# US 11,113,371 B2 · Continuous authentication based on motion input data

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,113,371 B2
- Document ID: US11113371B2
- Status: Granted
- Kind: B2
- Application number: 16/599,161
- Filed: 2019-10-11
- Published: 2020-03-05
- Granted: 2021-09-07
- Earliest claimed: 2019-10-11
- Assignees: Behaviosec Inc
- Applicants: BehavioSec Inc
- Inventors: Ingo Deutschmann; Per Burstrom; Wolfgang Pott
- Web page: https://patentgrep.com/patent/US11113371B2

## CPC

- G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour}
- G06F 3/02: Input arrangements using manually operated switches, e.g. using keyboards or dials
- G06F 3/0346: with detection of the device orientation or free movement in a three-dimensional [3D] space, e.g. 3D mice, 6-DOF [six degrees of freedom] pointers using gyroscopes, accelerometers or tilt-sensors
- G06F 3/04886: by partitioning the display area of the touch-screen or the surface of the digitising tablet into independently controllable areas, e.g. virtual keyboards or menus
- G06F 21/36: by graphic or iconic representation
- G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification}
- H04W 12/065: Continuous authentication
- G06F 2203/04803: Split screen, i.e. subdividing the display area or the window area into separate subareas
- G06F 2221/2139: Recurrent verification
- G06F 2221/2151: Time stamp
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Disclosed is a method for continuously authenticating a user based on motion input data. The method includes recording motion input data from a keyboard such as starting coordinates, ending coordinates, and timestamps of key-up actions to determine that a key has been pressed, recording a timestamp of motion input at the starting coordinate, mapping the timestamp of said motion input at the starting coordinate to a key-down action for the key press, determining which key of said virtual keyboard said key-down action refers to, and granting or denying access to a device if the timing of the key which was pressed and released in the key-down action and the corresponding key-up action matches the press and flight timing of a key which was pressed and released in a previously-recorded key-down action and a previously-recorded key-up action.

## Claims

### Claim 1

A method of determining a timestamp of a keydown action of a touchscreen of a device, based on the following steps, in order:
receiving, from said device, a first timestamp of a key-up action of a particular key displayed on said touchscreen at first location coordinates;
retrieving time and coordinate data comprising at least pairs of location coordinates and associated timestamps of previously-recorded touch sensor readings on said touchscreen from said device, wherein said previously recorded touch sensor readings are from a time before said first timestamp;
retroactively determining that a second timestamp of a key-down action of said particular key corresponding to said key-up action has not been received from said device;
comparing first location coordinates of said particular key displayed on said touchscreen with said retrieved time and coordinate data of said previously recorded touch sensor readings on said touchscreen;
based on said comparing, obtaining from said previously-recorded touch sensor readings a third timestamp associated with second location coordinates of a first touch on said touchscreen, wherein said third timestamp is proximate to said first timestamp and said second location coordinates match said first location coordinates of said particular key;
using said third timestamp to obtain said second timestamp of said particular key; and
comparing said second timestamp and said first timestamp of said particular key with other inputs obtained from said device or another device;
wherein said other inputs comprise timestamps of key-up and key-down actions of said particular key obtained from said device or said another device; and
wherein said another device comprises a device which has non-touchscreen or touchscreen inputs.