Automated password authentication

• US 10,395,023 B2
• Filed: 03/27/2018
• Issued: 08/27/2019
• Est. Priority Date: 08/29/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Dick, Adrian David, Taylor, James Stuart
• Primary Examiner(s): Kim, Tae K
• Assistant Examiner(s): Pan, Peiliang
• Application Number:
  US15/937,156
• Publication Number:
  US 20180225443A1
• Time in Patent Office: 518 Days
• Field of Search: 726 6, 726 9, 726 18, 726 20, 713193
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system connected to an existing computer includes a unit for monitoring the screen and provides input, a storage unit that stores data that pairs screen buffer regions with authentication details, wherein the system learns new pairs via user training and presents stored authentication details when the screen buffer regions match a related stored region which is paired with a region of the screen, and a unit that determines which of stored passwords need to be presented to the system by a pattern matching of regions of screen pixels.

Claims

1. A computer-implemented method comprising:

monitoring an authentication request displayed on a screen and an authentication area drawn by a user, the drawn authentication area providing input, wherein the drawn authentication area encompasses a login area;

prompting the user to highlight the drawn authentication area that identifies the login area prior to entering information into the login area;

storing data that pairs screen buffer regions with authentication details;

and

outputting the authentication details in response to one of the screen buffer regions that correspond to the authentication details matching the drawn authentication area.

2. The method of claim 1, wherein the authentication details comprise a user name and a password.

3. The method of claim 2, further comprising comparing the drawn authentication area with a set of stored regions.

4. The method of claim 3, wherein the outputting the stored authentication details comprises presenting appropriate authentication details to simulate a manual user input after comparing the drawn authentication area with the set of the stored regions.

5. The method of claim 4, further comprising storing a region for which the user provides login details.

6. The method of claim 1, wherein the drawn authentication area is a rectangle.

7. The method of claim 6, wherein the drawn authentication area is stored for later pattern matching.

8. The method of claim 7, wherein a plurality of drawn authentication areas which are rectangles are provided, and regions of the screen bound by the rectangles are stored in a repository of previously captured regions.

9. The method of claim 8, wherein the regions of the screen bound by the rectangles are recognized during the pattern matching.

10. The method of claim 9, further comprising automatically outputting a previously recorded username and password into the regions of the screen bound by the rectangles based on determining which of a plurality of stored usernames and passwords are paired with the drawn authentication area.

11. The method of claim 10, further comprising automatically submitting a username and password from a password repository upon recognition of the pattern matching of the regions of the screen, wherein the password repository includes bit map regions for the username and password.

12. The method of claim 9, wherein the pattern matching of regions of screen pixels comprises:

matching regions of screen pixels against the repository of previously captured regions of screen pixels, wherein the repository includes bit map regions from previous training by the user.

13. The method of claim 10, further comprising generating a new password for a login area in response to the user notifying that a previous one of the plurality of passwords has expired.

14. The method of claim 13, further comprising prompting the user that the previous one of the plurality of passwords has expired.

15. The method of claim 1, wherein determining that the one of the stored screen buffer regions that correspond to the stored authentication details matches the drawn authentication area is performed via pattern matching.