# US 11,113,378 B2 · Content-based authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,113,378 B2
- Document ID: US11113378B2
- Status: Granted
- Kind: B2
- Application number: 14/971,524
- Filed: 2015-12-16
- Published: 2017-06-22
- Granted: 2021-09-07
- Earliest claimed: 2015-12-16
- Assignees: Lenovo (Singapore) Pte. Ltd.
- Applicants: Lenovo (Singapore) Pte. Ltd.
- Inventors: Gary D. Cudak; Nathan J. Peterson; Amy L. Rose; Jennifer J. Lee-Baron; Bryan L. Young; John S. Crowe
- Web page: https://patentgrep.com/patent/US11113378B2

## CPC

- G06F 21/36: by graphic or iconic representation
- G06F 21/31: User authentication
- G06F 2221/2101: Auditing as a secondary aspect
- G06F 2221/2103: Challenge-response
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

An approach is disclosed that presents, to a user of a device, content items accessible from the device with the content items being identified as familiar to an actual user of the device. In addition, one or more comparable items are also presented with the comparable items being identified as unfamiliar to the actual user of the device. A response is received from the user at the device that differentiates the content items the comparable items with the user being authenticated, or not, based on the response.

## Claims

### Claim 1

A method comprising:
selecting a plurality of content categories from a set of content categories, wherein one of the selected content categories is an image category and at least one of the selected content categories is a non-image category;
presenting, to a user of a device, a plurality of content items that are identified as being familiar to an actual user of the device and a plurality of comparable items that are identified as being unfamiliar to the actual user of the device, wherein each of the content items and each of the comparable items corresponds to the selected plurality of content categories;
receiving a plurality of responses at the device from the user after the presenting; and
determining a number of correct responses from the plurality of responses, wherein an authentication of the user is based on the number of correct responses.

### Claim 2 (depends on 1)

The method of claim 1 wherein the authentication is performed before allowing the user access to data stored on the device.

### Claim 3 (depends on 1)

The method of claim 1 further comprising:
retrieving the content items from a nonvolatile memory accessible from the device; and
retrieving the comparable items from a computer network accessible from the device.

### Claim 4 (depends on 1)

The method of claim 1 further comprising: performing the presenting, receiving, and determining in response to the user being locked out of the device due to one or more failed login attempts using a primary authentication challenge.

### Claim 5

An information handling system comprising:
one or more processors;
a memory coupled to at least one of the processors;
a set of instructions stored in the memory and executed by at least one of the processors to perform actions comprising:
select a plurality of content categories from a set of content categories, wherein one of the selected content categories is an image category and at least one of the selected content categories is a non-image category;
present, to a user of a device, a plurality of content items that are identified as being familiar to an actual user of the device and a plurality of comparable items that are identified as being unfamiliar to the actual user of the device, wherein each of the content items and each of the comparable items corresponds to the selected plurality of content categories;
receive a plurality of responses at the device from the user after the presenting; and
determine a number of correct responses from the plurality of responses, wherein an authentication of the user is based on the number of correct responses.

### Claim 6 (depends on 5)

The information handling system of claim 5 wherein the actions further comprise:
allow the user access to data stored on the device in response to a successful authentication of the user.

### Claim 7 (depends on 5)

The information handling system of claim 5 wherein the actions further comprise:
retrieve the content items from a nonvolatile memory accessible from the device; and
retrieve the comparable items from a computer network accessible from the device.

### Claim 8 (depends on 5)

The information handling system of claim 5 wherein the actions further comprise: perform the actions to present, receive, and determine in response to the user being locked out of the device due to one or more failed login attempts using a primary authentication challenge.

### Claim 9

A computer program product comprising:
select a plurality of content categories from a set of content categories, wherein one of the selected content categories is an image category and at least one of the selected content categories is a non-image category;
present, to a user of a device, a plurality of content items that are identified as being familiar to an actual user of the device and a plurality of comparable items that are identified as being unfamiliar to the actual user of the device, wherein each of the content items and each of the comparable items corresponds to the selected plurality of content categories;
receive a plurality of responses at the device from the user after the presenting; and
determine a number of correct responses from the plurality of responses, wherein an authentication of the user is based on the number of correct responses.

### Claim 10 (depends on 9)

The computer program product of claim 9 wherein the set of instructions comprise additional instructions effective to:
allow the user access to data stored on the device in response to a successful authentication of the user.

### Claim 11 (depends on 9)

The computer program product of claim 9 wherein the set of instructions comprise additional instructions effective to:
retrieve the content items from a nonvolatile memory accessible from the device; and
retrieve the comparable items from a computer network accessible from the device.