Method and Apparatus to Authenticate a User to a Mobile Device Using Mnemonic Based Digital Signatures

• US 20130205387A1
• Filed: 02/03/2012
• Published: 08/08/2013
• Est. Priority Date: 02/03/2012
• Status: Active Grant

• Current Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Inventors: Zhang, Xinwen, Waclawsky, John, Le, Zhengyi, Wei, Jiwei
• Granted Patent: US 8,769,669 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A user device comprising a processor configured to enable a mnemonic based digital signature scheme for user authentication that is based on a combination of one or more secrets and one or more actions implemented on the user device and associated with the secrets, and a device input system coupled to the processor and configured to detect the actions implemented on the user device. Also disclosed is an apparatus comprising a processor configured to implement a mnemonic based digital signature for authenticating a user, a device input system configured to enable the mnemonic based digital signature, and a memory unit configured to store input data that is used to recognize the mnemonic based digital signature, wherein the mnemonic based digital signature comprises a secret, an action associated with the secret and implemented using the device input system, and a cue associated with the action.

Claims

1. A user device comprising:

a processor configured to enable a digital signature scheme based on a mnemonic-aided secret for user authentication that uses a combination of one or more secrets and one or more actions implemented on the user device and associated with the secrets; and

a device input system coupled to the processor and configured to detect the actions implemented on the user device,

wherein the mnemonic-aided secret is a sensory based mnemonic.

2. The user device of claim 1, wherein user authentication is enabled using an image based mnemonic.

3. The user device of claim 2, wherein the image based mnemonic comprises an image displayed on a touch screen including one or more image objects that allows a user to remember the secrets, and wherein the secrets correspond to one or more points that coincide with the image objects.

4. The user device of claim 3, wherein the secrets comprise one or more locations on the image.

5. The user device of claim 3, wherein the actions comprise at least one of making a drawing, tapping, and holding on the touch screen using the image objects.

6. The user device of claim 1, wherein user authentication is enabled using a kinetic based mnemonic.

7. The user device of claim 1, wherein user authentication is enabled using an auditory based mnemonic.

8. The user device of claim 1, wherein the user device is a handheld device, and wherein the actions comprise performing a motion action of the handheld device.

9. The user device of claim 8, wherein the actions comprise at least one of shaking, translating, and rotating the handheld device.

10. The user device of claim 8, wherein the secrets comprise one or more points associated with at least one of an image, graphic, text, location, audio, and/or motion of the handheld device.

11. The user device of claim 1, wherein the digital signature scheme is further based on one or more cues associated with the secrets and actions.

12. The user device of claim 11, wherein the cues comprise at least one of time, location, motion, visual, and auditory triggers.

13. The user device of claim 11, wherein at least one of the secrets and actions changes depending on changes in the cues including at least one of changes in time, date, and location.

14. An apparatus comprising:

a processor configured to implement a digital signature scheme based on a mnemonic-aided secret for authenticating a user,

a device input system configured to enable the digital signature scheme; and

a memory unit configured to store input data that is used to recognize the digital signature scheme,

wherein the digital signature scheme comprises a secret, an action associated with the secret and implemented using the device input system, and a cue associated with the action.

15. The apparatus of claim 14, wherein the secret is a determined point on a touch screen.

16. The apparatus of claim 14, wherein the action is a determined motional action of drawing on a touch screen.

17. The apparatus of claim 14, wherein the apparatus is a handheld device, and wherein the action is a determined motional action for moving the handheld device.

18. The apparatus of claim 14, wherein the apparatus is a handheld device, and wherein the cue is a location of the handheld device.

19. The apparatus of claim 14, wherein the cue is a generated audio.

20. The apparatus of claim 14, wherein the cue is an image displayed on a touch screen.

21. The apparatus of claim 14, wherein the cue is a vibration motion.

22. The apparatus of claim 14, wherein the cue is a determined time before, after, or during the action.

23. The apparatus of claim 14, wherein the device input system comprises at least one of a touch screen, an accelerometer, a gyroscope, a microphone, a global positioning system (GPS), and a timer.

24. A method to enable a digital signature scheme based on a mnemonic-aided secret for user authentication on a device, comprising:

defining a user secret for the digital signature scheme;

defining one or more actions for the digital signature scheme that are to be implemented on the device for user authentication and associated with at least one of the user and the device;

defining one or more device triggers for the digital signature scheme that are associated with the actions;

generating a digital signature using the defined secret, actions, and triggers;

storing the generated digital signature in memory; and

training the device to recognize a successful digital signature operation by the user that matches the stored digital signature to authenticate the user.

25. The method of claim 24, wherein the user secret comprises one or more secret points that are at least one of image-based, auditory-based, and kinetic-based.

26. The method of claim 24, wherein the actions associated with the user secret include at least one of linking, tapping, and holding on one or more secret points on a touch screen.