# US 10,872,336 B2 · System and method for independent user effort-based validation

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,872,336 B2
- Document ID: US10872336B2
- Status: Granted
- Kind: B2
- Application number: 16/159,555
- Filed: 2018-10-12
- Published: 2019-04-18
- Granted: 2020-12-22
- Earliest claimed: 2017-10-13
- Assignees: Intensity Analytics Corporation
- Applicants: Intensity Analytics Corporation
- Inventors: John D. Rome; Bethann G. Rome; Thomas E. Ketcham, II
- Web page: https://patentgrep.com/patent/US10872336B2

## CPC

- G06Q 20/4014: {Identity check for transactions}
- G06F 3/04883: for inputting data by handwriting, e.g. gesture or text
- G06F 16/1824: {implemented using Network-attached Storage [NAS] architecture (distributed or networked storage systems G06F3/067; protocols for distributed storage of data in a network H04L67/1097)}
- G06F 16/1834: {implemented based on peer-to-peer networks, e.g. gnutella (p2p communication protocols H04L67/104)}
- G06F 16/27: Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
- G06F 21/33: using certificates
- G06F 21/36: by graphic or iconic representation
- G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes}
- G06K 7/1417: {2D bar codes}
- G06Q 20/02: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q 20/223: {based on the use of peer-to-peer networks}
- G06Q 20/24: Credit schemes, i.e. "pay after"
- G06Q 20/3274: {using a pictured code, e.g. barcode or QR-code, being displayed on the M-device}
- G06Q 20/3829: {involving key management}
- G06Q 20/383: {Anonymous user system}
- G06Q 20/401: {Transaction verification}
- H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords}
- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3271: {using challenge-response}
- H04L 63/0414: {during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication}
- H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04L 63/102: {Entity profiles}
- H04L 63/123: {received data contents, e.g. message integrity}
- H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 2463/102: applying security measure for e-commerce
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A method of authenticating a user based on user effort, the method includes receiving a registration from a user device with a user effort-based identity authorization token and a first user effort, submitting the first effort to the effort validation server, receiving an effort analysis from the effort validation server, issuing a credential to the user device based on the effort analysis, receiving an access request from the user device, the access request including the credential and a second effort, providing the second effort to the validation server, receiving a validation response from the validation server, and granting access to the user device as a function of the validation response.

## Claims

### Claim 1

A method of authenticating a user based on user effort, the method comprising:
receiving a registration from a user device with a token that includes user effort-based identity authorization data, and with a first user effort comprising gestures associated with user device touch screen user interaction;
submitting the first user effort and data from the token to the effort validation server;
receiving an effort analysis from the effort validation server;
issuing a credential to the user device based on the effort analysis the credential comprising user effort data encoded into a QR code;
receiving an access request from the user device, the access request including the credential and a second user effort;
providing the second user effort to the validation server;
receiving a validation response from the validation server, wherein the validation response includes a validation key that includes both rendered Boolean match conclusion and statistics about the calculations, as well as information about the challenge; and
granting access to the user device as a function of the validation response.

### Claim 2 (depends on 1)

The method of claim 1 wherein the first and second user efforts comprise user device keyboard user efforts.

### Claim 3 (depends on 1)

The method of claim 1 wherein the authentication server is a server running an application that the user device attempts to access.

### Claim 4 (depends on 1)

The method of claim 1 wherein the authentication server is a separate server from a server running an application that the user device attempts to access.

### Claim 5

A system for performing a method of authenticating a user based on user efforts, the system comprising:
a processor;
a communication device coupled to the processor for communicating with other devices; and
a memory storing computer readable instructions coupled to the processor, the instructions for execution by the processor to perform operations comprising:
receiving a registration from a user device with a token that includes user effort-based identity authorization data, and with a first user effort comprising gestures associated with user device touch screen user interaction;
submitting the first user effort and data from the token to the effort validation server;
receiving an effort analysis from the effort validation server;
issuing a credential to the user device based on the effort analysis the credential comprising user effort data encoded into a QR code;
receiving an access request from the user device, the access request including the credential and a second user effort;
providing the second user effort to the validation server;
receiving a validation response from the validation server, wherein the validation response includes a validation key that includes both rendered Boolean match conclusion and statistics about the calculations, as well as information about the challenge; and
granting access to the user device as a function of the validation response.

### Claim 6 (depends on 5)

The system of claim 5 wherein the user efforts comprise user device keyboard user efforts.

### Claim 7

A non-transitory machine-readable storage device having instructions for execution by a processor of a machine to cause the processor to perform operations to perform a method, the operations comprising:
receiving a registration from a user device with a token that includes user effort-based identity authorization data, and with a first user effort comprising gestures associated with user device touch screen user interaction;
submitting the first user effort and data from the token to the effort validation server;
receiving an effort analysis from the effort validation server;
issuing a credential to the user device based on the effort analysis the credential comprising user effort data encoded into a QR code;
receiving an access request from the user device, the access request including the credential and a second user effort;
providing the second user effort to the validation server;
receiving a validation response from the validation server, wherein the validation response includes a validation key that includes both rendered Boolean match conclusion and statistics about the calculations, as well as information about the challenge; and
granting access to the user device as a function of the validation response.

### Claim 8 (depends on 7)

The device of claim 7 wherein the first and second user efforts comprise user device keyboard user efforts.

### Claim 9 (depends on 7)

The device of claim 7 wherein the authentication server is a server running an application that the user device attempts to access.

### Claim 10 (depends on 7)

The device of claim 7 wherein the authentication server is a separate server from a server running an application that the user device attempts to access.