Allowing access to applications based on user handling measurements

• US 9,639,680 B2
• Filed: 11/12/2014
• Issued: 05/02/2017
• Est. Priority Date: 07/29/2014
• Status: Expired due to Fees

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Chandra, Deepak
• Primary Examiner(s): TURCHEN, JAMES R
• Application Number:
  US14/540,016
• Publication Number:
  US 20160034674A1
• Time in Patent Office: 902 Days
• CPC Class Codes: G06F 1/3215 Monitoring of peripheral devices
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2139 Recurrent verification
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data

Abstract

Authenticating users comprises a computing device that receives a manual authentication input of a user and initiates a first user session between the user and the user computing device. The device communicates a request for a first user authorization data from an authentication technology associated with the one or more computing devices and receives the first user authentication data. The user or the device terminates the first user session and subsequently receives an input of the user to initiate a second user session. The device communicates a request for second user authentication data from the authentication technology and compares the first user authentication data and the second user authentication data. The device identifies a match of one or more features of the first user authentication data and one or more features of the second user authentication data and authorizes the user to conduct the second user session.

Claims

1. A computer-implemented method to authenticate users via user handling of user computing devices, comprising:

receiving, by one or more computing devices, a manual authentication input via a user interface of the one or more computing devices, the manual authentication being configured to begin a first authenticated session with the one or more computing devices;

receiving, by the one or more computing devices, first user handling characteristics captured by a gyroscope and an accelerometer, the first user handling characteristics obtained by the gyroscope and the accelerometer during multiple instances of physical manipulation of the one or more computing devices over a period of time during the first authenticated session;

storing, by the one or more computing devices, the first user handling characteristics;

receiving, by the one or more computing devices, an input to end the first authenticated session;

ending, by the one or more computing devices, the first authenticated session;

receiving, by one or more computing devices, an input to begin a second authenticated session with the one or more computing devices;

receiving, by the one or more computing devices, second user handling characteristics captured by the gyroscope and the accelerometer, the second user handling characteristics obtained by the gyroscope and the accelerometer during physical manipulation of the one or more computing devices at a time after the first authentication session ended;

comparing, by the one or more computing devices, the first user handling characteristics to the second user handling characteristics;

generating, by the one or more computing devices, a user authentication rating based on a number of the first user handling characteristics and the second user handling characteristics that match based on the comparison of the first user handling characteristics to the second user handling characteristics; and

determining, by the one or more computing devices, one or more applications operating on the one or more computing devices to which access is allowed based on a comparison of the generated user authentication rating to a database of applications, the database comprising a particular user authentication rating required for access to each particular application in the database.

2. The method of claim 1, wherein a received user handling characteristic is an angle at which a user holds the one or more computing devices.

3. The method of claim 1, wherein a received user handling characteristic is an indication that a user is left-handed.

4. The method of claim 1, wherein a received user handling characteristic is an indication that the one or more computing devices have remained in a particular location since the first authentication session ended.

5. The method of claim 1, wherein a received user handling characteristic is an indication of movements of the one or more computing devices.

6. The method of claim 1, wherein access is not allowed to any functions of the one or more computing devices if at least one match is not identified.

7. The method of claim 1, wherein access is allowed access to all functions of the one or more computing devices if all of the first user handling characteristics and the second user handling characteristics match.

8. A computer program product, comprising:

a non-transitory computer-readable storage device having computer-readable computer-executable program instructions embodied thereon that when executed by one or more computing devices cause the computer to authenticate users via user handling of user computing devices, the computer-readable program instructions comprising;

computer-executable instructions to receive a manual authentication input via a user interface of the one or more computing devices, the manual authentication being configured to begin a first authenticated session with the one or more computing devices;

computer-executable instructions to receive first user handling characteristics captured by a gyroscope and an accelerometer, the first user handling characteristics obtained by the gyroscope and the accelerometer during multiple instances of physical manipulation of the one or more computing devices over a period of time during the first authenticated session;

computer-executable instructions to store the first user handling characteristics;

computer-executable instructions to receive an input to end the first authenticated session;

computer-executable instructions to end the first authenticated session;

computer-executable instructions to receive an input to begin a second authorized session with the one or more computing devices;

computer-executable instructions to receive second user handling characteristics captured by the gyroscope and the accelerometer, the second user handling characteristics obtained by the gyroscope and the accelerometer during physical manipulation of the one or more computing devices at a time after the first authentication session ended;

computer-executable instructions to compare the first user handling characteristics to the second user handling characteristics;

computer-executable instructions to generate a user authentication rating based on a plurality the first user handling characteristics and the second user handling characteristics that match based on the comparison of the first user handling characteristics to the second user handling characteristics; and

computer-readable instructions to determine one or more applications operating on the one or more computing devices to which access is allowed based on a comparison of the generated user authentication rating to a database of applications, the database comprising a particular user authentication rating required for access to each particular application in the database.

9. The computer program product of claim 8, wherein one of the one or more handling technologies is an accelerometer.

10. The computer program product of claim 8, wherein one of the one or more handling technologies is a gyroscope.

11. The computer program product of claim 8, wherein a received user handling characteristic is an angle at which a user holds the computer.

12. The computer program product of claim 8, wherein the computer-executable program instructions to determine comprise computer-readable program instructions to compare the identified match to a database of applications, the database comprising a list of applications to which the user is allowed access based on the identified match.

13. A system to authenticate users via user handling of user computing devices, comprising:

one or more computing devices comprising;

a storage device;

a user interface; and

a processor communicatively coupled to the storage device and the user interface, wherein the processor executes application code instructions that are stored in the storage device to cause the system to;

receive a manual authentication input via a user interface of the one or more computing devices, the manual authentication being configured to begin a first authentication session with the one or more computing devices;

receive first user handling characteristics captured by a gyroscope and an accelerometer, the first user handling characteristics obtained by the gyroscope and the accelerometer during multiple instances of physical manipulation of the one or more computing devices over a period of time during the first authentication session;

store the first user handling characteristics;

receive an input to end the first authentication session;

end the first authentication session;

receive an input to begin a second authentication session with the one or more computing devices;

receive second user handling characteristics captured by the gyroscope and the accelerometer, the second user handling characteristics obtained by the gyroscope and the accelerometer during physical manipulation of the one or more computing devices at a time after the first authentication session ended;

compare the first user handling characteristics to the second user handling characteristics;

generate a user authentication rating based on a plurality the first user handling characteristics and the second user handling characteristics that match based on a comparison of the first user handling characteristics to the second user handling characteristics; and

determine one or more applications operating on the one or more computing devices to which access is allowed based on a comparison of the generated user authentication rating to a database of applications, the database comprising a particular user authentication rating required for access to each particular application in the database.

14. The system of claim 13, wherein access is not allowed access to any functions of the storage device if at least one match is not identified.

15. The system of claim 13, wherein access is allowed access to all functions of the storage device if all of the first user handling characteristics and the second user handling characteristics match.