Temporal modification of authentication challenges

• US 9,876,784 B2
• Filed: 02/06/2017
• Issued: 01/23/2018
• Est. Priority Date: 11/25/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Arunkumar, Saritha, Pipes, Stephen D.
• Primary Examiner(s): Zoubair, Noura
• Application Number:
  US15/425,083
• Publication Number:
  US 20170149763A1
• Time in Patent Office: 351 Days
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles

Abstract

A method for authenticating a user of a computing device. The method includes a computer processor receiving an indication that a user of a computing device is accessing an object that utilizes an authentication process. The method further includes a computer processor selecting a first multi-media file that is associated with a user profile of the user and the object of the authentication process, wherein the first multi-media file is associated with a baseline user input authentication sequence. The method further includes creating a first temporal manipulation vector based on the user profile and a security requirement of the object of the authentication process, wherein the temporal manipulation vector modifies a presentation of a multi-media file and a corresponding time sequence of a user input authentication sequence in the multi-media file. The method further includes transmitting the first temporal manipulation vector and the first multi-media file to the computing device.

Claims

1. A method for authenticating a user of a computing device, the method comprising:

selecting, by one or more computer processors, a first multi-media file based on a user profile of the user and an object of an authentication process, wherein the first multi-media file is associated with a baseline time sequence of interactions of the user corresponding to an authentication sequence of one or more preselected events of the first multi-media file, and wherein the first multi-media file is supplied by the user;

creating, by one or more computer processors, a block of temporal manipulation vectors based, at least in part, on the user profile and a security requirement of the object of the authentication process, wherein a temporal manipulation vector, of the block of temporal manipulation vectors modifies a presentation of a multi-media file by displacing one or more preselected events of a sequence of events within the multi-media file with respect to time;

authenticating, by one or more computer processors, the user based on input of the user interacting with the first multi-media file modified by at least one temporal manipulation vector of the block of temporal manipulation vectors; and

replacing, by one or more computer processors, the block of temporal manipulation vectors associated with the first multi-media file with an updated block of temporal manipulation vectors based on a percentage of unused temporal manipulation vectors of the block of temporal manipulation vectors and a duration of time elapsed since the creation of the block of temporal manipulation vectors.

2. The method of claim 1, further comprising:

receiving, by one or more computer processors, from a computing device, a time sequence of interactions of the user with respect to the presentation, modified by a selected temporal manipulation vector of the block of temporal manipulation vectors associated with the first multi-media file; and

comparing, by one or more computer processors, the received time sequence of interactions of the user with respect to the modified presentation of the first multi-media file to the baseline time sequence of interactions of the user corresponding to an authentication sequence of one or more preselected events of the first multi-media file to authenticate the user of the computing device.

3. The method of claim 2, wherein:

the user utilizes temporal knowledge of the events within the first multi-media file to authenticate, based on the time sequence of interactions of the user corresponding to the one or more preselected events of the first multi-media file; and

the received time sequence of interactions of the user comprises the user respectively reproducing one or more user interactions, with the computing device, for each of the one or more preselected events of the first multi-media file associated with the baseline time sequence of interactions of the user corresponding to the authentication sequence of one or more preselected events of the first multi-media.

4. The method of claim 1, further comprising:

creating, by one or more computer processors, the block of temporal manipulation vectors associated with the first multi-media file comprised of at least two different temporal manipulation vectors;

assigning, by one or more computer processors, a respective unique identifier to each temporal manipulation vector of the block of temporal manipulation vectors;

associating, by one or more computer processors, the assigned unique identifiers of the temporal manipulation vectors to the first multi-media file that is associated with the user profile of the user and the object of the authentication process; and

transmitting, by one or more computer processors, the first multi-media file, the block of temporal manipulation vectors, and corresponding unique identifiers to a computing device.

5. The method of claim 4, further comprising:

receiving, by one or more computer processors, an indication that the user of the computing device is accessing the object that utilizes the authentication process;

selecting, by one or more computer processors, at random, a unique identifier corresponding to a temporal manipulation vector of the block of temporal manipulation vectors associated with the first multi-media file;

transmitting, by one or more computer processors, the randomly selected unique identifier corresponding to the temporal manipulation vector of the block of temporal manipulation vectors associated with the first multi-media file; and

receiving, by one or more computer processors, from the computing device, another time sequence of interactions of the user with respect to the presentation of the first multi-media file, modified by the temporal manipulation vector, of the block of temporal manipulation vectors, corresponding to the randomly selected unique identifier associated with the first multi-media file.

6. The method of claim 1, further comprising:

preprocessing, by one or more computer processors, the first multi-media file as dictated by another temporal manipulation vector, wherein preprocessing creates a second multi-media file;

transmitting, by one or more computer processors, a null temporal manipulation vector and the second multi-media file to the computing device, wherein the second multi-media file is presented without further temporal manipulation on the computing device; and

receiving, by one or more computer processors, from the computing device, another time sequence of interactions of the user with respect to the unmodified presentation of the second multi-media file.

7. The method of claim 1, wherein a time sequence of interactions of the user with respect to a multi-media file further includes:

one or more interactions of the user of the computing device with at least one input/output element of the computing device of the user for each preselected event within the multi-media file; and

a corresponding temporal reference for at least one of the one or more interactions of the user of the computing device with the at least one input/output element of the computing device of the user for each preselected event within the multi-media file.

8. A computer program product for authenticating a user of a computing device, the computer program product comprising:

one or more computer readable storage device and program instructions stored on the one or more computer readable storage device, the program instructions readable/executable by one or more computer processors;

program instructions to select a first multi-media file based on a user profile of the user and an object of an authentication process, wherein the first multi-media file is associated with a baseline time sequence of interactions of the user corresponding to an authentication sequence of one or more preselected events of the first multi-media file, and wherein the first multi-media file is supplied by the user;

program instructions to create a block of temporal manipulation vectors based, at least in part, on the user profile and a security requirement of the object of the authentication process, wherein a temporal manipulation vector, of the block of temporal manipulation vectors modifies a presentation of a multi-media file by displacing one or more preselected events of a sequence of events within the multi-media file with respect to time;

program instructions to authenticate the user based on input of the user interacting with the first multi-media file modified by at least one temporal manipulation vector of the block of temporal manipulation vectors; and

program instructions to replace the block of temporal manipulation vectors associated with the first multi-media file with an updated block of temporal manipulation vectors based on a percentage of unused temporal manipulation vectors of the block of temporal manipulation vectors and a duration of time elapsed since the creation of the block of temporal manipulation vectors.

9. The computer program product of claim 8, further comprising:

program instructions to receive, from a computing device, a time sequence of interactions of the user with respect to the presentation, modified by a selected temporal manipulation vector of the block of temporal manipulation vectors associated with the first multi-media file; and

program instructions to compare the received time sequence of interactions of the user with respect to the modified presentation of the first multi-media file to the baseline time sequence of interactions of the user corresponding to an authentication sequence of one or more preselected events of the first multi-media file to authenticate the user of the computing device.

10. The computer program product of claim 9, wherein:

the user utilizes temporal knowledge of the events within the first multi-media file to authenticate, based on the time sequence of interactions of the user corresponding to the one or more preselected events of the first multi-media file; and

the received time sequence of interactions of the user comprises the user respectively reproducing one or more user interactions, with the computing device, for each of the one or more preselected events of the first multi-media file associated with the baseline time sequence of interactions of the user corresponding to the authentication sequence of one or more preselected events of the first multi-media.

11. The computer program product of claim 8, further comprising:

program instructions to create the block of temporal manipulation vectors associated with the first multi-media file comprised of at least two different temporal manipulation vectors;

program instructions to assign a respective unique identifier to each temporal manipulation vector of the block of temporal manipulation vectors;

program instructions to associate the assigned unique identifiers of the temporal manipulation vectors to the first multi-media file that is associated with the user profile of the user and the object of the authentication process; and

program instructions to transmit the first multi-media file, the block of temporal manipulation vectors, and corresponding unique identifiers to a computing device.

12. The computer program product of claim 11, further comprising:

program instructions to receive an indication that the user of the computing device is accessing the object that utilizes the authentication process;

program instructions to select at random, a unique identifier corresponding to a temporal manipulation vector of the block of temporal manipulation vectors associated with the first multi-media file;

program instructions to transmit the randomly selected unique identifier corresponding to the temporal manipulation vector of the block of temporal manipulation vectors associated with the first multi-media file; and

program instructions to receive from the computing device, another time sequence of interactions of the user with respect to the presentation of the first multi-media file, modified by the temporal manipulation vector, of the block of temporal manipulation vectors, corresponding to the randomly selected unique identifier associated with the first multi-media file.

13. The computer program product of claim 8, further comprising:

program instructions to preprocess the first multi-media file as dictated by another temporal manipulation vector, wherein preprocessing creates a second multi-media file;

program instructions to transmit a null temporal manipulation vector and the second multi-media file to the computing device, wherein the second multi-media file is presented without further temporal manipulation on the computing device; and

program instructions to receive from the computing device, another time sequence of interactions of the user with respect to the unmodified presentation of the second multi-media file.

14. The computer program product of claim 8, wherein a time sequence of interactions of the user with respect to a multi-media file further includes:

one or more interactions of the user of the computing device with at least one input/output element of the computing device of the user for each preselected event within the multi-media file; and

a corresponding temporal reference for at least one of the one or more interactions of the user of the computing device with the at least one input/output element of the computing device of the user for each preselected event within the multi-media file.

15. A computer system for authenticating a user of a computing device, the computer system comprising:

one or more computer processors;

one or more computer readable storage media;

program instructions stored on the computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising;

program instructions to select a first multi-media file based on a user profile of the user and an object of an authentication process, wherein the first multi-media file is associated with a baseline time sequence of interactions of the user corresponding to an authentication sequence of one or more preselected events of the first multi-media file, and wherein the first multi-media file is supplied by the user;

program instructions to create a block of temporal manipulation vectors based, at least in part, on the user profile and a security requirement of the object of the authentication process, wherein a temporal manipulation vector, of the block of temporal manipulation vectors modifies a presentation of a multi-media file by displacing one or more preselected events of a sequence of events within the multi-media file with respect to time;

program instructions to authenticate the user based on input of the user interacting with the first multi-media file modified by at least one temporal manipulation vector of the block of temporal manipulation vectors; and

program instructions to replace the block of temporal manipulation vectors associated with the first multi-media file with an updated block of temporal manipulation vectors based on a percentage of unused temporal manipulation vectors of the block of temporal manipulation vectors and a duration of time elapsed since the creation of the block of temporal manipulation vectors.

16. The computer system of claim 15, further comprising:

program instructions to receive, from a computing device, a time sequence of interactions of the user with respect to the presentation, modified by a selected temporal manipulation vector of the block of temporal manipulation vectors associated with the first multi-media file; and

program instructions to compare the received time sequence of interactions of the user with respect to the modified presentation of the first multi-media file to the baseline time sequence of interactions of the user corresponding to an authentication sequence of one or more preselected events of the first multi-media file to authenticate the user of the computing device.

17. The computer system of claim 16, wherein:

the user utilizes temporal knowledge of the events within the first multi-media file to authenticate, based on the time sequence of interactions of the user corresponding to the one or more preselected events of the first multi-media file; and

the received time sequence of interactions of the user comprises the user respectively reproducing one or more user interactions, with the computing device, for each of the one or more preselected events of the first multi-media file associated with the baseline time sequence of interactions of the user corresponding to the authentication sequence of one or more preselected events of the first multi-media.

18. The computer system of claim 15, further comprising:

program instructions to create the block of temporal manipulation vectors associated with the first multi-media file comprised of at least two different temporal manipulation vectors;

program instructions to assign a respective unique identifier to each temporal manipulation vector of the block of temporal manipulation vectors;

program instructions to associate the assigned unique identifiers of the temporal manipulation vectors to the first multi-media file that is associated with the user profile of the user and the object of the authentication process; and

program instructions to transmit the first multi-media file, the block of temporal manipulation vectors, and corresponding unique identifiers to a computing device.

19. The computer system of claim 18, further comprising:

program instructions to receive an indication that the user of the computing device is accessing the object that utilizes the authentication process;

program instructions to select at random, a unique identifier corresponding to a temporal manipulation vector of the block of temporal manipulation vectors associated with the first multi-media file;

program instructions to transmit the randomly selected unique identifier corresponding to the temporal manipulation vector of the block of temporal manipulation vectors associated with the first multi-media file; and

program instructions to receive from the computing device, another time sequence of interactions of the user with respect to the presentation of the first multi-media file, modified by the temporal manipulation vector, of the block of temporal manipulation vectors, corresponding to the randomly selected unique identifier associated with the first multi-media file.

20. The computer system of claim 15, wherein a time sequence of interactions of the user with respect to a multi-media file further includes:

one or more interactions of the user of the computing device with at least one input/output element of the computing device of the user for each preselected event within the multi-media file; and

a corresponding temporal reference for at least one of the one or more interactions of the user of the computing device with the at least one input/output element of the computing device of the user for each preselected event within the multi-media file.