Granted Patent B1

US 8,533,815 · App. 12/365,102 · Granted Sep 10, 2013

Abstract

Claims (43)

1. A method comprising:

denying access to a resource upon a failure of a biometric based keystroke timing authentication;

generating a one-time password to be transmitted to a user;

transmitting a message including the one-time password to the user in response to denying access;

receiving a response message for determining an identity of the user;

confirming the identity of the user based on the response message; and

granting access to the resource in response to the identity of the user being confirmed, wherein confirming the identity of the user is based on the response message matching the one-time password.

2. The method of claim 1 , further comprising:

expiring the one-time password after granting access.

3. The method of claim 1 , further comprising:

expiring the one-time password after a predetermined time period; and

denying access to the resource in response to receiving the expired one-time password.

4. The method of claim 1 , further comprising:

selecting a question to be transmitted in the message to the user;

confirming the identity of the user based on the response message; and

granting access to the resource in response to the identity of the user being confirmed.

5. The method of claim 4 , wherein the identity of the user is confirmed by determining content in the response message matches a predetermined answer to the question submitted in the message to the user.

6. A method comprising:

transmitting a subset of messages to a user, wherein the subset of messages include a plurality of questions from a predefined list of knowledge-based authentication questions;

receiving responses for the subset of message from the user, wherein the responses are a plurality of different answers to the questions and include information based upon personal knowledge of the user;

storing each received response to correspond with a respective message of the subset of message; and

using the subset of messages for a non-biometric based authentication of the user, wherein using the subset of messages for the non-biometric based authentication occurs after a failure of a biometric based authentication of the user.

7. The method of claim 6 , wherein transmitting the subset of messages occurs during enrollment of the user.

8. The method of claim 7 , wherein enrollment of the user results in a keystroke dynamics template containing timing information of key-press and key-release events.

9. The method of claim 8 , wherein the keystroke dynamics template includes data representing key dwell times and key flight times.

10. A non-transitory computer-readable medium storing data and instructions to cause a programmable processor to perform operations comprising:

denying access to a resource upon a failure of a biometric based keystroke timing authentication;

generating a one-time password to be transmitted to a user;

transmitting a message including the one-time password to the user in response to denying access;

receiving a response message for determining an identity of the user;

confirming the identity of the user based on the response message; and

granting access to the resource in response to the identity of the user being confirmed, wherein confirming the identity of the user is based on the response message matching the one-time password.

11. The non-transitory computer-readable medium of claim 10 , including further operations comprising:

expiring the one-time password after granting access.

12. The non-transitory computer-readable medium claim 10 , including further operations comprising:

adding the timing information into a vector containing scalar quantities corresponding to collected timing information of key-press and key-release events.

expiring the one-time password after a predetermined time period; and

denying access to the resource in response to receiving the expired one-time password.

13. The non-transitory computer-readable medium of claim 10 , including further operations comprising:

selecting a question to be transmitted in the message to the user;

confirming the identity of the user based on the response message; and

granting access to the resource in response to the identity of the user being confirmed.

14. The non-transitory computer-readable medium of claim 13 , wherein the identity of the user is confirmed by determining content in the response message matches a predetermined answer to the question submitted in the message to the user.

Assignments (13)