Stimuli-Response-Driven Authentication Mechanism
A stimuli-response-driven authentication mechanism is implemented in a communication system including a user platform and a trusted external platform operably connected to an authentication platform. The authentication mechanism is implemented in an initialization phase and authentication phase. In the initialization phase, a user is exposed to a first set of external stimuli (e.g., image data) and data characterizing the user's physiological responses are obtained (in a high-security implementation, by the trusted external platform). In the authentication phase, the user is exposed to a second set of external stimuli (e.g., a subset of the first set) and data characterizing the user's physiological responses are obtained, and instances of the authentication data are compared to corresponding instances of the initialization data to authenticate the user.
1 . An apparatus comprising:
a memory; and
at least one processor coupled to the memory and configured to:
coincident to an initialization protocol, obtain biometric initialization data characterizing at least in part, a user's physiological responses to a first set of external stimuli;
coincident to an authentication protocol:
obtain biometric authentication data characterizing at least in part, a user's physiological responses to a second set of external stimuli, wherein the second set includes one or more instances of external stimuli selected from the first set;
compare the biometric authentication data to corresponding instances of the biometric initialization data; and
authenticate the user if one or more instances of the biometric authentication data sufficiently corresponds to corresponding instances of the biometric initialization data.
2 . The apparatus of claim 1 , wherein the processor resides in one or more of:
a user platform;
a trusted external platform; and
an authentication platform residing remotely from the user platform.
3 . The apparatus of claim 2 , wherein the processor resides in the authentication platform, and wherein:
coincident to the initialization protocol, the processor is configured to receive the biometric initialization data from one of the user platform and external platform, the one of the user platform and external platform having issued one or more initialization challenges, whereby the user is exposed to the first set of external stimuli, and whereby the user's physiological responses to the first set of external stimuli are measured to obtain the biometric initialization data.
4 . The apparatus of claim 2 , wherein the processor resides in one of the user platform and external platform, and wherein:
coincident to the initialization protocol, the processor is configured to issue one or more initialization challenges, whereby the user is exposed to the first set of external stimuli, and whereby the user's physiological responses to the first set of external stimuli are measured to obtain the biometric initialization data.
5 . The apparatus of claim 2 , wherein the processor resides in the authentication platform, and wherein coincident to the authentication protocol, the processor is configured to:
identify the second set of external stimuli;
instruct one of the user platform and external platform to issue one or more authentication challenges, whereby the user is to be exposed to the second set of external stimuli, and whereby the user's physiological responses to the second set of external stimuli are measured to obtain the biometric authentication data; and
receive the biometric authentication data from one of the user platform and external platform.
6 . The apparatus of claim 2 , wherein the processor resides in the authentication platform, and wherein coincident to the authentication protocol, the processor is configured to receive the biometric authentication data from one of the user platform and external platform, the one of the user platform and external platform having identified the second set of external stimuli and having issued one or more authentication challenges, whereby the user is exposed to the second set of external stimuli, and whereby the user's physiological responses to the second set of external stimuli are measured to obtain the biometric initialization data.
7 . The apparatus of claim 2 , wherein the processor resides in one of the user platform and external platform, and wherein:
coincident to the authentication protocol, the processor is configured to issue one or more authentication challenges, whereby the user is exposed to the second set of external stimuli, and whereby the user's physiological responses to the second set of external stimuli are measured to obtain the biometric initialization data.
8 . A method, performed by one or more of a user platform, a trusted external platform, and an authentication platform residing remotely from the user platform, comprising:
coincident to an initialization protocol, obtaining biometric initialization data characterizing at least in part, a user's physiological responses to a first set of external stimuli;
coincident to an authentication protocol:
obtaining biometric authentication data characterizing at least in part, a user's physiological responses to a second set of external stimuli, wherein the second set includes one or more instances of external stimuli selected from the first set;
comparing the biometric authentication data to corresponding instances of the biometric initialization data; and
authenticating the user if one or more instances of the biometric authentication data sufficiently corresponds to corresponding instances of the biometric initialization data.
9 . The method of claim 8 , performed by the authentication platform, wherein:
coincident to the initialization protocol, the authentication platform receives the biometric initialization data from one of the user platform and external platform, the one of the user platform and external platform having issued one or more initialization challenges, whereby the user is exposed to the first set of external stimuli, and whereby the user's physiological responses to the first set of external stimuli are measured to obtain the biometric initialization data.
10 . The method of claim 8 , performed by one of the user platform and external platform, wherein:
coincident to the initialization protocol, the one of the user platform and external platform issues one or more initialization challenges, whereby the user is exposed to the first set of external stimuli, and whereby the user's physiological responses to the first set of external stimuli are measured to obtain the biometric initialization data.
11 . The method of claim 8 , performed by the authentication platform, wherein coincident to the authentication protocol, the authentication platform:
identifies the second set of external stimuli;
instructs one of the user platform and external platform to issue one or more authentication challenges, whereby the user is to be exposed to the second set of external stimuli, and whereby the user's physiological responses to the second set of external stimuli are measured to obtain the biometric authentication data; and
receives the biometric authentication data from one of the user platform and external platform.
12 . The method of claim 8 , performed by the authentication platform, wherein coincident to the authentication protocol, the authentication platform:
receives the biometric authentication data from one of the user platform and external platform, the one of the user platform and external platform having identified the second set of external stimuli and having issued one or more authentication challenges, whereby the user is exposed to the second set of external stimuli, and whereby the user's physiological responses to the second set of external stimuli are measured to obtain the biometric initialization data.
13 . The method of claim 8 , performed by one of the user platform and external platform, wherein:
coincident to the authentication protocol, the one of the user platform and external platform issues one or more authentication challenges, whereby the user is exposed to the second set of external stimuli, and whereby the user's physiological responses to the second set of external stimuli are measured to obtain the biometric initialization data.
14 . A method, performed by an authentication platform, comprising:
receiving indicia of an access control event, whereby authentication is required for controlling user access to a resource;
identifying an authentication security level associated with the event;
identifying a stimuli-response-based authentication protocol corresponding to the authentication security level; and
applying the stimuli-response-based authentication protocol to determine user access to the resource.
15 . The method of claim 14 , wherein the step of identifying a protocol comprises the authentication platform:
dynamically formulating one or more stimuli-response-based authentication challenges defining the protocol.
16 . The method of claim 14 , wherein the step of identifying a protocol comprises the authentication platform:
maintaining a database of authentication protocols characterizing multiple authentication security levels; and
selecting a protocol having an authentication security level meeting or exceeding the authentication security level of the event.
17 . The method of claim 14 , wherein the step of identifying a protocol comprises the authentication platform:
obtaining biometric initialization data characterizing at least in part, a user's physiological responses to a first set of external stimuli;
identifying a plurality of authentication stimuli, wherein the authentication stimuli includes one or more instances of external stimuli selected from the first set and coincident to the authentication protocol, biometric authentication data is obtained characterizing at least in part, the user's physiological responses to the authentication stimuli; and
identifying authentication criteria based on a degree of correspondence required between the biometric authentication data and corresponding instances of the biometric initialization data.