Granted Patent B2

US 11,223,619 · App. 16/597,860 · Granted Jan 11, 2022

Inventor: Avi Turgeman (Cambridge, MA)

Assignee: BIOCATCH LTD.

H04L63/0861G06F3/017G06F3/03543G06F3/03547G06F3/04845G06F3/04883H04L63/083G06F3/041H04L2463/082

Abstract

Claims (104)

1. A method comprising:

(a) storing a representation of a secret data-item of a particular user, wherein said secret data-item is one of: a password, a Personal Identification Number (PIN);

(b) generating a user authentication session that requires said particular user to enter said secret data-item by performing a task comprised of on-screen operations in which said user drags or moves on-screen objects to input said secret data-item;

(c) during said user authentication session, monitoring user gestures of user performance of said task; and extracting from said user gestures a behavioral characteristic that characterizes user performance of said task;

(d1) determining whether or not said user gestures correspond to correct entry of said secret data-item;

(d2) determining whether or not the behavioral characteristic that was extracted in step (c), matches a previously-stored reference behavioral characteristic that was extracted from past on-screen operations that were previously associated with said particular user during previous log-in sessions;

(e) if the determining of step (d1) is negative or the determining of step (d2) is negative, then: generating a notification that user authentication is rejected;

wherein said task comprises:

generating an on-screen arrangement of digits and letters;

requiring the user to input said secret data-item by drawing on-screen lines among consecutive characters of said secret data-item;

determining a curvature level of said lines, and utilizing said curvature level of said lines as a user-specific characteristic for user authentication.

2. The method of claim 1 ,

wherein said task excludes and does not require typing of characters via a physical keyboard or via an on-screen keyboard.

3. The method of claim 1 ,

wherein said task excludes and does not require typing of characters via a physical keypad or via an on-screen keypad.

4. The method of claim 1 ,

wherein the method comprises authenticating said user, or rejecting authentication of said user, based on a cumulative assessment that takes into account (i) the secret data-item that the user knows, and (ii) the specific behavioral way in which the user interacted with the electronic device to input said secret data-item.

5. The method of claim 1 ,

wherein the method authenticates, or rejects authentication, of a user that attempts to log-in via an electronic device to an online account managed by a remote server.

6. A method comprising:

(a) storing a representation of a secret data-item of a particular user, wherein said secret data-item is one of: a password, a Personal Identification Number (PIN);

(b) generating a user authentication session that requires said particular user to enter said secret data-item by performing a task comprised of on-screen operations in which said user drags or moves on-screen objects to input said secret data-item;

(c) during said user authentication session, monitoring user gestures of user performance of said task; and extracting from said user gestures a behavioral characteristic that characterizes user performance of said task;

(d1) determining whether or not said user gestures correspond to correct entry of said secret data-item;

(d2) determining whether or not the behavioral characteristic that was extracted in step (c), matches a previously-stored reference behavioral characteristic that was extracted from past on-screen operations that were previously associated with said particular user during previous log-in sessions;

(e) if the determining of step (d1) is negative or the determining of step (d2) is negative, then: generating a notification that user authentication is rejected;

wherein said task comprises: requiring the user to rotate on-screen reels, each reel indicating at least letters and digits, each reel corresponding to one character of said secret data-item;

wherein monitoring user gestures of performance of said task, comprises:

monitoring a rotation speed in which each of said reels is rotated by the user, and utilizing said rotation speed as a user-specific characteristic for user authentication.

7. The A method of claim 4 , comprising:

(a) storing a representation of a secret data-item of a particular user, wherein said secret data-item is one of: a password, a Personal Identification Number (PIN);

(b) generating a user authentication session that requires said particular user to enter said secret data-item by performing a task comprised of on-screen operations in which said user drags or moves on-screen objects to input said secret data-item;

(c) during said user authentication session, monitoring user gestures of user performance of said task; and extracting from said user gestures a behavioral characteristic that characterizes user performance of said task;

(d1) determining whether or not said user gestures correspond to correct entry of said secret data-item;

(d2) determining whether or not the behavioral characteristic that was extracted in step (c), matches a previously-stored reference behavioral characteristic that was extracted from past on-screen operations that were previously associated with said particular user during previous log-in sessions;

(e) if the determining of step (d1) is negative or the determining of step (d2) is negative, then: generating a notification that user authentication is rejected;

wherein said task comprises: requiring the user to rotate on-screen reels, each reel indicating at least letters and digits, each reel corresponding to one character of said secret data-item;

wherein monitoring user gestures of performance of said task, comprises:

monitoring a rotation direction in which each of said reels is rotated by the user, and utilizing said rotation direction as a user-specific characteristic for user authentication.

8. A method comprising:

(a) storing a representation of a secret data-item of a particular user, wherein said secret data-item is one of: a password, a Personal Identification Number (PIN);

(b) generating a user authentication session that requires said particular user to enter said secret data-item by performing a task comprised of on-screen operations in which said user drags or moves on-screen objects to input said secret data-item;

(c) during said user authentication session, monitoring user gestures of user performance of said task; and extracting from said user gestures a behavioral characteristic that characterizes user performance of said task;

(d1) determining whether or not said user gestures correspond to correct entry of said secret data-item;

(d2) determining whether or not the behavioral characteristic that was extracted in step (c), matches a previously-stored reference behavioral characteristic that was extracted from past on-screen operations that were previously associated with said particular user during previous log-in sessions;

(e) if the determining of step (d1) is negative or the determining of step (d2) is negative, then: generating a notification that user authentication is rejected;

wherein said task comprises:

generating an on-screen arrangement of digits and letters;

requiring the user to input said secret data-item by drawing on-screen lines among consecutive characters of said secret data-item;

determining a speed of task completion of said user drawing lines, and utilizing said speed of task completion as a user-specific characteristic for user authentication.

9. A system comprising:

one or more processors configured to execute code;

one or more memory units configured to store code;

wherein the one or more processors are configured to perform:

(a) storing a representation of a secret data-item of a particular user, wherein said secret data-item is one of: a password, a Personal Identification Number (PIN);

(b) generating a user authentication session that requires said particular user to enter said secret data-item by performing a task comprised of on-screen operations in which said user drags or moves on-screen objects to input said secret data-item;

(c) during said user authentication session, monitoring user gestures of user performance of said task; and extracting from said user gestures a behavioral characteristic that characterizes user performance of said task;

(d1) determining whether or not said user gestures correspond to correct entry of said secret data-item;

(d2) determining whether or not the behavioral characteristic that was extracted in step (c), matches a previously-stored reference behavioral characteristic that was extracted from past on-screen operations that were previously associated with said particular user during previous log-in sessions;

(e) if the determining of step (d1) is negative or the determining of step (d2) is negative, then: generating a notification that user authentication is rejected;

wherein said task comprises:

generating an on-screen arrangement of digits and letters;

requiring the user to input said secret data-item by drawing on-screen lines among consecutive characters of said secret data-item;

determining a curvature level of said lines, and utilizing said curvature level of said lines as a user-specific characteristic for user authentication.

10. A system comprising:

one or more processors configured to execute code;

one or more memory units configured to store code;

wherein the one or more processors are configured to perform:

(a) storing a representation of a secret data-item of a particular user, wherein said secret data-item is one of: a password, a Personal Identification Number (PIN);

(b) generating a user authentication session that requires said particular user to enter said secret data-item by performing a task comprised of on-screen operations in which said user drags or moves on-screen objects to input said secret data-item;

(c) during said user authentication session, monitoring user gestures of user performance of said task; and extracting from said user gestures a behavioral characteristic that characterizes user performance of said task;

(d1) determining whether or not said user gestures correspond to correct entry of said secret data-item;

(d2) determining whether or not the behavioral characteristic that was extracted in step (c), matches a previously-stored reference behavioral characteristic that was extracted from past on-screen operations that were previously associated with said particular user during previous log-in sessions;

(e) if the determining of step (d1) is negative or the determining of step (d2) is negative, then: generating a notification that user authentication is rejected;

wherein said task comprises: requiring the user to rotate on-screen reels, each reel indicating at least letters and digits, each reel corresponding to one character of said secret data-item;

wherein monitoring user gestures of performance of said task, comprises:

monitoring a rotation speed in which each of said reels is rotated by the user, and utilizing said rotation speed as a user-specific characteristic for user authentication.

11. A system comprising:

one or more processors configured to execute code;

one or more memory units configured to store code;

wherein the one or more processors are configured to perform:

(a) storing a representation of a secret data-item of a particular user, wherein said secret data-item is one of: a password, a Personal Identification Number (PIN);

(b) generating a user authentication session that requires said particular user to enter said secret data-item by performing a task comprised of on-screen operations in which said user drags or moves on-screen objects to input said secret data-item;

(c) during said user authentication session, monitoring user gestures of user performance of said task; and extracting from said user gestures a behavioral characteristic that characterizes user performance of said task;

(d1) determining whether or not said user gestures correspond to correct entry of said secret data-item;

(d2) determining whether or not the behavioral characteristic that was extracted in step (c), matches a previously-stored reference behavioral characteristic that was extracted from past on-screen operations that were previously associated with said particular user during previous log-in sessions;

(e) if the determining of step (d1) is negative or the determining of step (d2) is negative, then: generating a notification that user authentication is rejected;

wherein said task comprises: requiring the user to rotate on-screen reels, each reel indicating at least letters and digits, each reel corresponding to one character of said secret data-item;

wherein monitoring user gestures of performance of said task, comprises:

monitoring a rotation direction in which each of said reels is rotated by the user, and utilizing said rotation direction as a user-specific characteristic for user authentication.

12. A system comprising:

one or more processors configured to execute code;

one or more memory units configured to store code;

wherein the one or more processors are configured to perform:

(a) storing a representation of a secret data-item of a particular user, wherein said secret data-item is one of: a password, a Personal Identification Number (PIN);

(b) generating a user authentication session that requires said particular user to enter said secret data-item by performing a task comprised of on-screen operations in which said user drags or moves on-screen objects to input said secret data-item;

(c) during said user authentication session, monitoring user gestures of user performance of said task; and extracting from said user gestures a behavioral characteristic that characterizes user performance of said task;

(d1) determining whether or not said user gestures correspond to correct entry of said secret data-item;

(d2) determining whether or not the behavioral characteristic that was extracted in step (c), matches a previously-stored reference behavioral characteristic that was extracted from past on-screen operations that were previously associated with said particular user during previous log-in sessions;

(e) if the determining of step (d1) is negative or the determining of step (d2) is negative, then: generating a notification that user authentication is rejected;

wherein said task comprises:

generating an on-screen arrangement of digits and letters;

requiring the user to input said secret data-item by drawing on-screen lines among consecutive characters of said secret data-item;

determining a speed of task completion of said user drawing lines, and utilizing said speed of task completion as a user-specific characteristic for user authentication.

Assignments (1)

Continuity (9)

Cited By (3)

US 12,406,263 US 12,520,142 US 12,719,936