Motion-based identity authentication of an individual with a communications device

• US 9,984,218 B2
• Filed: 12/07/2015
• Issued: 05/29/2018
• Est. Priority Date: 05/13/2013
• Status: Active Grant

• Current Assignee: Ohio University
• Original Assignee: Ohio University
• Inventors: Liu, Chang, Hong, Siang Lee
• Primary Examiner(s): Williams, Jeffery
• Application Number:
  US14/960,803
• Publication Number:
  US 20160085948A1
• Time in Patent Office: 904 Days
• Field of Search: None
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 2203/04104 Multi-touch detection in digitiser, i.e. details about the simultaneous detection of a plurality of touching locations, e.g. multiple fingers or pen and finger
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G06F 3/04883 for inputting data by handwriting, e.g. gesture or text
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 8/16 selectively restricting mobility data tracking
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

Systems, methods and computer storage mediums securely authenticate an identity of an individual based on a pattern that is traced by the individual. Embodiments of the present disclosure relate to prompting an individual with a pattern to trace when attempting to authenticate the identity of the individual during an identity authentication session. Motion-based behavior data that is generated by motions executed by the individual as the individual traces the pattern is captured via a motion-capturing sensor. The motion-based behavior data is unique to the individual and has a low likelihood of being duplicated by an unauthorized individual attempting to fraudulently pose as the individual. The captured motion-based behavior data is compared to previously captured motion-based behavior data from previous traces of the pattern completed by the individual. The identity of the individual is authenticated when the motion-based behavior data is within a threshold of the previously captured motion-based behavior data.

Claims

1. A method for securely authenticating an identity of an individual using a communications device based on a pattern that is traced by the individual, comprising:

identifying a defined pattern by a user interface of the communications device to the individual for the individual to currently trace;

receiving a currently traced pattern generated from continuously tracing the defined pattern by the individual from an initial point on the defined pattern to an end point on the defined pattern via the user interface of the communications device;

capturing, from the currently traced pattern, current motion-based behavior data generated by the individual continuously tracing the defined pattern from the initial point to the end point, the current motion-based behavior data including a plurality of variables;

accumulating previously captured motion-based behavior data captured from each of a plurality of previously traced patterns previously traced by the individual, the previously captured motion-based behavior data including the plurality of variables;

determining, for each of the plurality of variables, a threshold that the variable is to be within using the previously captured motion-based behavior data; and

comparing each variable of the current motion-based behavior data with a corresponding variable of the previously captured motion-based behavior data to determine whether each variable of the current motion-based behavior data is within the threshold of the corresponding variable of the previously captured motion-based behavior data.

2. The method of claim 1, further comprising:

displaying the defined pattern by the user interface of the communications device to the individual for the individual to trace.

3. The method of claim 1, further comprising:

prompting the individual with an authentication template that includes the defined pattern for the individual to trace via the user interface of the communications device with a plurality of motions executed by the individual.

4. The method of claim 1, wherein the previously captured motion-based behavior data is stored in a motion-based behavior database that is associated with the individual.

5. The method of claim 1, wherein different aspects of the current motion-based behavior data and the previously captured motion-based behavior data are associated with corresponding characteristics associated with the individual so that each aspect of the current motion-based behavior data and the previously captured motion-based behavior data is representative of the corresponding characteristics associated with the individual.

6. The method of claim 5, further comprising:

determining a customized threshold for each characteristic associated with the individual, wherein each customized threshold is representative of a likelihood that the current motion-based behavior data is to fluctuate from the previously captured motion-based behavior data for each corresponding characteristic.

7. The method of claim 6, further comprising:

authenticating the identity of the individual when the current motion-based behavior data is within each customized threshold of the previously captured motion-based behavior data for each corresponding characteristic.

8. The method of claim 6, further comprising:

rejecting an authentication of the identity of the individual when the current motion-based behavior data is outside any customized threshold of the previously captured motion-based behavior data for any corresponding characteristic; and

rejecting the authentication of the identity of the individual when the current motion-based behavior data is substantially identical to the previously captured motion-based behavior data.

9. The method of claim 6, further comprising:

evaluating the customized threshold as previously captured motion-based behavior data is accumulated from each previously traced pattern previously traced by the individual; and

adjusting the customized threshold when the accumulated motion-based behavior data is indicative that the likelihood that the current motion-based behavior data is to fluctuate from the previously captured motion-based behavior data for each corresponding characteristic has changed thereby further customizing the customized threshold to the individual.

10. The method of claim 1, further comprising:

storing the current motion-based behavior data in a motion-based behavior data database to be associated with a previous authentication of the identity of the individual when the current motion-based behavior data is associated with an authentication of the identity of the individual.

11. The method of claim 3, wherein the authentication template is a two-dimension template that includes a two-dimension pattern for the individual to trace on a plane.

12. The method of claim 11, wherein the plurality of motions executed by the individual to trace the two-dimension pattern generates the current motion-based behavior data that is associated with a height and width of the two-dimension pattern.

13. The method of claim 6, wherein the current motion-based behavior data includes biometric data that is associated with biometric characteristics related to physiological aspects of the individual that do not change each time the individual traces the pattern, and behaviometric data associated with behaviometric characteristics of the individual that change each time the individual traces the pattern, the biometric data and the behaviometric data being generated when the individual executes the plurality of motions to trace the defined pattern.

14. A communications device for securely authenticating an identity of an individual based on a pattern that is traced by the individual, comprising:

a user interface configured to identify a defined pattern to the individual for the individual to currently trace;

a transceiver configured to receive a currently traced pattern generated from continuously tracing the defined pattern by the individual from an initial point on the defined pattern to an end point on the defined pattern via the user interface;

at least one processor; and

a memory coupled with the at least one processor, the memory including instructions that, when executed by the at least one processor cause the communications device to;

capture, from the currently traced pattern, current motion-based behavior data generated by the individual continuously tracing the defined pattern from the initial point to the end point, the current motion-based behavior data including a plurality of variables;

accumulate previously captured motion-based behavior data captured from a plurality of previously traced patterns previously traced by the individual, the previously captured motion-based behavior data including the plurality of variables;

determine, for each of the plurality of variables, a threshold that the variable is to be within using the previously captured motion-based behavior data; and

compare each variable of the current motion-based behavior data with a corresponding variable of the previously captured motion-based behavior data to determine whether each variable of the current motion-based behavior data is within the threshold of the corresponding variable of the previously captured motion-based behavior data.

15. The communications device of claim 14, wherein the user interface is further configured to display the defined pattern to the individual for the individual to trace.

16. The communications device of claim 14, further comprising:

a prompting module configured to prompt the individual with an authentication template that includes the defined pattern for the individual to trace via the user interface with a plurality of motions executed by the individual.

17. The communications device claim 14, wherein the previously captured motion-based behavior data is stored in a motion-based behavior data database that is associated with the individual.

18. The communications device of claim 14, wherein different aspects of the current motion-based behavior data and the previously captured motion-based behavior data are associated with corresponding characteristics associated with the individual so that each aspect of the current motion-based behavior data and the previously captured motion-based behavior data is representative of the corresponding characteristics associated with the individual.

19. The communications device of claim 18, further comprising:

an authentication module configured to determine a customized threshold for each characteristic associated with the individual, wherein each customized threshold is representative of a likelihood that the current motion-based behavior data is to fluctuate from the previously captured motion-based behavior data for each corresponding characteristic.

20. The communications device of claim 19, wherein the authentication module is further configured to authenticate the identity of the individual when the current motion-based behavior data is within each customized threshold of the previously captured motion-based behavior data for each corresponding characteristic.

21. The communications device of claim 19, further comprising:

a rejection module configured to;

reject an authentication of the identity of the individual when the current motion-based behavior data is outside any customized threshold of the previously captured motion-based behavior data for any corresponding characteristic; and

reject the authentication of the identity of the individual when the current motion-based behavior data is substantially identical to the previously captured motion-based behavior data.

22. The communications device of claim 19, wherein the authentication module is further configured to:

evaluate the customized threshold as previously captured motion-based behavior data is accumulated form each previously traced pattern previously traced by the individual; and

adjust the customized threshold when the accumulated motion-based behavior data is indicative that the likelihood that the current motion-based behavior data is to fluctuate from the previously captured motion-based behavior data for each corresponding characteristic has changed thereby further customizing the customized threshold to the individual.

23. The communications device of claim 14, further comprising:

a storing module configured to store the current motion-based behavior data in a motion-based behavior data database to be associated with a previous authentication of the identity of the individual when the current motion-based behavior data is associated with an authentication of the identity of the individual.

24. The communications device of claim 16, wherein the authentication template is a two-dimension template that includes a two-dimension pattern for the individual to trace on a plane.

25. The communications device of claim 24, wherein the plurality of motions executed by the individual to trace the two-dimension pattern generates the current motion-based behavior data that is associated with a height and width of the two-dimension pattern.

26. The communications device of claim 20, wherein the current motion-based behavior data includes biometric data that is associated with biometric characteristics related to physiological aspects of the individual that do not change each time the individual traces the pattern, and behaviometric data associated with behaviometric characteristics of the individual that change each time the individual traces the pattern, the biometric data and the behaviometric data being generated when the individual executes the plurality of motions to trace the defined pattern.