Temporal modification of authentication challenges

• US 9,699,179 B2
• Filed: 04/15/2015
• Issued: 07/04/2017
• Est. Priority Date: 11/25/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Arunkumar, Saritha, Pipes, Stephen D.
• Primary Examiner(s): Zoubair, Noura
• Application Number:
  US14/687,326
• Publication Number:
  US 20160149883A1
• Time in Patent Office: 811 Days
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles

Abstract

A method for authenticating a user of a computing device. The method includes a computer processor receiving an indication that a user of a computing device is accessing an object that utilizes an authentication process. The method further includes a computer processor selecting a first multi-media file that is associated with a user profile of the user and the object of the authentication process, wherein the first multi-media file is associated with a baseline user input authentication sequence. The method further includes creating a first temporal manipulation vector based on the user profile and a security requirement of the object of the authentication process, wherein the temporal manipulation vector modifies a presentation of a multi-media file and a corresponding time sequence of a user input authentication sequence in the multi-media file. The method further includes transmitting the first temporal manipulation vector and the first multi-media file to the computing device.

Claims

1. A method for authenticating a user of a computing device, the method comprising:

receiving, by one or more computer processors, an indication that a user of a computing device is accessing an object that utilizes an authentication process;

selecting, by one or more computer processors, a first multi-media file based on a user profile of the user and the object of the authentication process, wherein the first multi-media file is associated with a baseline time sequence of interactions of the user corresponding to an authentication sequence of one or more preselected events of the first multi-media file, and wherein the first multi-media file is supplied by the user;

creating, by one or more computer processors, a block of temporal manipulation vectors based, at least in part, on the user profile and a security requirement of the object of the authentication process, wherein a temporal manipulation vector, of the block of temporal manipulation vectors, modifies a presentation of a multi-media file by displacing one or more preselected events of a sequence of events within the multi-media file with respect to time;

transmitting, by one or more computer processors, the block of temporal manipulation vectors associated with the first multi-media file and the first multi-media file to the computing device;

authenticating, by one or more processors, the user based on input of the user interacting with the first multi-media file modified by at least one temporal manipulation vector selected from the block of temporal manipulation vectors; and

replacing, by one or more computer processors, the block of temporal manipulation vectors associated with the first multi-media file with an updated block of temporal manipulation vectors based on a percentage of unused temporal manipulation vectors of the block of temporal manipulation vectors and a duration of time elapsed since the creation of the block of temporal manipulation vectors.

2. The method of claim 1, further comprising:

receiving, by one or more computer processors, from the computing device, a time sequence of interactions of the user with respect to the presentation, modified by the temporal manipulation vector selected from the block of temporal manipulation vectors associated with the first multi-media file; and

comparing, by one or more computer processors, the received time sequence of interactions of the user with respect to the modified presentation of the first multi-media file to the baseline time sequence of interactions of the user corresponding to an authentication sequence of one or more preselected events of the first multi-media file to authenticate the user of the computing device.

3. The method of claim 2, wherein the received time sequence of interactions of the user comprises the user respectively reproducing one or more user interactions, with the computing device, for each of the one or more preselected events of the first multi-media file associated with the baseline time sequence of interactions of the user corresponding to the authentication sequence of one or more preselected events of the first multi-media.

4. The method of claim 1, further comprising:

creating, by one or more computer processors, the block of temporal manipulation vectors associated with a second multi-media file that is utilized by with the user for the authentication process to access another object, wherein the block of temporal manipulation vectors is comprised of at least two different temporal manipulation vectors;

assigning, by one or more computer processors, a respective unique identifier to each temporal manipulation vector selected from the block of temporal manipulation vectors;

associating, by one or more computer processors, the assigned unique identifiers of the temporal manipulation vectors to the second multi-media file that is associated with a user profile of the user and the other object of the authentication process; and

transmitting, by one or more computer processors, the set of temporal manipulation vectors and corresponding unique identifiers to the computing device.

5. The method of claim 1, further comprising:

receiving, by one or more computer processors, an indication that the user of the computing device is accessing the object that utilizes the authentication process;

selecting, by one or more computer processors, at random, a unique identifier corresponding to another temporal manipulation vector selected from the block of temporal manipulation vectors associated with the first multi-media file;

transmitting, by one or more computer processors, the randomly selected unique identifier corresponding to the other temporal manipulation vector selected from the block of temporal manipulation vectors associated with the first multi-media file and the first multi-media file to the computing device; and

receiving, by one or more computer processors, from the computing device, another time sequence of interactions of the user with respect to the presentation, modified by the other temporal manipulation vector, selected from the block of temporal manipulation vectors, corresponding to the randomly selected unique identifier.

6. The method of claim 1, further comprising:

preprocessing, by one or more computer processors, the first multi-media file as dictated by another temporal manipulation vector, wherein preprocessing creates a second multi-media file; and

transmitting, by one or more computer processors, a null temporal manipulation vector and the second multi-media file to the computing device.

7. The method of claim 2, wherein a time sequence of interactions of the user with respect to a multi-media file further includes:

one or more interactions of the user of the computing device with at least one input/output element of the computing device of the user for each preselected event within the multi-media file; and

a corresponding temporal reference for at least one of the one or more interactions of the user of the computing device with the at least one input/output element of the computing device of the user for each preselected event within the multi-media file.

8. The method of claim 2, further comprising:

normalizing, by one or more computer processors, the received time sequence of interactions of the user with respect to the first multi-media file, wherein normalizing comprises removing effects of the selected temporal manipulation vector from the received time sequence of interactions of the user with respect to the first multi-media file corresponding to the authentication sequence;

determining, by one or more computer processors, whether the time sequence of the normalized time sequence of interactions of the user with respect to the first multi-media file corresponding to the authentication sequence matches, within a predetermined threshold, the baseline time sequence of interactions of the user corresponding to an authentication sequence of one or more preselected events of the first multi-media file; and

in response to determining that the normalized time sequence of interactions of the user with respect to the first multi-media file matches, within a predetermined threshold, the baseline time sequence of interactions of the user corresponding to an authentication sequence of one or more preselected events of the first multi-media file, authenticating, by one or more computer processors, the user to access the object.