Combining biometrics, hidden knowledge and intent to authenticate

A computing device, comprising:

• one or more sensors configured to collect biometric information regarding a user of the computing device;
• a biometric authenticator configured to:
• evaluate one or more authentication factors including an identity of the user, an intent of the user to authenticate, and possession of secret knowledge by the user based at least in part on the biometric information that includes a measure of a response time of the user to at least a part of a stimulus;
• generate an authentication score based at least in part on the evaluation of the one or more authentication factors;
• and
• determine that the intent of the user to authenticate includes duress indicia based at least in part on the evaluation of the one or more authentication factors;
• wherein the computing device is configured to:
• provide the user with access to a first data of the user based at least in part on the authentication score;
• and
• prevent access by the user to a second data of the user, based at least in part on the duress indicia, by hiding the second data of the user for a predetermined period of time regardless of a number of authentication attempts made by the user.

A computer program product comprising a computer-readable memory device having computer program logic recorded thereon that when executed by at least one processor of a computing device causes the at least one processor to perform operations, the operations comprising:

• presenting a stimulus to a user to be authenticated;
• gathering biometric data regarding the user;
• generating a measure of the user's reaction to the stimulus based at least in part on the biometric data that includes a measure of a response time of the user to at least a part of the stimulus;
• generating an authentication score based at least in part on an evaluation of one or more authentication factors including an identity of the user, an intent of the user to authenticate and possession of secret knowledge by the user, wherein the evaluation of the one or more authentication factors is based at least in part the measure of the user's reaction to the stimulus;
• determining that the intent of the user to authenticate includes duress indicia based at least in part on the evaluation of the one or more authentication factors;
• providing the user with access to a first data of the user based at least in part on the authentication score;
• and
• preventing access by the user to a second data of the user, based at least in part on the duress indicia, by hiding the second data of the user for a predetermined period of time regardless of a number of authentication attempts made by the user.