Techniques of providing authentication from computer pointer interactions

A computer program product to provide user authentication, the computer program product comprising a non-transitory computer readable storage medium which stores a set of instructions which is constructed and arranged to direct operation of a computerized device, the set of instructions including:

• instructions to generate a pointer data profile entry in a pointer data profile database, the pointer data profile entry including a pointer data profile which is based on first pointer data obtained during a first user session;
• instructions to receive new pointer data during a second user session;
• and
• instructions to perform an authentication operation based on (i) the pointer data profile entry in the pointer data profile database and (ii) the new pointer data to determine whether a user providing the first pointer data during the first user session and a user providing the new pointer data during the second user session is the same person;
• wherein the second user session includes a login segment to authenticate a user, and after successful user authentication, a separate ongoing segment to gather new pointer data for a continued authentication operation after the login segment of the second user session;
• wherein the first pointer data includes a first series of movement events collected by an event collector circuit from a pointing device during the first user session;
• wherein the new pointer data includes a second series of movement events collected by the event collector circuit from the pointing device during the second user session;
• wherein receiving the new pointer data during the second user session includes obtaining the second series of movement events by the authenticator circuit from the event collector circuit while the pointing device directs movement of a pointer graphic on a display screen during the second user session;
• wherein receiving the new pointer data includes acquiring the new pointer data during the login segment prior to the ongoing segment;
• wherein performing the authentication operation includes successfully authenticating the user providing the new pointer data during the login segment and prior to the ongoing segment;
• and
• wherein the method further comprises, after the login segment and during the ongoing segment, receiving additional pointer data and performing another authentication operation based on the pointer data profile entry in the pointer data profile database and the additional pointer data.

A server apparatus, comprising:

• a network interface;
• memory which stores a pointer data profile database;
• and
• processing circuitry coupled to the network interface and the memory, the processing circuitry being constructed and arranged to:
• generate a pointer data profile entry in the pointer data profile database, the pointer data profile entry including a pointer data profile which is based on first pointer data obtained through the network interface during a first user session,
• receive new pointer data through the network interface during a second user session, and
• perform an authentication operation based on (i) the pointer data profile entry in the pointer data profile database and (ii) the new pointer data to determine whether a user providing the first pointer data during the first user session and a user providing the new pointer data during the second user session is the same person;
• wherein the second user session includes a login segment to authenticate a user, and after successful user authentication, a separate ongoing segment to gather new pointer data for a continued authentication operation after the login segment of the second user session;
• wherein the first pointer data includes a first series of movement events collected by an event collector circuit from a pointing device during the first user session;
• wherein the new pointer data includes a second series of movement events collected by the event collector circuit from the pointing device during the second user session;
• wherein receiving the new pointer data during the second user session includes obtaining the second series of movement events by the authenticator circuit from the event collector circuit while the pointing device directs movement of a pointer graphic on a display screen during the second user session;
• wherein receiving the new pointer data includes acquiring the new pointer data during the login segment prior to the ongoing segment;
• wherein performing the authentication operation includes successfully authenticating the user providing the new pointer data during the login segment and prior to the ongoing segment;
• and
• wherein the method further comprises, after the login segment and during the ongoing segment, receiving additional pointer data and performing another authentication operation based on the pointer data profile entry in the pointer data profile database and the additional pointer data.

A client apparatus, comprising:

• a network interface;
• a pointing device;
• and
• processing circuitry coupled to the network interface and the pointing device, the processing circuitry being constructed and arranged to:
• provide first pointer data during a first user session to generate a pointer data profile entry in a pointer data profile database, the pointer data profile entry including a pointer data profile which is based on the first pointer data obtained during a first user session,
• provide new pointer data through the network interface during a second user session, and
• request authentication based on (i) the pointer data profile entry in the pointer data profile database and (ii) the new pointer data to determine whether a user providing the first pointer data during the first user session and a user providing the new pointer data during the second user session is the same person;
• wherein the second user session includes a login segment to authenticate a user, and after successful user authentication, a separate ongoing segment to gather new pointer data for a continued authentication operation after the login segment of the second user session;
• wherein the first pointer data includes a first series of movement events collected by an event collector circuit from a pointing device during the first user session;
• wherein the new pointer data includes a second series of movement events collected by the event collector circuit from the pointing device during the second user session;
• wherein receiving the new pointer data during the second user session includes obtaining the second series of movement events by the authenticator circuit from the event collector circuit while the pointing device directs movement of a pointer graphic on a display screen during the second user session;
• wherein receiving the new pointer data includes acquiring the new pointer data during the login segment prior to the ongoing segment;
• wherein performing the authentication operation includes successfully authenticating the user providing the new pointer data during the login segment and prior to the ongoing segment;
• and
• wherein the method further comprises, after the login segment and during the ongoing segment, receiving additional pointer data and performing another authentication operation based on the pointer data profile entry in the pointer data profile database and the additional pointer data.