Input Challenge Based Authentication

摘要

Input challenge based authentication techniques are described in which data regarding a user's input signature is employed for authentication of the user to access resources. Different users have distinct input signatures that are indicative of the manner in which each individual user provides input including at least typing characteristics and timing data. Data regarding input signatures may be captured from user interaction with computing devices and associated with user accounts. Once sufficient data regarding a user's input signature is captured, access to a user account may be controlled at least in part based on the input signature. To do so, an input challenge that indicates a non-secret pattern of input is presented to the user in connection with an authentication sequence. The user reproduces the non-secret pattern of input and selective access to the user account is granted depending upon whether or not the reproduction matches the input signature.

主权项

1. A method implemented by a computing device comprising:
associating an input signature that is indicative of characteristics of input supplied in relation to a user account with the user account; in response to an attempt to access resources with the user account, outputting a challenge that presents a non-secret pattern of input for reproduction by a user of the user account to gain the access; comparing a reproduction of the non-secret pattern of input received in response to the challenge to the input signature associated with the user account; and determining whether the reproduction matches the input signature to selectively control access to the resources.