Methods and apparatus for dynamic user authentication using customizable context-dependent interaction across multiple verification objects

Abstract

An authentication framework is provided which enables dynamic user authentication that combines multiple authentication objects using a shared context and that permits customizable interaction design to suit varying user preferences and transaction / application requirements. Such a framework provides a high degree of flexibility, accuracy, convenience and robustness. In one illustrative aspect of the invention, an automated technique for user authentication comprises the following steps / operations. First, user input is obtained. At least a portion of the user input is associated with two or more verification objects. Then, the user is verified based on the two or more verification objects in accordance with at least one verification policy operating on a context shared across the two or more verification objects. The user authentication technique of the invention may preferably be implemented in a flexible, distributed architecture comprising at least one client device coupled to at least one verification server. The client device and the verification server may operate together to perform the user authentication techniques of the invention.

Description

CROSS-REFERENCE TO RELATED APPLICATION(S) [0001] This application is a continuation of U.S. application Ser. No. 10 / 283,729 filed on Oct. 30, 2002, the disclosure of which is incorporated herein by reference.FIELD OF THE INVENTION [0002] The present invention relates to authentication techniques and, more particularly, to techniques for providing dynamic user authentication using customizable context-dependent interaction across multiple verification objects. BACKGROUND OF THE INVENTION [0003] Authenticating the identity claim of a user is an important step in ensuring the security of systems, networks, services and facilities, both for physical and for logical access. Existing user authentication is often performed on the basis of a user's knowledge of a single verification object, e.g., a password or a personal identification number (PIN). Existing user authentication may also be performed on the basis of possession of a single verification object, e.g., a key or a card. Other exi...

AI Technical Summary

Benefits of technology

[0009] The present invention provides an improved authentication framework affording greater flexibility, accuracy, convenience and robustness as compared to existing authentication frameworks. This is accomplished, for example, by enabling dynamic user authentication that combines multiple authentication objects using a shared context and that permits customizable interaction design to suit varying user preferences and transaction / application requirements. Such a framework advantageously provides a high degree of flexibility, accuracy, convenience and robustness.

Problems solved by technology

If no match is found, then access is denied.

However, these existing authentication techniques have many drawbacks.

For example, keys or passwords may be stolen or biometric features may be compromised, e.g., using false fingerprints.

However, such techniques typically acquire and analyze each biometric feature sequentially and independently and merely combine the final outputs in a predetermined static manner, and thus do not utilize any interaction between biometrics.

Further, existing authentication techniques fail to provide enough flexibility to address various user-specific, transaction-specific or application-specific constraints or requirements.

For example, a user-specific constraint may be that a user with a cut on his finger may not be able to use a fingerprint recognition system.

An application-specific constraint may be that security questions based on a banking application may not be suitable for a travel application.

Existing authentication approaches are just not flexible enough to handle these types of constraints or requirements.

Images