Image-based user authentication

• US 9,858,406 B2
• Filed: 03/24/2015
• Issued: 01/02/2018
• Est. Priority Date: 03/24/2015
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Getchius, Jeffrey M., Getchius, Guy
• Primary Examiner(s): Korsak, Oleg
• Assistant Examiner(s): KANAAN, SIMON P
• Application Number:
  US14/667,037
• Publication Number:
  US 20160283708A1
• Time in Patent Office: 1,015 Days
• CPC Class Codes: G06F 21/36 by graphic or iconic representation

Abstract

An authenticity accuracy, corresponding to a personal identification number, is determined. A device presents a correct image (or group of images) and an incorrect image (or group of images). Selections from a user are received until a sufficient number of correct images are selected to satisfy the authenticity accuracy. For example, a counter may be incremented when the correct image is selected, and the user may be considered to be authenticated if the counter reaches a sufficient level.

Claims

1. A method comprising:

receiving, at a processor and from an authentication device, an indication of a desired authentication accuracy and a first token that enables a user device to obtain image data from an image data device;

obtaining, by the processor, from the image data device and based on receiving the first token, a plurality of images, wherein the plurality of images includes a first correct image, a second correct image, a first incorrect image, and a second incorrect image, wherein the;

first correct image and the second correct image include images of people obtained from a contact list associated with a user of the user device, and wherein the first incorrect image and the second incorrect image include images of people that are not in the contact list associated with the user;

presenting, by the processor, a first subset of the plurality of images for display, wherein the first subset includes the first correct image and the first incorrect image;

presenting, by the processor, selection instructions, wherein the selection instructions include an identifier associated the first correct image and instructions to choose and image associated with the identifier, wherein the identifier includes a name of a person in the first correct image;

receiving, by the processor, a first input by a user and from the first subset, wherein the first input selects one of the first correct image or the first incorrect image;

incrementing, by the processor, a correct selection count associated with the user when the first input selects the first correct image, wherein the user is determined to be authenticated when the correct selection count meets a first threshold;

incrementing, by the processor, an incorrect selection count associated with the user when the first input selects the first incorrect image, wherein the user is determined to not be authenticated when the incorrect selection count meets a second threshold;

presenting, by the processor, a second subset of the plurality of images for display when the first input selects the first correct image and the correct selection count does not meet the first threshold or when the first input selects the first incorrect image and the incorrect selection count does not meet the second threshold, wherein the second subset includes the second correct image and the second incorrect image;

receiving, by the processor, a second input by the user and from the second subset, wherein the second input selects one of the second correct images or the second incorrect image;

determining, by the processor, whether the user is authenticated based on the second input and the desired authentication accuracy;

receiving, by the processor and from the authentication device, a second token to generate a request for access to a portal device when the user is authenticated; and

transmitting, by the processor and to the portal device when the user is authenticated, an indication that the user is authenticated and the request for access, wherein the portal device allows the user to access particular data based on the indication.

2. The method of claim 1,

wherein the identifier associated with the first correct image further includes an attribute associated with the first correct image.

3. The method of claim 2, wherein the attribute includes at least one of:

data associated with a subject of the first correct image, or

metadata associated with the first correct image.

4. The method of claim 1, wherein obtaining the plurality of images includes:

receiving the first correct image;

identifying an attribute associated with the first correct image; and

obtaining the first incorrect image based on the attribute, wherein the first incorrect image is not associated with the attribute.

5. The method of claim 4,

wherein the selection instructions identify the attribute associated with the first correct image.

6. The method of claim 2, wherein the attribute includes a relationship with the user.

7. The method of claim 1, further comprising:

determining an authentication accuracy for a personal identification number (PIN) associated with the user, wherein the authentication accuracy corresponds to likelihood of randomly selecting the PIN from a group of numbers; and

calculating the first threshold based on the authentication accuracy.

8. A device comprising:

a memory configured to store a plurality of images associated with a user, wherein the plurality of images includes a first correct image, a second correct image, a first incorrect image, and a second incorrect image, wherein the first correct image and the second correct image include images of people obtained from a contact list associated with the user, and wherein the first incorrect image and the second incorrect image include images of people that are not in the contact list associated with the user; and

a processor configured to;

receive, from and authentication device, and indication of a desired authentication of a desired authentication accuracy and a first token that enables the device to obtain image data;

present, in response to receiving the first token, a first subset of the plurality of images for display, wherein the first subset includes the first correct image and the first incorrect image,

present selection instructions, wherein the selection instructions include an identifier associated with the first correct image and instructions to choose and image associated with the identifier, wherein the identifier includes a name of a person in the first correct image,

receive a first input by the user and from the first subset, wherein the first input selects one of the first correct image or the first incorrect image,

increment a correct selection count associated with the user when the first input selects the first correct image, wherein the user is determined to be authenticated when the correct selection count meets a first threshold,

increment an incorrect selection count associated with the user when the first input selects the first incorrect image, wherein the user is determined to not be authenticated when the incorrect selection count meets a second threshold,

present, for display, a second subset of the plurality of images when the first input selects the first correct image and the correct selection count does not meet the first threshold or when the first input selects the first incorrect image and the incorrect selection count does not meet the second threshold, wherein the second subset includes the second correct image and the second incorrect image,

receive a second input by the user and from the second subset, wherein the second input selects one of the second correct image or the second incorrect image,

determine whether the user is authenticated based on the second input and the desired authentication accuracy,

receive, from the authentication device, a second token to generate a request for access to a portal device when the user is authenticated, and

transmit, to the portal device when the user is authenticated, and indication that the user is authenticated and the request for access, wherein the user is able to access particular data based on the indication.

9. The device of claim 8, wherein the selection instructions identify an attribute associated with the first correct image.

10. The device of claim 9, wherein the attribute includes at least one of:

data associated with a subject of the first correct image, or

metadata associated with the first correct image.

11. The device of claim 8, wherein the processor is further configured to:

identify an attribute associated with the first correct image; and

obtain the first incorrect image based on the attribute, wherein the first incorrect image is not associated with the attribute.

12. The device of claim 11, wherein the selection instructions identify the attribute associated with the first correct image.

13. The device of claim 9, wherein the attribute includes a relationship with the user.

14. The device of claim 8, wherein the processor is further configured to:

determine an authentication accuracy for a personal identification number (PIN) associated with the user, wherein the authentication accuracy corresponds to likelihood of randomly selecting the PIN from a group of numbers, and

calculate the first threshold based on the authentication accuracy.

15. A non-transitory computer-readable medium configured to store instruction, the instructions comprising:

one or more instructions that, when executed by a processor associated with a device, cause the processor to;

receive, from an authenticated device, and indication of a desired authentication accuracy and a first token that enables the device to obtain image data from and image data device;

obtain, based on receiving the first token, a plurality of images from the image data device, wherein the plurality of images includes a first correct image, a second correct image, a first incorrect image, and a second incorrect image, wherein the first correct image and the second correct image include images of people obtained from a contact list associated with a user, and wherein the first incorrect image and the second incorrect image include images of people that are not in the contact list associated with the user;

present a first subset of the plurality of images for display, wherein the first subset includes the first correct image and the first incorrect image;

present selection instructions, wherein the selection instructions include an identifier associated the first correct image and instructions to choose an image associated with the identifier, wherein the identifier includes a name of a person in the first correct image;

receive a first input by a user and from the first subset, wherein the first input identifies one of the first correct image or the first incorrect image;

increment a correct selection count associated with the user when the first input selects the first correct image, wherein the user is determined to be authenticated when the correct selection count meets a threshold;

present a second subset of the plurality of images for display when the first input selects the first correct image and the correct selection count does not meet the threshold or when the first input selects the first incorrect image, wherein the second subset includes the second correct image and the second incorrect image;

receive a second input by the user and from the second subset, wherein the second input selects one of the second correct image or the second incorrect image;

determine whether the user is authenticated based on the second input and the desired authentication accuracy;

receive, from the authentication device, a second token to generate a request for access to a portal device when the user is authenticated; and

transmit, to the portal device when the user is authenticated, in indication that the user is authenticated and the request for access, wherein the user is able to access particular data based on the indication.

16. The non-transitory computer-readable medium of claim 15, wherein the selection instructions identify an attribute associated with the first correct image.

17. The non-transitory computer-readable medium of claim 16, wherein the attribute includes at least one of:

data associated with a subject of the first correct image, or

metadata associated with the first correct image.

18. The non-transitory computer-readable medium of claim 15, wherein the one or more instructions, when causing the processor to obtain the plurality of images, further cause the processor to:

identify an attribute associated with the first correct image; and

obtain the first incorrect image based on the attribute, wherein the first incorrect image is not associated with the attribute.

19. The non-transitory computer-readable medium of claim 18, wherein the selection instructions identify an attribute associated with the first correct image.

20. The non-transitory computer-readable medium of claim 15, wherein the first correct image includes a plurality of first correct images, wherein the first input includes a plurality of first inputs, wherein each of the plurality of first inputs identifies one of the plurality of first correct images or the first incorrect image, and wherein the one or more instructions, when incrementing the correct selection count, further cause the processor to:

increment the correct selection count when the plurality of first inputs selects the plurality of first correct images.