Dynamic Password Generator Based On Real Time Behavioral And Environmental Factors

Abstract: This invention relates to an advanced and trustworthy approach for dynamic password generation using the real-time behavioral biometrics; especially the keystroke dynamics, by adding environmental data to churn out password that cannot be replicated and are sensitive to context into using dynamic passwords. Very typically, the authentication systems rely directly on static credentialization from a plethora of other cyber threats, such as brute force attacks, phishing, dictionary attacks, keylogging, static passwords, etc. To address such shortcomings, this invention comprises a multifactorial approach that links the uniqueness of human typing patterns with real-time system and environmental data to create stronger and richer authenticated password mechanisms. The core of the present invention revolves around capturing and using the keystroke pattern of the user - which includes time taken between presses of keys, time the keys are held down, general typing rhythms, and others as biometric signatures. All of these behavioral measurements are difficult to imitate or replicate. They are collected through real-time capture while the user is typing through either a pre-defined or randomly selected passphrase. The same time, environmental information, which the system captures while using a username, the operating systems, attributes pinned to devices, time of current system, and now many other randomly generated nonces or seeds. This multi-source data is then combined to generate a composite string, which is later processed through a cryptographic hash function (e.g., SHA- 256 or SHA-3). The result of the hashing process is truncated/formatted to form a secured, one-time dynamic password. Thus, this system declares the password to be temporal: every login session generates an original password, inasmuch as the user inputs the same phrase. The variation in context and typing behavior and environmental parameters will contribute towards the dynamic nature of the password.

Patent Information

Applicants

Inventors

Specification

Documents

Application Documents