# US 11,308,187 B2 · User authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,308,187 B2 - Document ID: US11308187B2 - Status: Granted - Kind: B2 - Application number: 16/473,332 - Filed: 2017-04-11 - Published: 2021-09-09 - Granted: 2022-04-19 - Earliest claimed: 2017-04-11 - Applicants: Hewlett-Packard Development Company, L.P. - Inventors: Gurchetan Grewal; Daniel Ellam; Joshua S. Schiffman; James M. Mann - Web page: https://patentgrep.com/patent/US11308187B2 ## CPC - G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour} - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - G06F 21/31: User authentication - G06F 21/45: Structures or tools for the administration of authentication - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/105: {Multiple levels of security} - G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS - G06F 2221/2117: User registration - G06V 40/12: Fingerprints or palmprints - G06V 40/172: {Classification, e.g. identification} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)} - H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06V: IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING ## Abstract Examples associated with user authentication are described. One example system includes a set of authentication modules. A data store stores data describing disruption ratings of members of the set of authentication modules. A user confidence module maintains a confidence rating that a current user of a device is an authenticated user of the device. The confidence module controls execution of the authentication modules based on the confidence rating and on the disruption ratings of the authentication modules. The user confidence module controls execution of relatively less disruptive authentication modules when the user confidence module is confident that the current user of the device is the authenticated user of the device. The user confidence module maintains the confidence rating based on feedback received from authentication modules. ## Claims ### Claim 1 A system comprising: a plurality of authentication modules; a data store to store disruption ratings and resource consumption ratings of respective authentication modules of the plurality of authentication modules, wherein the resource consumption ratings comprise a first resource consumption rating indicating a first resource consumption of a resource of a device by a first authentication module of the plurality of authentication modules, and a second resource consumption rating indicating a different second resource consumption of the resource of the device by a different second authentication module of the plurality of authentication modules; a processor; and a non-transitory storage medium storing instructions executable on the processor to: maintain a confidence rating that a current user of the device is an authenticated user of the device, and in response to the confidence rating, select an authentication module from among the plurality of authentication modules based on the disruption ratings and the resource consumption ratings of the respective authentication modules. ### Claim 2 (depends on 1) The system of claim 1, wherein the plurality of authentication modules comprises one or more of: a typing analysis module, a tapping analysis module, a trackpad analysis module, a mouse usage analysis module, a face recognition module, a voice recognition module, a fingerprint recognition module, a device detection module, a password module, and a location detection module. ### Claim 3 (depends on 1) The system of claim 1, wherein the data store is to further store privacy ratings of the respective authentication modules, and wherein the instructions are executable on the processor to select the authentication module from among the plurality of authentication modules based further on the privacy ratings, wherein a relatively less privacy invasive authentication module is selected responsive to a higher confidence rating that the current user of the device is the authenticated user of the device. ### Claim 4 (depends on 1) The system of claim 1, wherein the instructions are executable on the processor to restrict access to the device responsive to the confidence rating reaching a specified threshold. ### Claim 5 (depends on 1) The system of claim 1, wherein the instructions are executable on the processor to select the authentication module from among the plurality of authentication modules further based on a current usage pattern of the device. ### Claim 6 (depends on 5) The system of claim 5, where the current usage pattern of the device comprises one or more of: a running application, positioning information, environmental information, and movement information. ### Claim 7 A method comprising: setting, by a device, a confidence rating related to whether a current user of the device is an authenticated user; accessing, by the device, resource consumption ratings of respective authentication techniques of a plurality of authentication techniques, wherein the resource consumption ratings comprise a first resource consumption rating indicating a first resource consumption of a resource of the device by a first authentication technique of the plurality of authentication techniques, and a second resource consumption rating indicating a different second resource consumption of the resource of the device by a different second authentication technique of the plurality of authentication techniques; selecting, by the device, from the plurality of authentication techniques, a selected authentication technique for determining whether the current user of the device is the authenticated user of the device, where the selecting is based on comparing the resource consumption ratings of the respective authentication techniques; executing, by the device, the selected authentication technique; and updating, by the device, the confidence rating based on a result received from the selected authentication technique that indicates a likelihood that the current user is the authenticated user. ### Claim 8 (depends on 7) The method of claim 7, comprising restricting access to the device responsive to the updated confidence rating reaching a specified threshold. ### Claim 9 (depends on 7) The method of claim 7, comprising restricting access to a resource available to the device responsive to the updated confidence rating reaching a specified threshold. ### Claim 10 (depends on 7) The method of claim 7, wherein the selecting of the selected authentication technique is further based on privacy ratings for the respective authentication techniques, wherein a relatively less invasive authentication technique is selected responsive to the confidence rating indicating that the current user is the authenticated user. ### Claim 11 A non-transitory computer-readable medium storing processor executable instructions that when executed cause a system to: set a confidence rating related to whether a current user of a device is an authenticated user; access disruption ratings and resource consumption ratings of respective authentication techniques of a plurality of authentication techniques, wherein the resource consumption ratings comprise a first resource consumption rating indicating a first resource consumption of a resource of the device by a first authentication technique of the plurality of authentication techniques, and a second resource consumption rating indicating a different second resource consumption of the resource of the device by a different second authentication technique of the plurality of authentication techniques; in response to the confidence rating, select an authentication technique from the plurality of authentication techniques, wherein the selecting comprises: in response to the confidence rating being at a first level, selecting the first authentication technique based on a first disruption rating and the first resource consumption rating of the first authentication technique, wherein the first disruption rating indicates that the first authentication technique is less disruptive than the second authentication technique, and the first resource consumption rating indicates that the first authentication technique consumes less of the resource than the second authentication technique, and in response to the confidence rating being at a second level lower than the first level, selecting the second authentication technique based on a second disruption rating and the second resource consumption rating of the second authentication technique; and update the confidence rating based on a result received from the first selected authentication technique. ### Claim 12 (depends on 1) The system of claim 1, wherein the resource comprises one or a combination of a processor, a memory, or an input/output (I/O) device, the first resource consumption rating indicates the first resource consumption of the one or the combination of the processor, the memory, or the I/O device by the first authentication module, and the second resource consumption rating indicates the second resource consumption of the one or the combination of the processor, the memory, or the I/O device by the second authentication module. ### Claim 13 (depends on 1) The system of claim 1, wherein the instructions are executable on the processor to: in response to the confidence rating being at a first level, select the first authentication module based on a first disruption rating and the first resource consumption rating of the first authentication module, wherein the first disruption rating indicates that the first authentication module is less disruptive than the second authentication module, and the first resource consumption rating indicates that the first authentication module consumes less of the resource than the second authentication module, and in response to the confidence rating being at a second level lower than the first level, select the second authentication module based on a second disruption rating and the second resource consumption rating of the second authentication module. ### Claim 14 (depends on 1) The system of claim 1, wherein the instructions are executable on the processor to: update the confidence rating based on comparing an input pattern at the device to a historical input pattern, wherein the input pattern at the device comprises a pattern of one or more of a user typing pattern, a mouse pattern, or a tapping pattern on a touch input device. ### Claim 15 (depends on 1) The system of claim 1, wherein the instructions are executable on the processor to: select the authentication module from among the plurality of authentication modules further based on a current usage pattern that comprises which of plural applications is running on the device, wherein the selected authentication module does not rely on a user input responsive to the current usage pattern indicating that an application running is one where a user is not actively interacting with an input device. ### Claim 16 (depends on 7) The method of claim 7, comprising: in response to the confidence rating being at a first level, selecting, by the device, the first authentication technique based on the first resource consumption rating indicating that the first authentication technique consumes less of the resource than the second authentication technique, and in response to the confidence rating being at a second level lower than the first level, selecting, by the device, the second authentication technique based on the second resource consumption rating. ### Claim 17 (depends on 7) The method of claim 7, comprising: updating, by the device, the confidence rating based on comparing an input pattern at the device to a historical input pattern, wherein the input pattern at the device comprises a pattern of one or more of a user typing pattern, a mouse pattern, or a tapping pattern on a touch input device. ### Claim 18 (depends on 7) The method of claim 7, comprising: selecting, by the device, the authentication technique from among the plurality of authentication techniques further based on a current usage pattern that comprises which of plural applications is running on the device, wherein the selected authentication technique does not rely on a user input responsive to the current usage pattern indicating that an application running is one where a user is not actively interacting with an input device. ### Claim 19 (depends on 11) The non-transitory computer-readable medium of claim 11, wherein the instructions when executed cause the system to: update the confidence rating based on comparing an input pattern at the device to a historical input pattern, wherein the input pattern at the device comprises a pattern of one or more of a user typing pattern, a mouse pattern, or a tapping pattern on a touch input device. ### Claim 20 (depends on 11) The non-transitory computer-readable medium of claim 11, wherein the instructions when executed cause the system to: select the authentication technique from among the plurality of authentication techniques further based on a current usage pattern that comprises which of plural applications is running on the device, wherein the selected authentication module does not rely on a user input responsive to the current usage pattern indicating that an application running is one where a user is not actively interacting with an input device.