IP Library Granted Patent US 9,888,377
Granted Patent B1
US 9,888,377 · App. 15/164,620 · Granted Feb 6, 2018

Using personal computing device analytics as a knowledge based authentication source

Inventors: Bruce McCorkendale (Manhattan Beach, CA); Ilya Sokolov (Boston, MA); Kevin Jiang (San Mateo, CA)
Assignee: Symantec Corporation
H04W12/04H04L63/06H04L63/0853H04L63/107H04W12/06H04W12/08H04L2463/082
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,888,377
App. No.
15/164,620
Granted
Feb 6, 2018
Kind
B1
Abstract

Ongoing analytics streams are received over time from mobile computing devices. An analytics stream comprises data corresponding to monitored activity that occurred on the originating mobile computing device. Dynamic, personalized knowledge based authentication questions are generated from analytics stream data. In response to an authentication request from a user, the user is prompted to answer a given number of current dynamic, personalized knowledge based authentication questions.

Claims (54)

1. A computer implemented method for using personal mobile computing device analytics as a knowledge based authentication source, the method comprising the steps of:

receiving an ongoing analytics stream over time from a mobile computing device, by a computer implemented dynamic analytics management system, the ongoing analytics stream comprising data corresponding to monitored activity that occurred on the mobile computing device;

generating dynamic, personalized knowledge based authentication questions from data in the received analytics stream, the data corresponding to monitored activity that occurred on the mobile computing device;

prompting a user to answer at least one current dynamic, personalized knowledge based authentication question generated from data in the received analytics stream; and

determining whether to authenticate the user responsive to whether the user correctly answers a requisite number of current dynamic, personalized knowledge based authentication questions generated from data in the received analytics stream.

2. The method of claim 1 wherein receiving an ongoing analytics stream over time from a mobile computing device further comprises:

receiving an analytics stream comprising data corresponding to monitored sensor input, communication streams, and application use that occurred on the mobile computing device over time.

3. The method of claim 1 wherein generating dynamic, personalized knowledge based authentication questions from data in the received analytics stream further comprises:

generating at least one dynamic, personalized knowledge based authentication question concerning at least one physical location of the user, based on data in the received analytics stream indicating the mobile computing device's physical location over time.

4. The method of claim 1 wherein generating dynamic, personalized knowledge based authentication questions from data in the received analytics stream further comprises:

generating at least one dynamic, personalized knowledge based authentication question concerning the user's interaction with at least one specific third party, based on communication protocol data in the received analytics stream indicating physical proximity of the mobile computing device to at least one additional device registered to the at least one specific third party.

5. The method of claim 1 wherein generating dynamic, personalized knowledge based authentication questions from data in the received analytics stream further comprises:

generating at least one dynamic, personalized knowledge based authentication question concerning at least one purchase made by the user, based on data in the received analytics stream indicating payment activity that occurred on the mobile computing device over time.

6. The method of claim 1 wherein generating dynamic, personalized knowledge based authentication questions from data in the received analytics stream further comprises:

generating at least one dynamic, personalized knowledge based authentication question concerning audio and/or video content consumed by the user, based on data in the received analytics stream indicating content streamed to the mobile computing device over time.

7. The method of claim 1 wherein generating dynamic, personalized knowledge based authentication questions from data in the received analytics stream further comprises:

generating at least one dynamic, personalized knowledge based authentication question concerning audio and/or video content created by the user, based on data in the received analytics stream indicating content created on the mobile computing device over time.

8. The method of claim 1 wherein generating dynamic, personalized knowledge based authentication questions from data in the received analytics stream further comprises:

generating at least one dynamic, personalized knowledge based authentication question concerning external physical conditions, based on data in the received analytics stream gleaned from sensors on the mobile computing device.

9. The method of claim 1 wherein generating dynamic, personalized knowledge based authentication questions from data in the received analytics stream further comprises:

generating at least one dynamic, personalized knowledge based authentication question based on multiple data points in the received analytics stream.

10. The method of claim 1 wherein generating dynamic, personalized knowledge based authentication questions from data in the received analytics stream further comprises:

generating at least one dynamic, personalized knowledge based authentication question based on data in the received analytics stream in combination with corresponding auxiliary information.

11. The method of claim 1 wherein generating dynamic, personalized knowledge based authentication questions from data in the received analytics stream further comprises:

generating at least one dynamic, personalized knowledge based authentication question concerning at least one application used on the mobile computing device and a time at which it was used, based on data in the received analytics stream indicative of application usage history.

12. The method of claim 1 further comprising:

generating at least one current dynamic, personalized knowledge based authentication question in real time, responsive to an attempt by the user to authenticate; and

prompting the user to answer the at least one generated current dynamic, personalized knowledge based authentication question.

13. The method of claim 1 further wherein prompting a user to answer a current dynamic, personalized knowledge based authentication question generated from data in the received analytics stream further comprises:

prompting the user to answer a dynamic, personalized knowledge based authentication question generated from data in the received analytics stream corresponding to monitored activity that occurred on the mobile computing device within a requisite period of time prior to generation of the dynamic, personalized knowledge based authentication question.

14. The method of claim 1 further wherein prompting a user to answer a current dynamic, personalized knowledge based authentication question generated from data in the received analytics stream further comprises:

prompting the user to answer a dynamic, personalized knowledge based authentication question generated from data in the received analytics stream corresponding to monitored activity that occurred on the mobile computing device within a requisite period of time prior to generation of the dynamic, personalized knowledge based authentication question, wherein the requisite period of time excludes a most recent portion of the received analytics stream.

15. The method of claim 1 wherein:

the mobile computing device further comprises a possession factor device registered to the user.

16. The method of claim 1 further wherein determining whether to authenticate the user further comprises:

determining whether to reset possession factor authentication credentials for the user.

17. The method of claim 1 further wherein determining whether to authenticate the user further comprises:

authenticating the user responsive to the user correctly answering the requisite number of current dynamic, personalized knowledge based authentication questions.

18. A computer implemented method for using personal mobile computing device analytics as a knowledge based authentication source, the method comprising the steps of:

receiving a plurality of overlapping analytics streams over time, by a computer implemented dynamic analytics management system, each specific one of the plurality of received overlapping analytics streams comprising data corresponding to monitored activity that occurred on a separate originating mobile computing device, wherein the overlapping of separate ones of the received analytics streams results from communication having occurred between separate, corresponding originating mobile computing devices;

generating dynamic, personalized knowledge based authentication questions from data received in overlapping analytics streams, the data corresponding to monitored activity that occurred on corresponding originating mobile computing devices;

prompting a user of a specific one of the originating mobile computing devices to answer at least one current dynamic, personalized knowledge based authentication question generated from data received in overlapping analytics streams; and

determining whether to authenticate the user responsive to whether the user correctly answers a requisite number of current dynamic, personalized knowledge based authentication questions generated from data received in overlapping analytics streams.

19. The method of claim 18 further wherein determining whether to authenticate the user further comprises:

determining whether to reset possession factor authentication credentials for the user, responsive to receiving an indication of the user's originating mobile computing device having been lost or stolen;

generating dynamic, personalized knowledge based authentication questions from data that is both received in an analytics stream from the user's originating mobile computing device, and corroborated by data received in at least one overlapping analytics stream received from a separate mobile computing device; and

authenticating the user responsive to the user correctly answering the requisite number of current dynamic, personalized knowledge based authentication questions.

20. The method of claim 18 wherein communication having occurred between separate, corresponding originating mobile computing devices further comprises:

multiple trusted originating mobile computing devices having been in physical proximity, as detected by short-range communication between the multiple trusted originating mobile computing devices.

21. At least one non-transitory computer readable-storage medium for using personal mobile computing device analytics as a knowledge based authentication source, the at least one non-transitory computer readable-storage medium storing computer executable instructions that, when loaded into computer memory and executed by at least one processor of a computing device, cause the computing device to perform the following steps

receiving an ongoing analytics stream over time from a mobile computing device, by a computer implemented dynamic analytics management system, the ongoing analytics stream comprising data corresponding to monitored activity that occurred on the mobile computing device;

generating dynamic, personalized knowledge based authentication questions from data in the received analytics stream, the data corresponding to monitored activity that occurred on the mobile computing device;

prompting a user to answer at least one current dynamic, personalized knowledge based authentication question generated from data in the received analytics stream; and

determining whether to authenticate the user responsive to whether the user correctly answers a requisite number of current dynamic, personalized knowledge based authentication questions generated from data in the received analytics stream.

Assignments (5)
NOTICE OF SUCCESSION OF AGENCY (REEL 050926 / FRAME 0560) Recorded Sep 13, 2022
From: JPMORGAN CHASE BANK, N.A.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 061422/0371 →
SECURITY AGREEMENT Recorded Sep 13, 2022
From: NORTONLIFELOCK INC.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 062220/0001 →
CHANGE OF NAME Recorded Jun 18, 2020
From: SYMANTEC CORPORATION
To: NORTONLIFELOCK INC.
Reel/Frame 053306/0878 →
SECURITY AGREEMENT Recorded Nov 4, 2019
From: SYMANTEC CORPORATION; BLUE COAT LLC; LIFELOCK, INC,; SYMANTEC OPERATING CORPORATION
To: JPMORGAN, N.A.
Reel/Frame 050926/0560 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 25, 2016
From: MCCORKENDALE, BRUCE; SOKOLOV, ILYA; JIANG, KEVIN
To: SYMANTEC CORPORATION
Reel/Frame 038721/0219 →