Location specific image based authentication

• US 9,697,348 B1
• Filed: 10/24/2016
• Issued: 07/04/2017
• Est. Priority Date: 10/24/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Maresh, Mark E., Whitney, Michael J., Nolan, Colm, Vargas, Juan F.
• Primary Examiner(s): Vaughan, Michael R
• Application Number:
  US15/332,474
• Time in Patent Office: 253 Days
• Field of Search: None
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Embodiments are described for authenticating a login request for logging in to a user account on a host system. An example method includes receiving, by the host system, as part of the login request, an authentication image. The method also includes determining that the login request is sent from an authorized login-location, by comparing the authentication image with a reference image from the authorized login-location. The method further includes, in response to the login request being sent from the authorized login-location, facilitating access to the user account.

Claims

1. A computer implemented method for authenticating a login request for logging in to a user account on a host system, the method comprising:

receiving, by the host system, a reference image that captures a location-specific viewpoint from a perspective of a user in an authorized login-location;

receiving, by the host system, as part of the login request, an authentication image;

determining that the login request is sent from the authorized login-location, by comparing the authentication image with the reference image; and

in response to the login request being sent from the authorized login-location, facilitating access to the user account.

2. The computer implemented method of claim 1, further comprising, denying access to the host system in response to the login request not being sent from the authorized login-location.

3. The computer implemented method of claim 1, wherein comparing the authentication image with the reference image comprises:

determining authentication vector data in the authentication image; and

comparing the authentication vector data with reference vector data corresponding to the reference image.

4. The computer implemented method of claim 1, wherein the reference image is received when the user account is created.

5. The computer implemented method of claim 1, wherein the reference image is received in response to the authorized login-location being associated with the user account.

6. The computer implemented method of claim 1, further comprising determining authentication vector data in the authentication image, wherein the authentication vector data comprises identification of straight lines in the authentication image and measurements of angles between one or more pairs from the straight lines.

7. The computer implemented method of claim 1, further comprising determining authentication vector data in the authentication image, wherein the authentication vector data comprises identification of straight lines in the authentication image and measurements of distances between one or more pairs from the straight lines.

8. The computer implemented method of claim 1, further comprising, determining that the authentication image is a previously stored image in response to the authentication image entirely matching the reference image.

9. The computer implemented method of claim 1, wherein determining that the login request is sent from the authorized login-location further comprises comparing the authentication image with one or more previous authentication images that resulted in successful logins to the user account.

10. A system for authenticating a login request for logging in to a user account on the system, the system comprising:

a memory; and

a processing unit coupled with the memory, the processing unit configured to;

receiving a reference image that captures a location-specific viewpoint from a perspective of a user in an authorized login-location;

receive, as part of the login request, an authentication image;

determine that the login request is sent from the authorized login-location, based on a comparison of the authentication image with the reference image; and

in response to determining that the login request is sent from the authorized login-location, facilitate access to the user account.

11. The system of claim 10, wherein the comparison of the authentication image with the reference image comprises:

determining authentication vector data in the authentication image; and

comparing the authentication vector data with reference vector data corresponding to the reference image.

12. The system of claim 10, wherein the reference image is received when the user account is created.

13. The system of claim 10, wherein the reference image is received in response to the authorized login-location being associated with the user account.

14. The system of claim 10, wherein the processor is further configured to determine authentication vector data corresponding to the authentication image, wherein determination of the authentication vector data comprises:

identification of straight lines in the authentication image;

identification a subset of the straight lines as significant vectors of the authentication image; and

determination of angles between one or more pairs of straight lines from the significant vectors of the authentication image.

15. The system of claim 10, wherein the processor is further configured to determine authentication vector data corresponding to the authentication image, wherein determination of the authentication vector data comprises:

identification of straight lines in the authentication image;

identification a subset of the straight lines as significant vectors of the authentication image; and

determination of distances between one or more pairs of straight lines from the significant vectors of the authentication image.

16. The system of claim 10, wherein the processor is further configured to determine that the authentication image is a previously stored image in response to the authentication image entirely matching the reference image.

17. The system of claim 10, wherein for determining that the login request is sent from the authorized login-location, the processor is further configured to compare the authentication image with one or more previous authentication images that resulted in successful logins to the user account.

18. A computer program product for authenticating a login request for logging in to a user account on a host system, the computer program product comprising a non-transitory computer readable storage medium, the non-transitory computer readable storage medium comprising computer executable instructions, wherein the computer readable storage medium comprises instructions to:

receive a reference image that captures a location-specific viewpoint from a perspective of a user in an authorized login-location;

generate and store reference vector data corresponding to the reference image;

receive, as part of the login request, an authentication image;

determine that the login request is sent from the authorized login-location by;

generating authentication vector data corresponding to the authentication image;

determining a vector-difference by comparing the authentication vector data with the reference vector data; and

in response to the vector-difference being within a predetermined range, determining that the login request is sent from the authorized login-location; and

facilitate access to the user account in response to the login request being sent from the authorized login-location.

19. The computer program product of claim 18, wherein the reference image is received when the user account is created.

20. The computer program product of claim 18, wherein generating the authentication vector data and generating the reference vector data, further comprises:

identifying of straight lines in the respective image;

identifying a subset of the straight lines as significant vectors of the respective image;

determining angles between one or more pairs of straight lines from the significant vectors; and

determining distances between the one or more pairs of straight lines from the significant vectors.