Systems and methods for authenticating users

• US 9,817,958 B1
• Filed: 08/25/2015
• Issued: 11/14/2017
• Est. Priority Date: 08/25/2015
• Status: Active Grant

• Current Assignee: Gen Digital Inc.
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: McCorkendale, Bruce
• Primary Examiner(s): Pham, Luu
• Assistant Examiner(s): Jackson, Jenise
• Application Number:
  US14/834,949
• Time in Patent Office: 812 Days
• Field of Search: 726 1
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The disclosed computer-implemented method for authenticating users may include (1) identifying at least one digital device with which a user interacts, (2) gathering information about how the user interacts with the digital device, (3) generating, based on the gathered information, an authentication protocol for authenticating the user, and (4) using the authentication protocol to authenticate the user. Various other methods, systems, and computer-readable media are also disclosed.

Claims

1. A computer-implemented method for authenticating users, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

identifying a constellation of digital devices with which a user interacts by monitoring, via a router that directs traffic on a network connected to the constellation of digital devices, network traffic generated by the constellation of digital devices, wherein the constellation of digital devices comprises a constellation of smart-home appliances;

creating a digital fingerprint for the user that is based on the constellation of digital devices;

generating an authentication protocol for authenticating the user by creating a policy that prescribes authenticating the user if a current digital environment of the user matches the digital fingerprint based on at least one of;

a threshold number of digital devices within the current digital environment of the user matching digital devices included within the digital fingerprint; and

a threshold percentage of the digital devices within the current digital environment of the user matching the digital devices included within the digital fingerprint; and

using the authentication protocol to authenticate the user.

2. The computer-implemented method of claim 1, wherein the constellation of digital devices comprises at least one of:

a computing device;

a smart appliance; and

a sensing device.

3. The computer-implemented method of claim 1, wherein the digital devices within the current digital environment of the user comprise at least one of:

a device used by the user at a current moment in time;

a device connected to a network of the user at the current moment in time; and

a device connected to a device of the user at the current moment in time.

4. The computer-implemented method of claim 1, wherein the digital fingerprint encompasses at least one of:

an association between digital devices within the constellation of digital devices;

network data generated by at least one digital device within the constellation of digital devices;

connectivity patterns of the user;

log-in patterns of the user; and

digital content accessed by the user.

5. The computer-implemented method of claim 1, wherein the router comprises a smart router.

6. The computer-implemented method of claim 1, wherein using the authentication protocol to authenticate the user comprises automatically authenticating the user based on the current digital environment of the user matching the digital fingerprint without requiring the user to manually input authenticating information.

7. The computer-implemented method of claim 1, wherein identifying the constellation of digital devices comprises:

identifying a primary digital device of the user;

identifying a networking device to which the primary digital device is connected; and

identifying additional devices that are supported by the networking device, wherein the constellation of digital devices comprises the primary digital device of the user and the additional devices.

8. The computer-implemented method of claim 1, wherein using the authentication protocol comprises at least one of:

using the authentication protocol as part of, and/or providing the authentication protocol to, an identity service; and

using the authentication protocol as part of, and/or providing the authentication protocol to, an online service.

9. The computer-implemented method of claim 1, wherein using the authentication protocol to authenticate the user comprises determining that the current digital environment of the user matches the digital fingerprint based further on at least one of:

a certain number of associations between the digital devices within the current digital environment of the user matching associations included in the digital fingerprint;

a certain percentage of associations between the digital devices within the current digital environment of the user matching associations included in the digital fingerprint;

current usage patterns of the user matching usage patterns included in the digital fingerprint;

network data generated by at least one digital device within the current digital environment of the user matching network data generated by at least one digital device within the constellation of digital devices;

current connectivity patterns of the user matching connectivity patterns included in the digital fingerprint;

a current log-in pattern of the user matching log-in patterns included in the digital fingerprint; and

digital content accessed by a digital device in the current digital environment of the user matching digital content included in the digital fingerprint.

10. The computer-implemented method of claim 1, wherein the constellation of digital devices comprises:

a computing device; and

an ancillary device that works in tandem with the computing device.

11. The computer-implemented method of claim 10, wherein the ancillary device comprises a Bluetooth device that is used in connection with the computing device.

12. The computer-implemented method of claim 1, wherein the digital fingerprint is further based on at least one of:

network activity of the user; and

the location of at least one of the digital devices within the constellation of digital devices.

13. A system for authenticating users, the system comprising:

an identification module, stored in memory, that identifies a constellation of digital devices with which a user interacts by monitoring, via a router that directs traffic on a network connected to the constellation of digital devices, network traffic generated by the constellation of digital devices, wherein the constellation of digital devices comprises a constellation of smart-home appliances;

a generation module, stored in memory, that;

creates a digital fingerprint for the user that is based on the constellation of digital devices; and

generates an authentication protocol for authenticating the user by creating a policy that prescribes authenticating the user if a current digital environment of the user matches the digital fingerprint based on at least one of;

a threshold number of digital devices within the current digital environment of the user matching digital devices included within the digital fingerprint; and

a threshold percentage of the digital devices within the current digital environment of the user matching the digital devices included within the digital fingerprint;

an using module, stored in memory, that uses the authentication protocol to authenticate the user; and

at least one physical processor configured to execute the identification module, the generation module, and the using module.

14. The system of claim 13, wherein the constellation of digital devices comprises at least one of:

a computing device;

a smart appliance; and

a sensing device.

15. The system of claim 13, wherein the identification module identifies the constellation of digital devices by identifying digital devices within the constellation of digital devices based on one or more device characteristics, the one or more device characteristics comprising:

a MAC address;

an IP address;

a manufacturer name;

a device brand; and

a device version.

16. The system of claim 13, wherein the router comprises a smart router.

17. The system of claim 16, wherein the constellation of digital devices comprises:

a computing device; and

an ancillary device that works in tandem with the computing device.

18. The system of claim 13, wherein the digital fingerprint encompasses at least one of:

an association between digital devices within the constellation of digital devices;

network data generated by at least one digital device within the constellation of digital devices;

connectivity patterns of the user;

log-in patterns of the user; and

digital content accessed by the user.

19. The system of claim 13, wherein the using module uses the authentication protocol to authenticate the user by automatically authenticating the user based on the current digital environment of the user matching the digital fingerprint without requiring the user to manually input authenticating information.

20. A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

identify a constellation of digital devices with which a user interacts by monitoring, via a router that directs traffic on a network connected to the constellation of digital devices, network traffic generated by the constellation of digital devices, wherein the constellation of digital devices comprises a constellation of smart-home appliances;

create a digital fingerprint for the user that is based on the constellation of digital devices;

generate an authentication protocol for authenticating the user by creating a policy that prescribes authenticating the user if a current digital environment of the user matches the digital fingerprint based on at least one of;

a threshold number of digital devices within the current digital environment of the user matching digital devices included within the digital fingerprint; and

a threshold percentage of the digital devices within the current digital environment of the user matching the digital devices included within the digital fingerprint; and

use the authentication protocol to authenticate the user.