IP Library › Granted Patent US 10,691,789
Granted Patent B2
US 10,691,789 · App. 15/846,411 · Granted Jun 23, 2020

Authentication/security using user activity mining based live question-answering

Inventors: Saritha Arunkumar (Basingstoke, GB); Kuntal Dey (Vasant Kunj, IN); Nizar Lethif (Croton-on-Hudson, NY); Enara C. Vijil (Millwood, NY)
Assignee: International Business Machines Corporation
G06F21/45G06F21/305G06F21/316G06F2221/2103
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,691,789
App. No.
15/846,411
Granted
Jun 23, 2020
Kind
B2
Abstract

A processor-implemented method enables a device based on authentication of a particular user. One or more processors data mine past activities of a particular user. The past activities are detected by physical monitoring devices that monitor the particular user. The processor(s) create an authentication question and answer for the particular user based on the past activities of the particular user that the one or more processors have data mined. The processor(s) receive a request to use an electronic device used by the particular user, and then 1) transmit the authentication question to the electronic device used by the particular user and 2) receive an authentication answer to the authentication question from the electronic device used by the particular user. In response to the authentication answer from the electronic device matching the answer for the authentication question, the processor(s) remotely enable the electronic device for the particular user.

Claims (48)

1. A processor-implemented method comprising:

data mining, by one or more processors, past activities of a particular user, wherein the past activities are detected by physical monitoring devices that monitor the particular user;

creating, by one or more processors, a first authentication question and answer for the particular user based on the past activities of the particular user that the one or more processors have data mined, wherein the first authentication question can be answered by a second user who is not permitted to use the electronic device used by the particular user;

receiving, by one or more processors, a request to use an electronic device used by the particular user;

in response to receiving the request to use the electronic device used by the particular user, transmitting, by one or more processors, the first authentication question to the electronic device used by the particular user;

receiving, by one or more processors, an authentication answer to the first authentication question from the electronic device used by the particular user;

determining, by one or more processors, whether the authentication answer from the electronic device matches the answer for the first authentication question;

in response to determining that the authentication answer from the electronic device matches the answer for the first authentication question, remotely enabling, by one or more processors, the electronic device for the particular user;

detecting, by one or more processors, that the second user is presently proximate to the electronic device used by the particular user;

in response to detecting that the second user is presently proximate to the electronic device used by the particular user, blocking, by one or more processors, the first authentication question from being further transmitted to the electronic device used by the particular user and generating, by one or more processors, a second authentication question that cannot be answered by the second user; and

transmitting, by one or more processors, the second authentication question to the electronic device used by the particular user.

2. The processor-implemented method of claim 1 , further comprising:

in response to determining that the authentication answer to the first authentication question from the electronic device does not match the answer for the first authentication question, transmitting, by one or more processors, a new authentication question to the electronic device for the user.

3. The processor-implemented method of claim 1 , wherein the past activities of the particular user are detected by a location-based physical activities monitor that identifies physical activities performed by the particular user during a previous time.

4. The processor-implemented method of claim 1 , wherein the past activities of the particular user are detected by intelligent devices that are possessed by other persons during a previous time.

5. The processor-implemented method of claim 1 , wherein the past activities occurred within a past 24 hours.

6. A computer program product for enabling a device based on authentication of a particular user, the computer program product comprising a non-transitory computer readable storage device having program instructions embodied therewith, the program instructions readable and executable by a computer to perform a method comprising:

data mining past activities of a particular user, wherein the past activities are detected by physical monitoring devices that monitor the particular user;

creating a first authentication question and answer for the particular user based on the past activities of the particular user that the one or more processors have data mined, wherein the first authentication question can be answered by a second user who is not permitted to use the electronic device used by the particular user;

receiving, by one or more processors, a request to use an electronic device used by the particular user;

in response to receiving the request to use the electronic device used by the particular user, transmitting, by one or more processors, the first authentication question to the electronic device used by the particular user;

receiving an authentication answer to the first authentication question from the electronic device used by the particular user;

determining whether the authentication answer from the electronic device matches the answer for the first authentication question;

in response to determining that the authentication answer from the electronic device matches the answer for the first authentication question, remotely enabling the electronic device for the particular user;

detecting that the second user is presently proximate to the electronic device used by the particular user;

in response to detecting that the second user is presently proximate to the electronic device used by the particular user, blocking the first authentication question from being further transmitted to the electronic device used by the particular user and generating a second authentication question that cannot be answered by the second user; and

transmitting the second authentication question to the electronic device used by the particular user.

7. The computer program product of claim 6 , wherein the method further comprises:

in response to determining that the authentication answer to the first authentication question from the electronic device does not match the answer for the first authentication question, transmitting a new authentication question to the electronic device for the user.

8. The computer program product of claim 6 , wherein the past activities of the particular user are detected by a location-based physical activities monitor that identifies physical activities performed by the particular user during a previous time.

9. The computer program product of claim 6 , wherein the past activities of the particular user are detected by intelligent devices that are possessed by other persons during a previous time.

10. The computer program product of claim 6 , wherein the past activities occurred within a past 24 hours.

11. The computer program product of claim 6 , wherein the program instructions are provided as a service in a cloud environment.

12. A computer system comprising one or more processors, one or more computer readable memories, and one or more computer readable storage mediums, and program instructions stored on at least one of the one or more storage mediums for execution by at least one of the one or more processors via at least one of the one or more memories, the stored program instructions comprising:

program instructions to data mine past activities of a particular user, wherein the past activities are detected by physical monitoring devices that monitor the particular user;

program instructions to create a first authentication question and answer for the particular user based on the past activities of the particular user that the one or more processors have data mined, wherein the first authentication question can be answered by a second user who is not permitted to use the electronic device used by the particular user;

program instructions to receive a request to use an electronic device used by the particular user;

program instructions to, in response to receiving the request to use the electronic device used by the particular user, transmit the first authentication question to the electronic device used by the particular user;

program instructions to receive an authentication answer to the first authentication question from the electronic device used by the particular user;

program instructions to determine whether the authentication answer from the electronic device matches the answer for the first authentication question;

program instructions to, in response to determining that the authentication answer from the electronic device does not match the answer for the first authentication question, transmit a new authentication question to the electronic device for the user;

program instructions to detect that the second user is presently proximate to the electronic device used by the particular user;

program instructions to, in response to detecting that the second user is presently proximate to the electronic device used by the particular user, block the first authentication question from being further transmitted to the electronic device used by the particular user and generate a second authentication question that cannot be answered by the second user; and

program instructions to transmit the second authentication question to the electronic device used by the particular user.

13. The computer system of claim 12 , wherein the past activities of the particular user are detected by a location-based physical activities monitor that identifies physical activities performed by the particular user during a previous time.

14. The computer system of claim 12 , wherein the past activities of the particular user are detected by intelligent devices that are possessed by other persons during a previous time.

15. The computer system of claim 12 , wherein the past activities occurred within a past 24 hours.

16. The computer system of claim 12 , wherein the program instructions are provided as a service in a cloud environment.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 19, 2017
From: ARUNKUMAR, SARITHA; DEY, KUNTAL; LETHIF, NIZAR; VIJIL, ENARA C.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 044431/0149 →
Continuity (1)
Related Publication 20190188374A1 · Jun 20, 2019