US 2019/0098501 A1Published application

Challenge-response authentication based on internet of things information

AssigneeInternational Business Machines Corporation

InventorsRhonda L. Childress, Itzhack Goldberg, Boaz Mizrachi, Clifford A. Pickover, Neil Sondhi

Life of this patent

Estimating the term…

Loading patent…

Abstract

Approaches presented herein enable challenge-response authentication of a user based on information captured by a personal internet of things (IoT) device set associated with the user. Specifically, in one approach, a personal IoT device set comprising at least one device records and stores data associated with a user. The data is synchronized and stored to a computerized authentication system, which prompts the user with an authentication question based on the synchronized and stored data. The user may find an answer to the authentication question by reviewing data recorded and stored in the device of the personal IoT device set. The user may then enter the found answer to the authentication question, thereby authenticating the user. The personal IoT device set may comprise a single device or may comprise a plurality of devices, the information of one of which may be selected as the basis of the authentication question.

Claims20

Dependent claims

A computer-implemented method for authenticating a user, the method comprising:

identifying a set of internet of things devices associated with a user that dynamically track data points of the user over a period of time;
receiving a request initiated by a party claiming to be the user to authenticate the party as the user and a designation from the requesting party of at least one device of the set of internet of things devices as currently accessible to the requesting party, the designated at least one device being configured to permit the requesting party to review a data log on the device to find a previous data point;
generating an authentication question in a natural language, the answer to which is a data point selected from dynamically tracked data points of the user on the at least one device designated as accessible to the requesting party, wherein the selected data point is discoverable to the requesting party by viewing dynamically tracked data points on a display of the designated device, and wherein a correct answer to the authentication question corresponds to the selected data point tracked with the designated internet of things device;
prompting the requesting party to find the data point on the designated device by presenting the authentication question to the requesting party in a natural language, the data point being the answer to the authentication question;
and
authenticating the requesting party as the user in the case that the requesting party returns the correct answer to the authentication question.

3 more elements

A computer system for authenticating a user, the computer system comprising:

a memory medium comprising program instructions;
a bus coupled to the memory medium;
and
a processor, for executing the program instructions, coupled to a challenge-response authentication tool via the bus that when executing the program instructions causes the system to:
identify a set of internet of things devices associated with a user that dynamically track data points of the user over a period of time;
receive a request initiated by a party claiming to be the user to authenticate the party as the user and a designation from the requesting party of at least one device of the set of internet of things devices as currently accessible to the requesting party, the designated at least one device being configured to permit the requesting party to review a data log on the device to find a previous data point;
generate an authentication question in a natural language, the answer to which is a data point selected from dynamically tracked data points of the user on the at least one device designated as accessible to the requesting party, wherein the selected data point is discoverable to the requesting party by viewing dynamically tracked data points on a display of the designated device, and wherein a correct answer to the authentication question corresponds to the selected data point tracked with the designated internet of things device;
prompt the requesting party to find the data point on the designated device by presenting the authentication question to the requesting party in a natural language, the data point being the answer to the authentication question;
and
authenticate the requesting party as the user in the case that the requesting party returns the correct answer to the authentication question.

7 more elements

A computer program product for authenticating a user, the computer program product comprising a computer readable storage device, and program instructions stored on the computer readable storage device, to:

identify a set of internet of things devices associated with a user that dynamically track data points of the user over a period of time;
receive a request initiated by a party claiming to be the user to authenticate the party as the user and a designation from the requesting party of at least one device of the set of internet of things devices as currently accessible to the requesting party, the designated at least one device being configured to permit the requesting party to review a data log on the device to find a previous data point;
generate an authentication question in a natural language, the answer to which is a data point selected from dynamically tracked data points of the user on the at least one device designated as accessible to the requesting party, wherein the selected data point is discoverable to the requesting party by viewing dynamically tracked data points on a display of the designated device, and wherein a correct answer to the authentication question corresponds to the selected data point tracked with the designated internet of things device;
prompt the requesting party to find the data point on the designated device by presenting the authentication question to the requesting party in a natural language, the data point being the answer to the authentication question;
and
authenticate the requesting party as the user in the case that the requesting party returns the correct answer to the authentication question.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/198,061Filed 21 Nov 2018
Priority: 27 Apr 2015
Published: 28 Mar 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04W 12/06
Security arrangements; Authentication; Protecting privacy or anonymity: authentication
G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
H04L 63/0853
For authentication of entities: using an additional device, e.g. smartcard, SIM or a different communication terminal
G06F 21/316
User authentication: by observing the pattern of computer usage, e.g. typical user behaviour

Family

Application14/696,797Continuation · filed 27 Apr 2015
Application16/198,061Continuation
US 10,231,122 B2Related patent
US 10,548,011 B2Related patent
US 2016/0315929 A1Published application
US 2019/0098501 A1This patent

From the US filing history. Foreign family members aren’t listed.