System and method for personalized security signature

• US 9,106,422 B2
• Filed: 12/11/2007
• Issued: 08/11/2015
• Est. Priority Date: 12/11/2006
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Varghese, Thomas Emmanual, Wong, Sirena, Durai, Don Bosco, Fisher, Jon Bryan, Kothanath, Arun
• Primary Examiner(s): Reza, Mohammad W
• Application Number:
  US12/001,586
• Publication Number:
  US 20080209526A1
• Time in Patent Office: 2,800 Days
• Field of Search: 726/5
• US Class Current: 1/1
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

Embodiments of the present invention provide techniques for authenticating users based on personalized (i.e., user-provided or user-selected) authentication data. In one set of embodiments, the personalized authentication data includes acoustic, image, and/or video data, but is exclusive of biometric data of the user. In this manner, existing acoustic, image, and video-based authentication interfaces/mechanisms may be leveraged, without the problems associated with verifying biometric data. In some embodiments, a user may enroll or register multiple pieces of personalized authentication data into an authentication system. The user may then select one piece of personalized authentication data for use by the system at a time of authentication.

Claims

1. A method performed by an authentication device having a hardware processor and a memory storing information associating first non-textual authentication data with an identity of a user, wherein the first non-textual authentication data is exclusive of biometric data identifying biometric characteristics inherent to the user, the method comprising:

receiving, by the authentication device, input authentication data from a client device of the user in response to a user authentication process by the authentication device that determines identity of the user of the client device;

comparing, by the authentication device, the input authentication data provided by the client device with the first non-textual authentication data stored in the memory; and

authenticating, by the authentication device, the user of the client device during the user authentication process based on the input authentication data matching the first non-textual authentication data.

2. The method of claim 1, wherein the first non-textual authentication data includes acoustic data.

3. The method of claim 2, wherein the acoustic data corresponds to a user-provided tone sequence or a user-provided audio clip.

4. The method of claim 1, wherein the first non-textual authentication data includes graphical data.

5. The method of claim 4, wherein the graphical data corresponds to a user-provided still image or a user-provided video clip.

6. The method of claim 1 further comprising:

storing the first non-textual authentication data in the memory during a user registration process by the authentication device with the user; and

retrieving the first non-textual authentication data from the memory at a time of authentication.

7. The method of claim 1, wherein authenticating the user is further based on one or more attributes of the client device.

8. The method of claim 1, wherein the client device is selected from a group consisting of a personal computer, a personal digital assistant (PDA), a smart card, a security token, and a mobile telephone.

9. The method of claim 1 further comprising:

receiving information associating second non-textual authentication data with the identity of the user, wherein the second non-textual authentication data is different from the first non-textual authentication data and is exclusive of biometric data identifying biometric characteristics inherent to the user; and

enabling selection of either the first non-textual authentication data or the second non-textual authentication data for use in authenticating the user.

10. The method of claim 1, further comprising:

receiving the first non-textual authentication data from the user during a registration process by the authentication device; and

registering the first non-textual authentication data with the identity of the user in a registration database.

11. The method of claim 10, wherein the first non-textual authentication data is received via a computer network.

12. The method of claim 11, wherein the computer network is the Internet.

13. The method of claim 10, wherein the first non-textual authentication data is received via a voice-based network.

14. The method of claim 1, wherein authenticating the user during the user authentication process based on the input authentication data matching the first non-textual authentication data comprises:

determining whether at least a portion of the input authentication data matches the first non-textual authentication data.

17. The method of claim 1 wherein the first non-textual authentication data does not include a representation of the user'"'"'s appearance or the user'"'"'s voice.

15. A system comprising:

a processor; and

a memory operatively coupled to the processor, the memory storing information associating first non-textual authentication data with an identity of a user, wherein the first non-textual authentication data is exclusive of biometric data identifying biometric characteristics inherent to the user, the memory further storing program instructions that, when executed by the processor, cause the processor to;

receive input authentication data from a client device of the user in response to a user authentication process by the processor that determines identity of the user of the client device;

compare the input authentication data provided by the client device with the first non-textual authentication data stored in the memory; and

authenticate the user of the client device during the user authentication process based on the input authentication data matching the first non-textual authentication data.

18. The system of claim 15 wherein the non-textual authentication data does not include a representation of the user'"'"'s appearance or the user'"'"'s voice.

16. A non-transitory machine-readable medium having stored thereon a series of instructions which, when executed by a hardware processing component of an authentication device, cause the processing component to facilitate user authentication by:

receiving information associating non-textual authentication data with an identity of a user, wherein the non-textual authentication data is exclusive of biometric data identifying biometric characteristics inherent to the user;

receiving input authentication data from a client device of the user in response to a user authentication process by the authentication device that determines identity of the user of the client device;

comparing the input authentication data provided by the client device with the first non-textual authentication data; and

authenticating the user of the client device during the user authentication process based on the input authentication data matching the non-textual authentication data.

19. The non-transitory machine-readable medium of claim 16 wherein the non-textual authentication data does not include a representation of the user'"'"'s appearance or the user'"'"'s voice.