Unveil information on prompt

• US 10,121,023 B2
• Filed: 12/18/2012
• Issued: 11/06/2018
• Est. Priority Date: 12/18/2012
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Akula, Nagasravani
• Primary Examiner(s): To, Jennifer
• Assistant Examiner(s): Wan, Jasmine
• Application Number:
  US13/717,897
• Publication Number:
  US 20140173450A1
• Time in Patent Office: 2,149 Days
• Field of Search: 715741, 715780, 715760, 726 4, 726 6, 726 8, 707636
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/032 Protect output to user by software means

Abstract

Embodiments of the invention provide systems and methods for controlling presentation of sensitive information in a user interface of an application. More specifically, embodiments of the present invention provide for masking the sensitive information when being entered by the user. However, if the user wants to verify the entry or display the sensitive information in readable text, the information can be displayed or unmasked upon request. For example, in response to the user clicking a button or other control of the user interface associated with the sensitive information or by another mouse or keyboard event, the requested sensitive information can be unmasked and displayed in the clear, for example as a tool tip or in the originally presented element of the user interface. The user can then close the tooltip or mask the information, e.g., after verification of what he/she typed.

Claims

1. A computer-based method for controlling presentation of sensitive information in a user interface of an application, the method comprising:

generating a user interface of an application, the user interface comprising a text field for displaying a field of information identified as sensitive, wherein the field of information is associated with a sensitivity level specifically defined for the field of information, wherein different sensitivity level including high-sensitive level or low-sensitive level is defined according to different data content of the field of information, and wherein the text field initially displays the field of information identified as sensitive in a masked form;

presenting the generated user interface to a user of the application;

receiving an unmasking request from the user to unmask the field of information identified as sensitive;

determining whether the unmasking request is a first unmasking request from the user in a session or a subsequent unmasking request from the user in the session;

determining to grant the user access to the field of information identified as sensitive based on;

whether the unmasking request is the first unmasking request or the subsequent unmasking request;

a saved password for the user; and

the sensitivity level specifically defined for the field of information;

determining, from a plurality of methods of unmasking, a method of unmasking the field of information identified as sensitive, wherein the determining is based on the sensitivity level specifically defined for the field of information, and wherein the plurality of methods of methods of unmasking comprises;

displaying, separate from the text field, a tooltip with the field of information in an unmasked form when the sensitivity level specifically defined for the field of information is high-sensitive; and

replacing, within the text field, the field of information identified as sensitive in the masked form with the field of information in the unmasked form when the sensitivity level specifically defined for the field of information is low-sensitive;

updating, based on the determined method of unmasking, the user interface to display the field of information in the unmasked form.

2. The method of claim 1, further comprising:

identifying the field of information as sensitive; and

saving an indication of the field of information being identified as sensitive, wherein generating the user interface is based on the saved indication of the field of information being identified as sensitive.

3. The method of claim 2, further comprising registering the user, wherein said registering includes saving the password for the user.

4. The method of claim 1, further comprising prior to said generating the user interface of the application:

receiving a request for the user interface of the application; and

initiating a user session of the application for the user with an initial authentication level for the user.

5. The method of claim 1,

wherein the determined method of unmasking includes displaying the tooltip with the field of information identified as sensitive in the unmasked form,

wherein the method further comprises:

updating the user interface to display the tooltip with the field of information identified as sensitive in the unmasked form; and

upon receiving an indication of a mouse click from the user, re-masking the field of information by removing the tooltip from the user interface.

6. The method of claim 1, wherein, when the field of information comprises a password, the sensitivity level specifically defined for the field of information is high-sensitive.

7. The method of claim 1, wherein, when the field of information comprises a date of birth, the sensitivity level specifically defined for the field of information is low-sensitive.

8. A system comprising:

a processor; and

a memory coupled with and readable by the processor and storing a set of instructions which, when executed by the processor, cause the processor to control presentation of sensitive information in a user interface of an application by;

generating the user interface of the application, the user interface comprising a text field for displaying a field of information identified as sensitive, wherein the field of information is associated with a sensitivity level specifically defined for the field of information, wherein different sensitivity level including high-sensitive level or low-sensitive level is defined according to different data content of the field of information, and wherein the text field initially displays the field of information identified as sensitive in a masked form;

presenting the generated user interface to a user of the application;

receiving an unmasking request from the user to unmask the field of information identified as sensitive;

determining whether the unmasking request is a first unmasking request from the user in a session or a subsequent unmasking request from the user in the session;

determining to grant the user access to the field of information identified as sensitive based on;

whether the unmasking request is the first unmasking request or the subsequent unmasking request;

a saved password for the user; and

the sensitivity level specifically defined for the field of information;

determining, from a plurality of methods of unmasking, a method of unmasking the field of information identified as sensitive, wherein the determining is based on the sensitivity level specifically defined for the field of information, and wherein the plurality of methods of unmasking comprises;

displaying, separate from the text field, a tooltip with the field of information in an unmasked form when the sensitivity level specifically defined for the field of information is high-sensitive; and

replacing, within the text field, the field of information identified as sensitive in the masked form with the field of information in the unmasked form when the sensitivity level specifically defined for the field of information is low-sensitive;

updating, based on the determined method of unmasking, the user interface to display the field of information in the unmasked form.

9. The system of claim 8, further comprising:

identifying the field of information as sensitive; and

saving an indication of the field of information being identified as sensitive, wherein generating the user interface is based on the saved indication of the field of information being identified as sensitive.

10. The system of claim 9, further comprising registering the user, wherein said registering includes saving the password for the user.

11. The system of claim 8, further comprising prior to said generating the user interface of the application:

receiving a request for the user interface of the application; and

initiating a user session of the application for the user with an initial authentication level for the user.

12. The system of claim 8,

wherein the determined method of unmasking includes displaying the tooltip with the field of information identified as sensitive in the unmasked form,

wherein the instructions, when executed by the processor, further cause the processor to perform:

updating the user interface to display the tooltip with the field of information identified as sensitive in the unmasked form; and

upon receiving an indication of a mouse click from the user, re-masking the field of information by removing the tooltip from the user interface.

13. The system of claim 8, wherein, when the field of information comprises a password, the sensitivity level specifically defined for the field of information is high-sensitive.

14. The system of claim 8, wherein, when the field of information comprises a date of birth, the sensitivity level specifically defined for the field of information is low-sensitive.

15. A computer-readable memory device, which is non-transitory, storing a set of instructions which, when executed by a processor, cause the processor to control presentation of sensitive information in a user interface of an application by:

generating a user interface of an application, the user interface comprising a text field for displaying a field of information identified as sensitive, wherein the field of information is associated with a sensitivity level specifically defined for the field of information, wherein different sensitivity level including high-sensitive level or low-sensitive level is defined according to different data content of the field of information, and wherein the text field initially displays the field of information identified as sensitive in a masked form;

presenting the generated user interface to a user of the application;

receiving an unmasking request from the user to unmask the field of information identified as sensitive;

determining whether the unmasking request is a first unmasking request from the user in a session or a subsequent unmasking request from the user in the session;

determining to grant the user access to the at least one field of information identified as sensitive based on;

whether the unmasking request is the first unmasking request or the subsequent unmasking request;

a saved password for the user; and

the sensitivity level specifically defined for the field of information;

determining, from a plurality of methods of unmasking, a method of unmasking the field of information identified as sensitive, wherein the determining is based on the sensitivity level specifically defined for the field of information, and wherein the plurality of methods of unmasking comprises;

displaying, separate from the text field, a tooltip with the field of information in an unmasked form when the sensitivity level specifically defined for the field of information is high-sensitive; and

replacing, within the text field, the field of information identified as sensitive in the masked form with the field of information in the unmasked form when the sensitivity level specifically defined for the field of information is low-sensitive;

updating, based on the determined method of unmasking, the user interface to display the field of information in the unmasked form.

16. The computer-readable memory device of claim 15, further comprising prior to said generating the user interface of the application:

receiving a request for the user interface of the application; and

initiating a user session of the application for the user with an initial authentication level for the user.

17. The computer-readable memory device of claim 15,

wherein the determined method of unmasking includes displaying the tooltip with the field of information identified as sensitive in the unmasked form,

wherein the instructions, when executed by the processor, further cause the processor to perform:

updating the user interface to display the tooltip with the field of information identified as sensitive in the unmasked form; and

upon receiving an indication of a mouse click from the user, re-masking the field of information by removing the tooltip from the user interface.

18. The computer-readable memory device of claim 15, wherein, when the field of information comprises a password, the sensitivity level specifically defined for the field of information is high-sensitive.

19. The computer-readable memory device of claim 15, wherein, when the field of information comprises a date of birth, the sensitivity level specifically defined for the field of information is low-sensitive.