Coercion Resistant Authentication System Based on Neurophysiological Responses to Music

Abstract

The present invention discloses a method and system for authentication that is coercion resistant by using music that invokes reproducible neurological responses uniquely to a user in order to authenticate the user. The neurological responses may include neurochemical activities inside the brain and brain waves. The unique neurological response of a user to his or her selected music is stimulated by neurochemical release such as dopamine. During the most pleasing part of the music, the user's neurochemical activities and brain waves notably change, which can be captured by using sensors. The timing, rate and extent of the notable change in neurological responses can be used to form a user's unique and non-transferable password. The present invention can be used to authenticate a user while preventing against standard attacks as well as coercion attack, i.e., forcing the user to provide his or her authentication material such as a password.

Claims

1. An authentication method comprising: establishing an average neurophysiological response baseline of a first user based on a first set of neurophysiological responses collected from the first user while the first user is in a state without external stimulus; causing to select a music piece; playing the music piece for the first user to listen to; collecting a second set of neurophysiological responses from the first user during the play of the music piece; the second set of neurophysiological responses comprising at least two neurophysiological responses wherein each of the at least two neurophysiological responses lasts longer temporally than a first pre-determined temporal duration, and each of the at least two neurophysiological responses deviates from the average neurophysiological response baseline by a pre-determined deviation amount; selecting a first neurophysiological response from the at least two neurophysiological and identifying a middle temporal point of a first portion of the music piece that corresponds to the first neurophysiological response; determining a second portion of the music piece having a second pre-determined temporal duration that ends at the middle temporal point, and a third portion of the music piece comprising a third pre-determined temporal duration that begins at the middle temporal point, wherein the cumulative temporal duration of the second and third pre-determined temporal durations temporally longer than the first neurophysiological response; and determining a chili music segment comprising the second portion of the music piece and the third portion of the music piece.

2. The authentication method of claim 1 wherein the music piece is non-lyrical.

3. The authentication method of claim 1 wherein the first pre-determined temporal duration is no less than 5 seconds.

4. The authentication method of claim 1 wherein the pre-determined deviation amount is no less than one standard deviation.

5. The authentication method of claim 1 wherein the first neurophysiological response lasts longer temporally than other neurophysiological responses of the at least two neurophysiological responses.

6. The authentication method of claim 1 further comprising: playing the chill music segment for a second user to listen to; collecting the second user's neurophysiological responses during the play of the chill music segment; and comparing the second user's the second user's neurophysiological responses during the play of the chill music segment to the first neurophysiological response.

Description

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS

[0014] The above-mentioned features and objects of the present disclosure will become more apparent with reference to the following description taken in conjunction with the accompanying drawings and images wherein like reference numerals denote like elements and in which:

[0015] FIG. 1 is a flow diagram of a process for identifying and registering neurophysiological responses(s) stimulated by listening to selected chill music segment;

[0016] FIG. 2 is a flow diagram of an authentication process using neurophysiological responses(s) stimulated by listening to a selected music segment.

DETAILED DESCRIPTION OF THE INVENTION

[0017] For illustrative purpose, the principles of the present invention are described by referring to an exemplary embodiment thereof. Before any embodiment of the invention is explained in detail, it should be understood that the invention is not limited in its application to the details of construction and the arrangement of components set forth in the following description or illustrated in the following drawings. The invention is capable of other embodiments and of being practiced or of being carried out in various ways. Also, it should be understood that the phraseology and terminology used herein is for the purpose of description and should not be regarded as limiting. The use of “including,” “comprising,” or “having” and variations thereof herein is meant to encompass the items listed thereafter and equivalents thereof as well as additional items.

[0018] A screening process is necessary to determine specific segment(s) of a music piece that would be suitable for use in the present invention, in one embodiment, as shown in FIG. 1, one or more sensors are attached to a user to sense the user's neurophysiological responses. The user is initially placed under the user's comfortable state in order to establish the user's neurophysiological response baselines (i.e., the user's neurophysiological responses under ordinary circumstances and without external stimulus). One or more sensor(s) sense and establish the user's neurophysiological response baselines. A music piece is then selected and played for the user to listen to, and the sensors sense and collect the user's neurophysiological responses to the music. The music piece should not be linked to a specific memory of the user, for instance, some music lyrics are linked to life events of a user, and such linkage may make the user's reaction to the music inconsistent or day-dependent (i.e., reaction varies from day to day). In one embodiment, the music piece is non-lyrical or contains lyrics that are not easily memorable.

[0019] Whether the user's neurophysiological responses to the music are deemed chill responses are then determined. A user's chill response refers to the deviation of the user's neurophysiological responses from the user's neurophysiological response baselines based on one or more pre-determined criteria. In one embodiment, a chill response is defined mathematically as any range of responses where every point in the range is greater than one standard deviation away from the average of the user's neurophysiological response baselines; and the range of responses must be no less than a pre-determined temporal duration (e.g., 5 seconds) in order to eliminate abnormal spikes of the listener's neurophysiological responses.

[0020] For a music piece to be a chill music for a user, there must exist multiple occurrences of chill responses from the user resulting from the user listening to the music piece. Each occurrence of chill responses would correspond to a segment of the music piece (i.e., chill responses occurring during the play of a segment of the music piece), and be identified. A chill segment refers to such a music segment with a corresponding chill response. If the selected music piece does not qualify as a chill music, then another music piece may be selected and the same process is applied in order to determine whether the later selected music piece qualifies as a chill music.

[0021] Once a chill music is identified, a chill segment may be selected. A chill segment may be manually selected by the user or automatically selected based on a pre-determined criterion. In one embodiment, the user may manually identify a segment from the chill music where a chill response occurs; then add time durations (e.g., 30 seconds) before and after mid-point of the segment and chose the finished segment as the user's chill segment. In another embodiment, an analysis software program may be used to parse the collected chill responses from a user listening to a complete chill music, compare the segments of the chill music where the user's chill responses occurred. The analysis program then determines the segment with the longest chill responses. A chill segment is then chosen by adding pre-determined time durations (e.g., 30 seconds) before and after the mid-point the segment with the longest chill responses. In one embodiment, if the program generated chill segment is not satisfactory, the pre-determined time duration may be adjusted to generate another chill segment, or the program may select another segment with chill responses and repeat the same process; or in some embodiment, the program may select another chill music and repeat the chill segment selection process.

[0022] FIG. 2 is a flow diagram of an authentication process using neurophysiological responses(s) stimulated by listening to a selected music segment. As discussed above, chill music segment(s) and the corresponding neurophysiological responses are stored and registered in a memory or database for authentication purpose. As shown in FIG. 2, in one embodiment, an authentication process includes attaching one or more sensors to a user to be authenticated, playing a selected chill music segment for the user to listen to. The sensors will detect the user's neurophysiological responses when the user listens to the selected chill music segment. The user is authenticated if the user's neurophysiological responses match the registered neurophysiological responses stored in the memory or database.

[0023] The previous description of the disclosed examples is provided to enable any person of ordinary skill in the art to make or use the disclosed methods and apparatus. Various modifications to these examples will be readily apparent to those skilled in the art, and the principles defined herein may be applied to other examples without departing from the spirit or scope of the disclosed method and apparatus. The described embodiments are to be considered in all respects only as illustrative and not restrictive and the scope of the invention is, therefore, indicated by the appended claims rather than by the foregoing description. All changes which come within the meaning and range of equivalency of the claims are to be embraced within their scope. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the disclosed apparatus and methods. The steps of the method or algorithm may also be performed in an alternate order from those provided in the examples.