Granted Patent B2

US 8,810,368 · App. 13/074,823 · Granted Aug 19, 2014

Inventors: Sampo Juhani Sovio (Riihimäki, FI); Vesa-Veikko Luukkala (Espoo, FI); Sergey Boldyrev (Söderkulla, FI)

Assignee: Nokia Corporation

Abstract

Claims (69)

1. A method comprising:

determining biometric data from a user equipment associated with a user;

causing decomposition of the biometric data into one or more closure primitives that represent computation closures of one or more processes of the user equipment;

selectively authenticating the user based on the decomposition of the biometric data, wherein the authenticating comprises verifying semantic information;

retrieving media to provide to the user equipment as part of a challenge procedure, wherein the media includes textual information, an image, or a combination thereof;

determining to transmit the media to the user equipment to obtain a response to the challenge procedure, wherein the response includes the biometric data;

wherein the biometric data includes a voiceprint, an utterance, and the textual information includes one or more words;

verifying the voiceprint as part of the challenge procedure;

verifying the textual information based on the voiceprint as part of the challenge procedure; and

verifying the semantic information presented in the utterance as part of the challenge procedure.

2. The method of claim 1 , further comprising:

tracking a response period associated with the response to the challenge procedure; and

determining a failed authentication based on the response period.

3. The method of claim 1 , wherein the voiceprint further represents one or more utterances associated with a spelling of the one or more words, the method further comprising:

mapping the one or more utterances to one or more words stored in a dictionary database.

4. The method of claim 3 , the method further comprising:

randomly selecting the one or more words from the dictionary database.

5. The method of claim 1 , wherein the challenge procedure is a second challenge procedure, the method further comprising:

initiating a first challenge procedure to authenticate the user; and

initiating the second challenge procedure using the biometric data to authenticate the user,

wherein the second challenge procedure is initiated if the first challenge procedure fails to complete within a predetermined time period.

6. An apparatus comprising:

at least one processor; and

at least one memory including computer program code,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

determine biometric data from a user equipment associated with a user,

cause decomposition of the biometric data into one or more closure primitives that represent computation closures of one or more processes of the user equipment,

selectively authenticate the user based on the decomposition of the biometric data, wherein the authenticating comprises verifying semantic information;

retrieve media to provide to the user equipment as part of a challenge procedure, wherein the media includes textual information, an image, or a combination thereof;

determine to transmit the media to the user equipment to obtain a response to the challenge procedure, wherein the response includes the biometric data;

wherein the biometric data includes a voiceprint, an utterance, and the textual information includes one or more words,

verify the voiceprint as part of the challenge procedure;

verify the textual information based on the voiceprint as part of the challenge procedure; and

verify the semantic information presented in the utterance as part of the challenge procedure.

7. The apparatus of claim 6 , wherein the apparatus is further caused to perform:

track a response period associated with the response to the challenge procedure; and

determine a failed authentication based on the response period.

8. The apparatus of claim 6 , wherein the voiceprint further represents one or more utterances associated with a spelling of the one or more words, and the apparatus is further caused to perform:

map the one or more utterances to the one or more words stored in a dictionary database.

9. The apparatus of claim 8 , further configured to randomly select the one or more words from a dictionary database.

10. The apparatus of claim 6 , wherein the challenge procedure is a second challenge procedure, and the apparatus is further caused to perform:

initiate a first challenge procedure to authenticate the user; and

initiate the second challenge procedure using the biometric data to authenticate the user,

wherein the second challenge procedure is initiated if the first challenge procedure fails to complete within a predetermined time period.

11. A method comprising:

receiving, at a user equipment, an input signal representing biometric data associated with a user;

generating a message including the biometric data for transmission to an authentication service, the biometric data being decomposed into one or more closure primitives that represent computation closures of one or more processes of the user equipment, wherein the user is authenticated based on the decomposition of the biometric data, and wherein the user is authenticated based on verifying semantic information;

receiving a request for the biometric data as part of a challenge procedure, wherein the request specifies media that includes textual information, an image or a combination thereof;

wherein the biometric data is provided as part of the message in response to the request specifying the media;

wherein the input signal provides a voiceprint, an utterance, and the textual information includes one or more words;

verifying the voiceprint as part of the challenge procedure;

verifying the textual information based on the voiceprint as part of the challenge procedure; and

verifying the semantic information presented in the utterance as part of the challenge procedure.

12. The method of claim 11 , wherein the voiceprint further represents one or more utterances associated with a spelling of the textual information or a description of the image.

13. The method of claim 11 , wherein the challenge procedure is executed after another challenge procedure is terminated based on expiration of a predetermined timer value.

14. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs;

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

receive, at a user equipment, an input signal representing biometric data associated with a user,

generate a message including the biometric data for transmission to an authentication service, the biometric data being decomposed into one or more closure primitives that represent computation closures of one or more processes of the user equipment, wherein the user is authenticated based on the decomposition of the biometric data, and wherein the user is authenticated based on verifying semantic information;

receive a request for the biometric data as part of a challenge procedure, wherein the request specifies media that includes textual information, an image, or a combination thereof;

wherein the biometric data is provided as part of the message in response to the request specifying media;

wherein the input signal provides a voiceprint, an utterance, and the textual information includes one or more words;

verifying the voiceprint as part of the challenge procedure;

verifying the textual information based on the voiceprint as part of the challenge procedure; and

verifying the semantic information presented in the utterance as part of the challenge procedure.

15. The apparatus of claim 14 , wherein the voiceprint further represents one or more utterances associated with a description of the image.

16. The apparatus of claim 14 , wherein the challenge procedure is executed after another challenge procedure is terminated based on expiration of a predetermined timer value, and wherein the authentication service further comprises a semantic module configured to process the semantic information.

Assignments (8)

Continuity (1)