Continuous user authentication

• US 9,444,825 B2
• Filed: 08/11/2014
• Issued: 09/13/2016
• Est. Priority Date: 08/11/2014
• Status: Expired due to Fees

• Current Assignee: Empire Technology Development LLC (Allied Inventors Management, LLC)
• Original Assignee: Empire Technology Development LLC (Allied Inventors Management, LLC)
• Inventors: Takano, Kosuke, Yoshida, Naofumi, Kurabayashi, Shuichi
• Primary Examiner(s): Shepperd, Eric W
• Application Number:
  US14/456,511
• Publication Number:
  US 20160044047A1
• Time in Patent Office: 764 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

Technologies are generally described for authenticating a user account. In some examples, a method performed under control of a server may include providing a communication service to an end device; receiving, from the end device, a text input, while providing the communication service; and authenticating a user account associated with the end device, based on the received text input, while providing the communication service.

Claims

1. A method performed under control of a server, comprising:

providing a communication service to an end device;

receiving, from the end device, a text character input, while providing the communication service, wherein the text character input includes a predictive text input or an auto correction text input;

authenticating a user account associated with the end device by comparing the received text character input to a stored text input history, while providing the communication service; and

identify the user account based on a positive result of the comparison of the received text character input to the stored text input history.

2. The method of claim 1, wherein the text character input includes at least a portion of a word input.

3. The method of claim 1, wherein the authenticating includes:

evaluating a likelihood of the user account being authenticated as being associated with the end device based on the received text character input and a text input history that has been accumulated in association with the user account in a database; and

determining whether the likelihood is smaller than a predefined threshold value,

wherein the method further comprises;

transmitting, to the end device, a request to transmit additional authentication information of the end device when the likelihood is determined to be smaller than the predefined threshold value.

4. The method of claim 3, wherein the additional authentication information of the end device includes at least one of a user identifier or a password.

5. The method of claim 1, further comprising:

determining whether the text character input corresponds to one of text input events, wherein a text input event may be any one of a text character input event, a predictive text input event, or an auto correction text input event; and

storing, in the database, the received text character input in association with the determined text input event, so as to generate the text input history.

6. The method of claim 5, wherein the storing includes at least one of:

storing a frequency of the text input event, when the determined text input event is the predictive text input event or the auto correction text input event, or storing a required time to receive the text input, when the determined text input event includes the text character input event.

7. The method of claim 6, wherein the authentication of the user account is further based on at least one of a type of the text input event, the frequency of the text input event or the required time to receive the text character input.

8. The method of claim 1, further comprising:

receiving, from the end device, information that identifies at least one of an operating system (OS) version of the end device or a browser version of a browser installed on the end device; and

updating an initial text input environment associated with the end device and hosted on the server, based on the received information.

9. A server, comprising:

a service transmitter configured to provide a communication service to an end device;

a receiver configured to receive, from the end device, a text character input, while the service transmitter is providing the communication service;

an initial text database configured to store an initial text input environment in association with the end device;

a history database configured to store a text input history in association with a user account associated with the end device;

an account authenticator configured to, while the service transmitter is providing the communication service, authenticate the user account associated with the end device, by comparing the received text character input to the text input history stored in the history database;

an input event detector configured to determine a type of a text input event to which the text character input received to the initial text database corresponds, wherein the input event detector includes;

a predictive text detector configured to detect a predictive text input event for the text character input received to the initial text database; and

an auto correction text detector configured to detect an auto correction text input event for the text character input received to the initial text database.

10. The server of claim 9, wherein the input event detector includes:

a word input detector configured to detect a word input event to which the text character input received to the initial text database corresponds.

11. The server of claim 9,

wherein the authenticator is configured to:

evaluate a likelihood of the user account, based on the received text character input and the text input history,

determine whether the likelihood is smaller than a predefined threshold value, and

transmit, to the end device, a request to transmit additional authentication information of the end device when the likelihood is determined to be smaller than the predefined threshold value.

12. The server of claim 9,

wherein the text character input is a word input, and

wherein the history database includes:

an input time database configured to store a required time for the receiver to receive the text character input.

13. The server of claim 9,

wherein the text character input is a predictive text input, and

wherein the history database includes:

a predictive text database configured to store a frequency of the text character input.

14. The server of claim 9,

wherein the text character input is an auto correction text input, and

wherein the history database includes:

an auto correction database configured to store a frequency of the text character input.

15. The server of claim 9, wherein the receiver is further configured to receive, from the end device, information that indicates at least one of an operating system (OS) version of the end device or a browser version of a browser installed on the end device,

wherein the initial text database is further configured to update the initial text input environment based on the received information.

16. A non-transitory computer-readable storage medium having stored thereon computer-executable instructions that, in response to execution, cause a server to perform operations, comprising:

providing a communication service to an end device;

receiving, from the end device, a text character input, while providing the communication service, wherein the text character input includes a predictive text input or an auto correction text input;

authenticating a user account associated with the end device by comparing the received text character input to a stored text input history, while providing the communication service; and

identify the user account based on a positive result of the comparison of the received text character input to the stored text input history.