Systems and methods for device based authentication

• US 9,743,279 B2
• Filed: 09/16/2014
• Issued: 08/22/2017
• Est. Priority Date: 09/16/2014
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Rachuri, Kiran K., Srinivasan, Vijay, Munguia-Tapia, Emmanuel
• Primary Examiner(s): Pham, Luu
• Assistant Examiner(s): MOHAMMADI, FAHIMEH M
• Application Number:
  US14/488,087
• Publication Number:
  US 20160080936A1
• Time in Patent Office: 1,071 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

In some embodiments, computer implemented methods, systems, and non-transitory computer readable media determine a first comparison value based on a first comparison between a first sensor signature associated with first set of sensor data of a first device in a first context and a second sensor signature associated with second set of sensor data of a second device. The first comparison is associated with a first authentication type. It is determined whether the first comparison value satisfies a first threshold. It is determined that a user should be authenticated on the second device based on satisfaction of the first threshold.

Claims

1. A system comprising:

at least one processor; and

a memory storing instructions that, when executed by the at least one processor, cause the system to perform;

retrieving a first sensor signature associated with first set of sensor data of a first device in a first context, wherein the first device is a wearable device worn by a user;

retrieving a second sensor signature associated with a second set of sensor data of a second device, wherein the second device is a mobile device;

performing a first comparison by comparing the first sensor signature with the second sensor signature;

determining a first comparison value based on the first comparison between a first sensor signature and the second sensor signature, wherein the sensor data relates to motion of the first device and the second device and is provided by at least one of a GPS sensor, an accelerometer, and a gyroscope;

determining whether the first comparison value satisfies a first threshold based upon a similarity between the first set of sensor data associated with the first context and the second set of sensor data;

determining the user should be authenticated on the second device based on satisfaction of the first threshold; and

providing a password to the second device to authenticate the user on the second device in response to satisfaction of the first threshold;

requesting a password for the second device when the first threshold is not satisfied;

comparing the password for the second device provided in response to the request with a known password;

updating the first threshold when it is determined that the password for the second device provided in response to the request for a password is correct; and

causing the user to be automatically logged off the second device in response to the user taking off the wearable device.

2. The system of claim 1, wherein the instructions cause the system to further perform:

determining a second comparison value based on a second comparison between the first sensor signature associated with the first set of sensor data of the first device and a third sensor signature associated with the first context, the second comparison associated with a second authentication type;

determining whether the second comparison value satisfies a second threshold;

determining that the user should be authenticated on the second device based on satisfaction of the second threshold.

3. The system of claim 2, wherein at least one of the first authentication type and the second authentication type is performed at least one of continuously or periodically.

4. The system of claim 2, wherein at least one of the first authentication type and the second authentication type is performed at irregular intervals.

5. The system of claim 2, wherein the instructions cause the system to further perform:

providing a password to the second device to authenticate the user on the second device in response to satisfaction of the second threshold.

6. The system of claim 2, wherein the instructions cause the system to further perform:

providing a command to the second device to log off the user from the second device when the second threshold is not satisfied.

7. The system of claim 2, wherein the instructions cause the system to further perform:

updating the second threshold based on the second comparison value.

8. The system of claim 1, wherein the instructions cause the system to further perform:

providing a command to the second device to log off the user from the second device when the first threshold is not satisfied.

9. The system of claim 1, wherein the instructions cause the system to further perform:

performing the first comparison.

10. The system of claim 1, wherein the instructions cause the system to further perform:

updating the first threshold based at least in part on the first comparison.

11. The system of claim 1, wherein the instructions cause the system to further perform:

determining a third comparison value based on a third comparison between the first sensor signature associated with the first set of sensor data of the first device in the first context and a third sensor signature associated with third set of sensor data of a third device, the third comparison associated with the first authentication type;

determining whether the third comparison value satisfies a third threshold;

determining that the user should be authenticated on the third device based on satisfaction of the third threshold.

12. The system of claim 1, wherein at least one of the first set of sensor data and the second set of sensor data is provided by at least one of a microphone, a galvanic skin response (GSR) sensor, a pressure sensor, a temperature sensor, a Wi-Fi radio, and a Bluetooth radio.

13. The system of claim 1, wherein the instructions cause the system to further perform:

receiving the second set of sensor data from the second device over a communications link including at least one of Wi-Fi, Bluetooth, and NFC.

14. The system of claim 1, wherein the instructions cause the system to further perform:

detecting that the user has worn the first device.

15. A method comprising:

retrieving a first sensor signature associated with first set of sensor data of a first device in a first context, wherein the first device is a wearable device worn by a user;

retrieving a second sensor signature associated with a second set of sensor data of a second device, wherein the second device is a mobile device;

performing a first comparison by comparing the first sensor signature with the second sensor signature;

determining, by a computing system, the first comparison value based on a first comparison between the first sensor signature and the second sensor signature, the first comparison associated with a first authentication type, wherein the sensor data relates to motion of the first device and the second device and is provided by at least one of a GPS sensor, an accelerometer, and a gyroscope;

determining whether the first comparison value satisfies a first threshold based upon a similarity between the first set of sensor data associated with the first context and the second set of sensor data;

determining that the user should be authenticated on the second device based on satisfaction of the first threshold;

providing a password to the second device to authenticate the user on the second device in response to satisfaction of the first threshold;

requesting a password for the second device when the first threshold is not satisfied;

comparing the password for the second device provided in response to the request with a known password;

updating the first threshold when it is determined that the password for the second device provided in response to the request for a password is correct; and

causing the user to be automatically logged off the second device in response to the user taking off the wearable device.

16. A non-transitory computer-readable storage medium including instructions that, when executed by at least one processor of a computing system, cause the computing system to perform:

retrieving a first sensor signature associated with first set of sensor data of a first device in a first context, wherein the first device is a wearable device worn by a user;

retrieving a second sensor signature associated with a second set of sensor data of a second device, wherein the second device is a mobile device;

performing a first comparison by comparing the first sensor signature with the second sensor signature;

determining a first comparison value based on the first comparison between the first sensor signature associated with the first set of sensor data of the first device in the first context and the second sensor signature associated with the second set of sensor data of the second device, the first comparison associated with a first authentication type, wherein the sensor data relates to motion of the first device and the second device and is provided by at least one of a GPS sensor, an accelerometer, and a gyroscope;

determining whether the first comparison value satisfies a first threshold based upon a similarity between the first set of sensor data associated with the first context and the second set of sensor data;

determining that the user should be authenticated on the second device based on satisfaction of the first threshold; and

providing a password to the second device without manual entry of the password to authenticate the user on the second device in response to satisfaction of the first threshold;

requesting a password for the second device when the first threshold is not satisfied;

comparing the password for the second device provided in response to the request with a known password;

updating the first threshold when it is determined that the password for the second device provided in response to the request for a password is correct; and

causing the user to be automatically logged off the second device in response to the user taking off the wearable device.