User authentication using scene composed of selected objects
User authentication techniques are provided using a scene composed of selected objects. An exemplary method comprises obtaining enrollment information from a user, wherein the enrollment information comprises a first scene comprised of a first selection of objects; initiating a challenge to the user in connection with an authentication request by the user to access a protected resource; processing a second scene comprised of a second selection of objects submitted by the user in response to the challenge, and wherein the processing comprises determining a likelihood that the submitted second scene comprised of the second selection of objects matches the first scene comprised of the first selection of objects submitted by the user with the enrollment information; and resolving the authentication request based on the likelihood. Objects in the first selection of objects are optionally selected from a catalog and arranged into the first scene.
1. A method of authenticating a user, the method comprising:
obtaining enrollment information from a user, wherein the enrollment information comprises a first scene comprised of a first selection of objects;
initiating a challenge to the user in connection with an authentication request by the user to access a protected resource;
processing, using at least one processing device, a second scene comprised of a second selection of objects submitted by the user in response to the challenge, and wherein the processing comprises determining a likelihood that the submitted second scene comprised of the second selection of objects matches the first scene comprised of the first selection of objects submitted by the user with the enrollment information; and
resolving, using the at least one processing device, the authentication request based on the determined likelihood, wherein at least one object of the second selection of objects becomes more transparent over time in accordance with an expiration period to indicate that the user will need to register a new first scene when the at least one object of the second selection of objects is no longer visible.
2. The method of claim 1 , wherein the user provides the second scene using a virtual reality input device.
3. The method of claim 1 , wherein the first selection of objects comprises one or more objects selected from a catalog and arranged into the first scene.
4. The method of claim 1 , wherein the enrollment information expires after an amount of time according to an expiration policy.
5. The method of claim 1 , wherein the first selection of objects comprises an avatar of the user arranged into the first scene.
6. The method of claim 1 , wherein the first selection of objects comprises at least one object having a plurality of states and wherein a particular state of the plurality of states is selected for the at least one object.
7. The method of claim 1 , wherein the first selection of objects includes a first object that is positioned behind a second object such that the first object is not visible.
8. The method of claim 1 , wherein
the expiration period varies based on at least one of the popularity with a plurality of a users of an object from the first selection of objects or the prominence of the first selection of objects within the first scene.
9. The method of claim 1 , wherein an entropy is established to satisfy a predefined policy by varying one or more of: a size of an object catalog; a number of objects selected in the first selection; an ordering of the selected objects in the first selection; a placement of the objects within the first selection; a state of the one or more of the selected objects; and a physical surrounding of the first scene.
10. A system for authenticating a user, the system comprising:
a memory; and
at least one processing device, coupled to the memory, operative to implement the following steps:
obtaining enrollment information from a user, wherein the enrollment information comprises a first scene comprised of a first selection of objects that includes a first object that is positioned behind a second object;
initiating a challenge to the user in connection with an authentication request by the user to access a protected resource;
processing a second scene comprised of a second selection of objects submitted by the user in response to the challenge, and wherein the processing comprises determining a likelihood that the submitted second scene comprised of the second selection of objects matches the first scene comprised of the first selection of objects submitted by the user with the enrollment information; and
resolving the authentication request based on the determined likelihood, wherein at least one object of the second selection of objects becomes more transparent over time in accordance with an expiration period to indicate that the user will need to register a new first scene when the at least one object of the second selection of objects is no longer visible.
11. The system of claim 10 , wherein the first selection of objects comprises one or more objects selected from a catalog and arranged into the first scene.
12. The system of claim 10 , wherein at least one object in the first scene has a plurality of states and wherein a particular state of the plurality of states is selected for the at least one object.
13. The system of claim 10 , wherein the first scene comprises an image of an environment of the user and wherein the first selection of objects is arranged into the first scene of the environment of the user and wherein the first selection of objects comprises one or more objects selected from a location dependent catalog.
14. The system of claim 10 , wherein an entropy is established to satisfy a predefined policy by varying one or more of: a size of an object catalog; a number of objects selected in the first selection; an ordering of the selected objects in the first selection; a placement of the objects within the first selection; a state of the one or more of the selected objects; and a physical surrounding of the first scene.
15. A computer program product for authenticating a user, comprising a tangible machine-readable storage medium having encoded therein executable code of one or more software programs, wherein the one or more software programs when executed by at least one processing device perform the following steps:
obtaining enrollment information from a user, wherein the enrollment information comprises a first scene comprised of a first selection of objects that includes a first object that is positioned behind a second object;
initiating a challenge to the user in connection with an authentication request by the user to access a protected resource;
processing a second scene comprised of a second selection of objects submitted by the user in response to the challenge, and wherein the processing comprises determining a likelihood that the submitted second scene comprised of the second selection of objects matches the first scene comprised of the first selection of objects submitted by the user with the enrollment information; and
resolving the authentication request based on the likelihood, wherein at least one object of the second selection of objects becomes more transparent over time in accordance with an expiration period to indicate that the user will need to register a new first scene when the at least one object of the second selection of objects is no longer visible.
16. The computer program product of claim 15 , wherein the first selection of objects comprises one or more objects selected from a catalog and arranged into the first scene.
17. The computer program product of claim 15 , wherein at least one object in the first scene has a plurality of states and wherein a particular state of the plurality of states is selected for the at least one object.
18. The computer program product of claim 15 , wherein the first scene comprises an image of an environment of the user and wherein the first selection of objects is arranged into the first scene of the environment of the user and wherein the first selection of objects comprises one or more objects selected from a location dependent catalog.
19. The computer program product of claim 15 , wherein an entropy is established to satisfy a predefined policy by varying one or more of: a size of an object catalog; a number of objects selected in the first selection; an ordering of the selected objects in the first selection; a placement of the objects within the first selection; a state of the one or more of the selected objects; and a physical surrounding of the first scene.