User authentication using biometric representation of one-time passcodes
User authentication techniques are provided using biometric representations of one-time passcodes. An exemplary method comprises initiating a challenge to a user in connection with an authentication request by the user to access a protected resource, wherein the challenge comprises a biometric encoding of a one-time passcode using a dictionary; processing a biometric representation by the user in response to the challenge in accordance with the biometric encoding and wherein the processing comprises determining a likelihood that the biometric representation by the user in response to the challenge matches the biometric encoding in the challenge; and resolving the authentication request based on the likelihood. The biometric encoding comprises, for example, a vocal passphrase and/or instructions for the user to perform a specified manipulation to a biometric sample of the user.
1. A method, comprising:
receiving an authentication request from a user to access a protected resource;
providing the user with instructions comprising a biometric encoding of a one-time passcode (OTP) using a dictionary-based biometric encoding configured to translate the OTP into at least one of a corresponding vocal passphrase, or a series of the instructions for the user to perform a specified manipulation to a biometric sample of the user, wherein:
the OTP comprises a plurality of bits; and
the specified manipulation comprises applying one or more of specified filters, specified manual markings and specified virtual overlays to one or more specified portions of the biometric sample of the user;
receiving a biometric representation from the user in response to the instructions;
determining that the biometric representation from the user in response to the instructions matches the biometric encoding in the instructions; and
resolving, using at least one processing device, the authentication request based on the match of the biometric representation to the biometric encoding.
2. The method of claim 1 , wherein the biometric encoding comprises the corresponding vocal passphrase.
3. The method of claim 1 , wherein the specified manipulation comprises applying the one or more specific filters to the one or more specified portions of the biometric sample of the user.
4. The method of claim 1 , wherein the specified manipulation comprises applying the one or more specified manual markings to the one or more specified portions of the biometric sample of the user.
5. The method of claim 1 , wherein the specified manipulation comprises applying the one or more specified virtual overlays to the one or more specified portions of the biometric sample of the user.
6. The method of claim 1 , wherein the biometric sample of the user comprises one or more of a faceprint, an eye print, an ear print, a hand geometry, a vein image and a voice print.
7. The method of claim 1 , further comprising the step of performing a biometric evaluation of the biometric representation from the user.
8. The method of claim 1 , wherein the biometric encoding employs a user-specific encoding based on a salt value that is unique for the user.
9. The method of claim 1 , further comprising the step of presenting the user with a plurality of different biometric encodings of the OTP, wherein the different biometric encodings comprise a plurality of biometric types.
10. A system, comprising:
a memory; and
at least one processing device, coupled to the memory, operative to implement the following steps:
receiving an authentication request from a user to access a protected resource;
providing the user with instructions comprising a biometric encoding of a OTP using a dictionary-based biometric encoding configured to translate the OTP into at least one of a corresponding vocal passphrase, or a series of the instructions for the user to perform a specified manipulation to a biometric sample of the user, wherein:
the OTP comprises a plurality of bits; and
the specified manipulation comprises applying one or more of specified filters, specified manual markings and specified virtual overlays to one or more specified portions of the biometric sample of the user;
receiving a biometric representation from the user in response to the instructions;
determining that the biometric representation from the user in response to the instructions matches the biometric encoding in the instructions; and
resolving the authentication request based on the match of the biometric representation to the biometric encoding.
11. The system of claim 10 , wherein the biometric encoding employs a user-specific encoding based on a salt value that is unique for the user.
12. The system of claim 10 , further comprising the step of presenting the user with a plurality of different biometric encodings of the OTP, wherein the different biometric encodings comprise a plurality of biometric types.
13. A computer program product, comprising a tangible machine-readable storage medium having encoded therein executable code of one or more software programs, wherein the one or more software programs when executed by at least one processing device perform the following steps:
receiving an authentication request from a user to access a protected resource;
providing the user with instructions comprising a biometric encoding of a OTP using a dictionary-based biometric encoding configured to translate the OTP into at least one of a corresponding vocal passphrase, or a series of the instructions for the user to perform a specified manipulation to a biometric sample of the user, wherein:
the OTP comprises a plurality of bits; and
the specified manipulation comprises applying one or more of specified filters, specified manual markings and specified virtual overlays to one or more specified portions of the biometric sample of the user;
receiving a biometric representation from the user in response to the instructions;
determining that the biometric representation from the user in response to the instructions matches the biometric encoding in the instructions; and
resolving the authentication request based on the match of the biometric representation to the biometric encoding.
14. The computer program product of claim 13 , wherein the biometric encoding employs a user-specific encoding based on a salt value that is unique for the user.
15. The computer program product of claim 13 , further comprising the step of presenting the user with a plurality of different biometric encodings of the OTP, wherein the different biometric encodings comprise a plurality of biometric types.