Authentication frequency and challenge type based on environmental and physiological properties

• US 8,978,117 B2
• Filed: 09/30/2008
• Issued: 03/10/2015
• Est. Priority Date: 11/19/2007
• Status: Active Grant

• Current Assignee: Arlington Technologies, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Avaya Incorporated
• Inventors: Bentley, Jon Louis, Erhart, George William, O'Gorman, Lawrence, Sammon, Michael J., Skiba, David Joseph
• Primary Examiner(s): LEE, JASON T
• Application Number:
  US12/241,584
• Publication Number:
  US 20090133106A1
• Time in Patent Office: 2,352 Days
• Field of Search: 726/5, 726/7, 705/2, 455/411
• US Class Current: 726/7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints

Abstract

An apparatus and method are disclosed for determining authentication frequency (i.e., the length of time between authenticating and re-authenticating a user) and challenge type (e.g., username/password, fingerprint recognition, voice recognition, etc.) based on one or more environmental properties (e.g., ambient noise level, ambient luminosity, temperature, etc.), or one or more physiological properties of a user (e.g., heart rate, blood pressure, etc.), or both. Advantageously, the illustrative embodiment enables authentication frequency and challenge type to be adjusted based on the likelihood of malicious activity, as inferred from these properties. In addition, the illustrative embodiment enables the authentication challenge type to be tailored to particular environmental conditions (e.g., noisy environments, dark environments, etc.).

Claims

1. A method comprising:

measuring an environmental property with an environmental sensor at a first time to yield a first environmental property measurement;

measuring the environmental property with the environmental sensor at a second time which is later than the first time to yield a second environmental property measurement;

generating, via a processor, an authentication challenge associated with a user gaining access to a computing device, wherein a type of the authentication challenge is selected from a plurality of types of authentication challenges based on a difference between the first environmental property measurement and the second environmental property measurement, wherein the type of the authentication challenge is based on a time difference between the first environmental property measurement and the second environmental property measurement; and

periodically presenting the authentication challenge to a user, where a correct response to the authentication challenge is required for the user to access the computing device.

2. The method of claim 1, wherein the environmental property is an ambient noise level.

3. The method of claim 1, wherein the environmental property is ambient luminosity.

4. The method of claim 1, wherein the environmental property is temperature.

5. A method comprising:

measuring, with a physiological sensor, a physiological property of a user at a first time to yield a first physiological property measurement;

measuring, with the physiological sensor, the physiological property of the user at a second time that is later than the first time to yield a second physiological property measurement;

generating, via a processor, an authentication challenge associated with a user gaining access to a computing device, wherein a type of the authentication challenge is selected from a plurality of types of authentication challenges based on a difference in the first physiological property measurement and the second physiological property measurement, and wherein the type of the authentication challenge is based on the physiological property at the first time and at the second time; and

periodically presenting the authentication challenge to the user.

6. The method of claim 5, wherein the physiological property is a respiration rate.

7. The method of claim 5, wherein the physiological property is body temperature.

8. The method of claim 5, wherein the physiological property is brain activity as measured by one of an electroencephalograph and an electromyograph.

9. A system comprising:

a processor; and

a computer-readable storage medium storing instructions which, when executed by the processor, cause the processor to perform operations comprising;

measuring, at a physiological sensor, a physiological property of a user at a first time to yield a first physiological property measurement;

measuring, at the physiological sensor, the physiological property of the user at a second time that is later than the first time to yield a second physiological property measurement;

generating an authentication challenge associated with the user gaining access to a computing device, wherein a type of the authentication challenge is selected from a plurality of types of authentication challenges based on a difference in the first physiological property measurement and the second physiological property measurement, and wherein the type of the authentication challenge is based on the physiological property at the first time and at the second time; and

periodically presenting the authentication challenge to the user.

10. The system of claim 9, wherein the physiological property is one of a respiration rate, body temperature, and a measure of brain activity as measured by one of an electroencephalograph and an electromyograph.