Providing authentication codes which include token codes and biometric factors

An electronic apparatus, comprising:

• input/output (IO) circuitry;
• memory which stores a cryptographic key;
• and
• a controller coupled to the IO circuitry and the memory, the controller being constructed and arranged to:
• generate token codes from the cryptographic key,
• obtain biometric measurements from a user through the IO circuitry, and
• output, as authentication codes, composite passcodes through the IO circuitry;
• wherein the composite passcodes include the token codes and biometric factors based on the biometric measurements;
• wherein the token codes and the biometric factors of the composite passcodes act as authentication inputs to user authentication operations performed by an authentication server;
• wherein the controller, when obtaining the biometric measurements from the user, is constructed and arranged to capture, via the IO circuitry, a set of current typing samples from the user during a current authentication attempt;
• wherein the controller is further constructed and arranged to identify, using a typing recognition application, a deliberate mistyping and typing correction event provided by the user;
• and
• wherein the controller, when outputting the composite passcodes as the authentication codes, is constructed and arranged to provide an alert to signal user distress to the authentication server in response to identification of the deliberate mistyping and typing correction event.

A computer program product which includes a non-transitory computer readable medium storing a set of instructions to provide authentication codes to authenticate a user to an authentication server, the set of instructions causing computing circuitry to perform a method, comprising:

• generating, by the computing circuitry, token codes from a cryptographic key;
• obtaining, by the computing circuitry, biometric measurements from a user;
• and
• outputting, by the computing circuitry, composite passcodes as the authentication codes;
• wherein the composite passcodes include the token codes and biometric factors based on the biometric measurements;
• wherein the token codes and the biometric factors of the composite passcodes act as authentication inputs to user authentication operations performed by the authentication server;
• wherein obtaining the biometric measurements from the user includes capturing a set of current typing samples from the user during a current authentication attempt;
• wherein the method further comprises identifying, using a typing recognition application, a deliberate mistyping and typing correction event provided by the user;
• and
• wherein outputting the composite passcodes as the authentication codes includes providing an alert to signal user distress to the authentication server in response to identification of the deliberate mistyping and typing correction event.

A method of providing authentication codes to authenticate a user to an authentication server, the method comprising:

• generating, by an electronic apparatus, token codes from a cryptographic key;
• obtaining, by the electronic apparatus, biometric measurements from a user;
• and
• outputting, by the electronic apparatus, composite passcodes as the authentication codes;
• wherein the composite passcodes include the token codes and biometric factors based on the biometric measurements;
• wherein the token codes and the biometric factors of the composite passcodes act as authentication inputs to user authentication operations performed by the authentication server
• wherein obtaining the biometric measurements from the user includes capturing a set of current typing samples from the user during a current authentication attempt;
• wherein the method further comprises identifying, using a typing recognition application, a deliberate mistyping and typing correction event provided by the user;
• and
• wherein outputting the composite passcodes as the authentication codes includes providing an alert to signal user distress to the authentication server in response to identification of the deliberate mistyping and typing correction event.