Mobile touch authentication refresh
AssigneeNetIQ Corporation
InventorsLloyd Leon Burch, Michael F. Angelo, Baha Masoud
Life of this patent
Estimating the term…
Abstract
Techniques for resetting authentication for touch-enabled devices are presented. When a user authenticates to a mobile device a touch profile (TP) is recorded. Each subsequent time the user unlocks a locked mobile device via touch, a new TP is noted. The new TP is compared to the recorded TP and if the deviation is within an acceptable tolerance, the user is permitted access to the mobile device without re-authentication. When the new TP is not within the acceptable tolerance of the recorded TP, the user is forced to re-authenticate before access is granted to the mobile device.
Claims17
A method implemented executable instructions and programmed within a non-transitory computer-readable that is executed by a device, the method, comprising:
- recording, from the device, a touch profile (TP) of a user, and wherein recording further includes capturing an electrical capacitance pattern for the user that is unique to the user and the electrical capacitance pattern based on multiple touch interactions, the electrical capacitance pattern representing the TP, and wherein capturing further includes measuring an interaction of frequencies with the biochemical makeup of the user as the electrical capacitance pattern, the TP changes for the user over time but remains unique to the user;
- comparing, via the device, the TP to a previous TP recorded for the user during a last use by the user accessing the device;
- recognizing, via the device, the user based on the comparison, wherein recognizing further includes varying a time out on the device that requires the user to authenticate with the device based on a difference between the TP and the previous TP, wherein the time out includes a longer time out as the difference grows smaller and a shorter time out as the difference grows larger and the time out is immediate when the difference is identified as being beyond a threshold value;
- and
- continuously updating the TP while the user is actively using the device.
A method implemented executable instructions and programmed within a non-transitory computer-readable storage medium that is executed by a server, the method, comprising:
- registering, at the server, a touch profile (TP) for a user of a mobile device, wherein registering further includes capturing, by the mobile device, an electrical capacitance pattern for the user that is unique to the user and the electrical capacitance pattern based on multiple touch interactions, the electrical capacitance pattern representing the TP, and wherein capturing further includes measuring, by the mobile device, an interaction of frequencies with the biochemical makeup of the user as the electrical capacitance pattern, the TP changes for the user over time but remains unique to the user and the TP is continuously updated, by the mobile device, while the user is actively using the mobile device;
- receiving, at the server, from the mobile device a new TP;
- and
- instructing, from the server, the mobile device to either extend a reset authentication request for the user on the mobile device or force the reset based on evaluation of the registered TP and the new TP, wherein extending further includes providing a time out period for the reset to the mobile device based on a difference between the registered TP and the new TP and as the difference grows smaller the time out period grows larger and as the difference grows larger the time out period grows shorter and when the difference is beyond a threshold value, the time out period is immediate.
A system, comprising:
- a non-transitory computer-readable storage medium configured with a touch profile (TP) manager that executes on one or more processors of a mobile device;
- wherein the TP manager is configured to manage and automatically capture TPs of a user of the mobile device and evaluate based on policy and the touch profiles whether re-authentication is necessitated by the user, and wherein each captured TP includes capturing an electrical capacitance pattern for the user that is unique to that user and the electrical capacitance pattern based on multiple touch interactions of that user, the electrical capacitance pattern representing the TP, and wherein each captured TP further includes measuring an interaction of frequencies with the biochemical makeup of the user as the electrical capacitance pattern, each TP changes for the user over time but remains unique to the user and the TPs are continuously updated while the user actively uses the mobile device, and the TP manager is configured to set a time out period based on a current difference between a captured TO and a registered TP, wherein the time out period grows larger as the difference is smaller and the time out period grows smaller as the difference is larger and the time out period is immediate when the difference is identified as being beyond a threshold value.
Dependencies are inferred from the claim text.