Rhythm-based user authentication

• US 9,495,525 B2
• Filed: 02/18/2016
• Issued: 11/15/2016
• Est. Priority Date: 04/10/2014
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Grigg, David M., Starbuck, Richard Andrew, Hanson, Carrie Anne
• Primary Examiner(s): Brown, Christopher
• Assistant Examiner(s): Jackson, Jenise
• Application Number:
  US15/047,399
• Publication Number:
  US 20160162672A1
• Time in Patent Office: 271 Days
• Field of Search: 726/7
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

The present invention is directed to an apparatus, a method, and a computer program product for authenticating a user based on a sequence of rhythmic inputs. The user via a mobile device provides one or more inputs (e.g., pushing a button, tapping a touchscreen, a biometric, or the like) to one or more sensors associated with the mobile device as an attempt of authorization. The one or more inputs may be provided in a rhythmic manner (e.g., provided in time with music). The present invention then compares the provided one or more inputs to one or more predetermined sequences of inputs that are associated with positive authentication of the user (e.g., a known password). The phone determines that the one or more provided inputs match one or more predetermined rhythmic sequences associated with positive authentication of the user and authenticates the user.

Claims

1. A computer program product for authenticating a user based on a rhythmic pattern, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:

receive an indication from a user to execute an action associated with an online banking application;

determine that the action is associated with one or more actions that require user authentication;

initiate a presentation of a predetermined sequence of musical notes associated with the action, wherein the predetermined sequence of musical notes are played on a speaker associated with a wearable computing device;

receive via at least one sensor a plurality of rhythmic inputs from the user to match the sequence of musical notes associated with the action, wherein the plurality of rhythmic inputs are received using the wearable computing device, the wearable computing device comprising a sensor configured to sense the plurality of rhythmic inputs from the user, wherein the plurality of rhythmic inputs comprise a combination of input types, wherein the input types comprise one or more inputs associated with one or more sensors associated with the wearable computing device and one or more inputs by physically pressing one or more buttons associated with the wearable computing device;

process the plurality of rhythmic inputs, wherein processing the plurality of rhythmic inputs includes comparing the plurality of rhythmic inputs received using the wearable computing device to the predetermined sequence of musical notes played on the speaker associated with the wearable computing device to determine that the plurality of rhythmic inputs matches at least one predetermined rhythmic pattern associated with authentication of the user, wherein processing the plurality of rhythmic inputs comprises determining at least an input type, an input length, an input duration, an input time, a length of time between the plurality of rhythmic inputs, a rhythm, a tempo, a velocity, and a pitch;

authenticate the user in response to determining that the plurality of rhythmic inputs matches the predetermined sequence of musical notes played on the speaker associated with the wearable computing device, wherein determining further comprises determining at least a partial match between the plurality of rhythmic inputs and at least one predetermined rhythmic pattern, wherein determining a partial match provides partial authentication of the user; and

enable the user to execute the action based on at least authenticating the user.

2. The computer program product of claim 1, wherein the wearable computing device is at least one of a bracelet, a ring, a watch, glasses, jewelry, a pen, or a stylus.

3. The computer program product of claim 1, wherein the apparatus is at least one of a smart phone, a tablet, a laptop, a computer, a mobile device, a personal digital assistant (PDA), or a touch screen computer.

4. The computer program product of claim 3, wherein the at least one sensor is associated with at least one of a touchscreen, a button associated with the apparatus, an application associated with the apparatus, or an operating system associated with the apparatus.

5. The computer program product of claim 1, wherein the plurality of rhythmic inputs includes at least one of a gesture, a button push, a button slide, a button hold, a button tap, a touchscreen swipe, a touchscreen push, a touchscreen slide, a touchscreen tap, a touchscreen hold, a touchscreen swim, a mouse click, a scroll, a toggle, a selection, a zoom, a knock, a download, a biometric interaction, an upload, or an action.

6. The computer program product of claim 5, wherein the plurality of rhythmic inputs is received via the at least one sensor as a rhythmic sequence of inputs spaced out by the user over a predetermined period of time.

7. The computer program product of claim 1, wherein music is played only when headphones are coupled to the apparatus.

8. The computer program product of claim 1, wherein the at least one predetermined rhythmic pattern is configurable by the user.

9. The computer program product of claim 1, wherein the at least one predetermined rhythmic pattern is associated with authentication of more than one user.

10. The computer program product of claim 1, wherein authenticating the user includes executing an action, wherein the action is at least one of a gesture, a transaction, a viewing of a summary of information, a deposit, a withdrawal, a selection, a download, an upload, a zoom, a scroll, a click, or a slide.

11. The computer program product of claim 1 comprising denying authentication of the user based on determining that the plurality of rhythmic inputs does not at least partially match at least one predetermined rhythmic pattern, wherein denying authentication of the user prompts the user via an interface for reattempting authentication of the user.

12. The computer program product of claim 1, wherein at least one of the plurality of rhythmic inputs or the at least one predetermined rhythmic pattern includes a combination of different inputs.

13. The computer program product of claim 1, wherein determining if the plurality of rhythmic inputs matches at least one predetermined rhythmic pattern associated with authentication of the user includes determining a level of complexity associated with the plurality of rhythmic inputs, wherein the level of complexity associated with the plurality of rhythmic inputs corresponds to a level of user access.

14. The computer program product of claim 13, wherein a predeterminedly high level of complexity corresponds to a predeterminedly high level of user access and a predeterminedly low level of complexity corresponds to a predeterminedly low level of user access.

15. A method for authenticating a user based on a rhythmic pattern, the method comprising:

receiving an indication from a user to execute an action associated with an online banking application;

determining that the action is associated with one or more actions that require user authentication;

initiating a presentation of a predetermined sequence of musical notes associated with the action, wherein the predetermined sequence of musical notes are played on a speaker associated with a wearable computing device;

receiving via at least one sensor a plurality of rhythmic inputs from the user to match the sequence of musical notes associated with the action, wherein the plurality of rhythmic inputs are received using the wearable computing device, the wearable computing device comprising a sensor configured to sense the plurality of rhythmic inputs from the user, wherein the plurality of rhythmic inputs comprise a combination of input types, wherein the input types comprise one or more inputs associated with one or more sensors associated with the wearable computing device and one or more inputs by physically pressing one or more buttons associated with the wearable computing device;

processing the plurality of rhythmic inputs, wherein processing the plurality of rhythmic inputs includes comparing the plurality of rhythmic inputs received using the wearable computing device to the predetermined sequence of musical notes played on the speaker associated with the wearable computing device to determine that the plurality of rhythmic inputs matches at least one predetermined rhythmic pattern associated with authentication of the user, wherein processing the plurality of rhythmic inputs comprises determining at least an input type, an input length, an input duration, an input time, a length of time between the plurality of rhythmic inputs, a rhythm, a tempo, a velocity, and a pitch;

authenticating the user in response to determining that the plurality of rhythmic inputs matches the predetermined sequence of musical notes played on the speaker associated with the wearable computing device, wherein determining further comprises determining at least a partial match between the plurality of rhythmic inputs and at least one predetermined rhythmic pattern, wherein determining a partial match provides partial authentication of the user; and

enabling the user to execute the action based on at least authenticating the user.

16. The method of claim 15, wherein the wearable computing device is at least one of a bracelet, a ring, a watch, glasses, jewelry, a pen, or a stylus.

17. The method of claim 15, wherein the apparatus is at least one of a smart phone, a tablet, a laptop, a computer, a mobile device, a personal digital assistant (PDA), or a touch screen computer.

18. The method of claim 17, wherein the at least one sensor is associated with at least one of a touchscreen, a button associated with the apparatus, an application associated with the apparatus, or an operating system associated with the apparatus.

19. The method of claim 15, wherein the plurality of rhythmic inputs includes at least one of a gesture, a button push, a button slide, a button hold, a button tap, a touchscreen swipe, a touchscreen push, a touchscreen slide, a touchscreen tap, a touchscreen hold, a touchscreen swim, a mouse click, a scroll, a toggle, a selection, a zoom, a knock, a download, a biometric interaction, an upload, or an action.

20. The method of claim 19, wherein the plurality of rhythmic inputs is received via the at least one sensor as a rhythmic sequence of inputs spaced out by the user over a predetermined period of time.

21. The method of claim 15, wherein music is played only when headphones are coupled to the apparatus.

22. The method of claim 15, wherein the at least one predetermined rhythmic pattern is configurable by the user.

23. The method of claim 15, wherein the at least one predetermined rhythmic pattern is associated with authentication of more than one user.

24. The method of claim 15, wherein authenticating the user includes executing an action, wherein the action is at least one of a gesture, a transaction, a viewing of a summary of information, a deposit, a withdrawal, a selection, a download, an upload, a zoom, a scroll, a click, or a slide.

25. The method of claim 15 comprising denying authentication of the user based on determining that the plurality of rhythmic inputs does not at least partially match at least one predetermined rhythmic pattern, wherein denying authentication of the user prompts the user via an interface for reattempting authentication of the user.

26. The method of claim 15, wherein at least one of the plurality of rhythmic inputs or the at least one predetermined rhythmic pattern includes a combination of different inputs.

27. The method of claim 15, wherein determining if the plurality of rhythmic inputs matches at least one predetermined rhythmic pattern associated with authentication of the user includes determining a level of complexity associated with the plurality of rhythmic inputs, wherein the level of complexity associated with the plurality of rhythmic inputs corresponds to a level of user access.

28. The method of claim 27, wherein a predeterminedly high level of complexity corresponds to a predeterminedly high level of user access and a predeterminedly low level of complexity corresponds to a predeterminedly low level of user access.