associated with the user-configured pre-determined motion to the numeric value.

13. The system of claim 10, wherein the user authentication routine is further operable to apply one of a private-key encryption routine or public-key encryption routine to the numeric value to create the password.

14. The system of claim 10, wherein the user authentication routine is further operable to apply a hash algorithm to the password prior to communicating the password to the network entity.

15. A computer program product, comprising:

a non-transitory computer-readable medium comprising;

a first set of codes for causing a motion-detecting device to receive a user authentication input that comprises a user-configured pre-determined motion to the device;

a second set of codes for causing the motion-detecting device to convert the user authentication input to a numeric value, wherein the numeric value represents one or more vectors;

a third set of codes for causing the motion-detecting device to apply an encryption routine to the numeric value to create a password;

a fourth set of codes for causing the motion-detecting device to communicate the password to a network entity; and

a fifth set of codes for causing the motion-detecting device to receive verification of user authentication based on password verification at the network entity.

16. The computer program product of claim 15, wherein the first set of codes further comprises the first set of codes for causing the motion-detecting device to receive the user authentication input for an online financial institution service application.

17. The computer program product of claim 15, wherein the second set of codes further comprises the second set of codes for causing the motion-detecting device to convert a plurality of dimensional vectors and a time vector associated with the pre-determined motion to the numeric value.

18. The computer program product of claim 15, wherein the third set of codes further comprises the third set of codes for causing the motion-detecting device to apply a private key encryption routine to the numeric value to create the password.

19. The computer program product of claim 15, wherein the third set of codes further comprises the third set of codes for causing the motion-detecting device to apply a public-key encryption routine to the numeric value to create the password.

20. The computer program product of claim 15, further comprising a sixth set of codes for causing the motion-detecting device to apply a hash algorithm to the password prior to communicating the password to the network entity.