Allowing access to applications based on user handling measurements

Abstract

Authenticating users comprises a computing device that receives a manual authentication input of a user and initiates a first user session between the user and the user computing device. The device communicates a request for a first user authorization data from an authentication technology associated with the one or more computing devices and receives the first user authentication data. The user or the device terminates the first user session and subsequently receives an input of the user to initiate a second user session. The device communicates a request for second user authentication data from the authentication technology and compares the first user authentication data and the second user authentication data. The device identifies a match of one or more features of the first user authentication data and one or more features of the second user authentication data and authorizes the user to conduct the second user session.

1 . A computer-implemented method to authenticate users via user handling of user computing devices, comprising:
 receiving, by one or more computing devices, a manual authentication input to begin a first authenticated session with the one or more computing devices, the manual authentication input being received via a user interface of the one or more computing devices;   receiving, by the one or more computing devices, first user handling characteristics captured by a gyroscope or accelerometer of the one or more computing devices, the first user handling characteristics obtained by the gyroscope or the accelerometer during multiple instances of physical manipulation of the one or more computing devices by a user over a period of time during the first authenticated session;   determining, by the one or more computing devices, a handedness of the user indicating whether the user during the first authenticated session is right-handed or left-handed based on the first user handling characteristics captured during the first authenticated session;   receiving, by the one or more computing devices, second user handling characteristics captured by the gyroscope or the accelerometer during physical manipulation of the one or more computing devices at a time after the first authentication session ended;   receiving, by one or more computing devices, an input to begin a second authenticated session with the one or more computing devices;   determining, by the one or more computing devices, a handedness of the user indicating whether the user is right-handed or left-handed based on the second user handling characteristics captured after the first authenticated session ended;   determining, by the one or more computing devices, one or more applications operating on the one or more computing devices to which the user is allowed access during the second authenticated session based on a determination that the handedness of the user during the first authenticated session matches the handedness of the user based on the second user handling characteristics captured after the first authentication session ended.   
     
     
         2 . (canceled) 
     
     
         3 . (canceled) 
     
     
         4 . The method of  claim 1 , wherein a received user handling characteristic used to determine the handedness of the user is based on an angle at which a user holds the one or more computing devices. 
     
     
         5 . The method of  claim 1 , wherein a received user handling characteristic used to determine the handedness of the user is based on the angle of a finger used to interact with a touch screen of the user computing device. 
     
     
         6 . (canceled) 
     
     
         7 . The method of  claim 1 , wherein a received user handling characteristic used to determine the handedness of the user is based on movements of the one or more computing devices. 
     
     
         8 . (canceled) 
     
     
         9 . (canceled) 
     
     
         10 . The method of  claim 1 , wherein access is not allowed to any functions of the one or more computing devices if the match is not determined. 
     
     
         11 . The method of  claim 1 , wherein access is allowed access to all functions of the one or more computing devices if the match is determined. 
     
     
         12 . A computer program product, comprising:
 a non-transitory computer-readable storage device having computer-executable program instructions embodied thereon that when executed by one or more computing devices cause the computer to authenticate users via user handling of a user computing device, the computer-readable program instructions comprising:   computer-executable instructions to receive a manual authentication input to begin a first authenticated session with the one or more computing devices, the manual authentication input being received via a user interface of the one or more computing devices;   computer-executable instructions to receive first user handling characteristics captured by a gyroscope or accelerometer of the one or more computing devices, the first user handling characteristics obtained by the gyroscope or the accelerometer during multiple instances of physical manipulation of the one or more computing devices by a user over a period of time during the first authenticated session;   computer-executable instructions to store the first user handling characteristics;   computer-executable instructions to receive an input to end the first authenticated session;   computer-executable instructions to end the first authenticated session;   computer-executable instructions to receive an input to begin a second authorized session with the one or more computing devices;   computer-executable instructions to receive second user handling characteristics captured by the gyroscope or the accelerometer during physical manipulation of the one or more computing devices at a time after the first authentication session ended;   computer-executable instructions to compare the first user handling characteristics to the second user handling characteristics to determine a number of matches of the first user handling characteristics to the second user handling characteristics;   computer-readable program instructions to determine one or more applications operating on the computer to which the user is allowed access during the second authenticated session based on the based on the number of matches, wherein access to each of the one or more applications is based on the number of matches determined.   
     
     
         13 . (canceled) 
     
     
         14 . (canceled) 
     
     
         15 . The computer program product of  claim 12 , wherein a received user handling characteristic is an angle at which a user holds the one or more computing devices to determine whether the user is right-handed or left-handed. 
     
     
         16 . The computer program product of  claim 12 , wherein the computer-executable program instructions to determine comprise computer-readable program instructions to compare the identified number of matches to a database of applications, the database comprising a list of applications to which the user is allowed access based on the identified match. 
     
     
         17 . A system to authenticate users via user handling of user computing devices, comprising:
 a storage device; and   a processor communicatively coupled to the storage device, wherein the processor executes application code instructions that are stored in the storage device to cause the system to:
 receive a manual authentication input to begin a first authenticated session with the one or more computing devices, the manual authentication input being received via a user interface of the one or more computing devices; 
 receive first user handling characteristics captured by gyroscope or the accelerometer during physical manipulation of the one or more computing devices at a time after the first authentication session ended; 
 determine a handedness of the user indicating whether the user during the first authenticated session is right-handed or left-handed based on the first user handling characteristics captured during the first authenticated session; 
 receive second user handling characteristics captured by the gyroscope and the accelerometer, the second user handling characteristics obtained by the one or more of the gyroscope and the accelerometer during physical manipulation of the one or more computing devices at a time after the first authentication session ended; 
 receive an input to begin a second authenticated session with the one or more computing devices; 
 determining, by the one or more computing devices, a handedness of the user indicating whether the user is right-handed or left-handed based on the second user handling characteristics captured after the first authenticated session ended; and 
 determine one or more applications operating on the one or more computing devices to which access is allowed during the second authenticated session based on a determination that the handedness of the user during the first authenticated session matches the handedness of the user based on the second user handling characteristics captured after the first authentication session ended. 
   
     
     
         18 . (canceled) 
     
     
         19 . The system of  claim 17 , wherein access is not allowed access to any functions of the storage device if the match is not identified. 
     
     
         20 . The system of  claim 17 , wherein access is allowed access to all functions of the storage device if the match is identified.