Authentication method and system

• US 10,565,359 B2
• Filed: 06/29/2016
• Issued: 02/18/2020
• Est. Priority Date: 07/20/2012
• Status: Active Grant

• Current Assignee: Licencia Group Limited, MYPINPAD Ltd.
• Original Assignee: Licentia Group Limited
• Inventors: Pike, Justin
• Primary Examiner(s): Moorthy, Aravind K
• Assistant Examiner(s): Pan, Peiliang
• Application Number:
  US15/197,086
• Publication Number:
  US 20160314293A1
• Time in Patent Office: 1,329 Days
• Field of Search: 726 19
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G07F 7/1033 Details of the PIN pad
• CPC Class Codes: G07F 7/1041 PIN input keyboard gets new key allocation at each use
• CPC Class Codes: G07F 7/1075 PIN is checked remotely
• CPC Class Codes: G07F 7/1091 Use of an encrypted form of the PIN

Abstract

The invention provides a computer-implemented authentication method comprising the step of enabling a user to input an identifier (e.g. a PIN) into an electronic device having a screen and a keypad operable within a keypad zone of the screen; by operating at least one key of the keypad via an image of at least part of a scrambled keypad which is displayed at least partially within the keypad zone. The user'"'"'s operation of the keypad key via the image generates an encoded version of the user'"'"'s intended input. In one sense the invention can be perceived as superimposing a non-functional image of a scrambled keyboard over an underlying, functional keypad. The image may be any type of electronic image, and may include a video image. The invention is particularly suited for use with, but not limited to, mobile phones, tablet computer, PCs etc. It can be implemented in any system wherein a user'"'"'s identity must be verified before access is granted to a controlled resource.

Claims

1. A method comprising:

providing, by an electronic device and positioned within a keypad zone of a screen associated with the electronic device, an operable keypad comprising a plurality of operable, labeled keypad keys, each labeled key having at least one indicia associated therewith that, when operated by a user, causes the associated indicia to be inputted to the electronic device;

receiving, from a remote computer-based resource, an image of a scrambled keypad having no keys in a same position as a respective key of the operable keypad;

outputting, by the electronic device and for display at least partially within the keypad zone, at least a portion of the image of the scrambled keypad, the image of the scrambled keypad functioning as a cover superimposed over the operable keypad such that the operable keypad is hidden, at least partially, by the image; and

receiving, at the electronic device, by operation of at least one key of the operable keypad via the image of the scrambled keypad, an identifier.

2. The method of claim 1, wherein operation of at least one key of the operable keypad key via the image of the scrambled keypad generates an encoded version of a user'"'"'s intended input within the electronic device.

3. The method of claim 1, wherein the image of the scrambled keypad is electronically formed, including a graphical image, an optical image, a video or some other form of visual representation of a scrambled keypad.

4. The method of claim 1, wherein the keypad zone is a defined area or portion of the screen which covers a portion of the screen or the screen'"'"'s entirety.

5. The method of claim 1, wherein the image of the scrambled keypad is displayed within the keypad zone such that as a user touches, clicks on or otherwise selects a location within the image of the scrambled keypad, an operable, labeled keypad key of the operable keypad at that location within the keypad zone is activated to provide an encoded version of the user'"'"'s input.

6. The method of claim 1, wherein the image of the scrambled keypad is displayed such that the image of the scrambled keypad occupies the keypad zone exactly, completely or partially.

7. The method of claim 1, wherein the image of the scrambled keypad is displayed to appear to the user as an operable keypad with keys in a scrambled order or configuration with respect to the operable keypad of the electronic device.

8. The method of claim 1, wherein the image of the scrambled keypad functions as a mask or cover superimposed over the operable keypad such that a user'"'"'s touching, clicking on or otherwise identifying a location within the image of the scrambled keypad operates an operable, labeled keypad key positioned at that location within the keypad zone.

9. The method of claim 1, wherein the keypad zone is a portion of the screen which is designated, prior to input of the identifier, as a keypad display area.

10. The method of claim 1, wherein the keypad zone and/or the image of the scrambled keypad remains in a fixed position on the screen during input of the identifier.

11. The method of claim 1, wherein the identifier is a Personal Identification Code or Personal Identification Number.

12. The method of claim 1, wherein a user is enabled to input the identifier by interaction with the screen, such as by touching a portion of the screen and/or selecting an area of the screen using a pointing device such as a mouse or tracker ball.

13. The method of claim 1, wherein the keypad zone comprises a plurality of sub-zones or ‘

hot spots’

, each sub-zone corresponding to a key of the operable keypad.

14. The method of claim 13, wherein the image of the scrambled keypad is presented to the user such that a position of at least one key depicted in the image of the scrambled keypad corresponds to a position of a sub-zone, thus providing a mapping between the keys of the scrambled keypad depicted in the image and the plurality of sub-zones.

15. The method of claim 1, wherein a configuration or an order of the keys in the operable keypad is altered after at least part of the identifier has been inputted.

16. The method of claim 1, wherein an encoded version of a user'"'"'s identifier is constructed within the electronic device from a plurality of keystrokes activated on the operable keypad in response to a click, touch or other indication made by the user in respect of the image on the screen of the scrambled keypad.

17. The method of claim 1, wherein the identifier inputted into the electronic device is sent from the electronic device to the remote computer-based resource.

18. The method of claim 1, wherein the remote computer-based resource is a first remote computer-based resource, and wherein the identifier inputted into the electronic device is sent from the electronic device to a second remote computer-based resource.

19. The method of claim 1, wherein respective positions of all keys depicted in the image of the scrambled keypad remain unchanged relative to one another during input of the user'"'"'s identifier.

20. The method of claim 1, wherein the symbol of at least one key in the image of the scrambled keypad is at least partially obscured or obfuscated but remains readable to the user.

21. The method of claim 1, wherein the electronic device is a mobile telephone, a PC, a tablet computer, a laptop, a PDA, a card-reading terminal, or a mobile phone within a housing such that the mobile phone resembles a card-reading or electronic point of sale device, or some other electronic device having communications capabilities.

22. The method of claim 1, wherein the image of the scrambled keypad is displayed via a web browser, or an application embedded within a browser, or a standalone software application, and/or an application providing a graphical user interface to allow a user to interact with the screen.

23. The method of claim 1, wherein the position of the keypad zone on the screen, and/or the dimensions of the keypad zone, are specified by a procedure or method call.

24. The method of claim 1, wherein the image of the scrambled keypad and/or the keypad comprises numeric digits, alphabetical characters, symbols or any other indicia, or a combination thereof.

25. The method of claim 1, wherein the image of the scrambled keypad is erased from the electronic device following a user'"'"'s input, or following a specified period of time.

26. The method of claim 1, wherein the identifier is verified so as to control access to a resource such as a financial resource, a device, a building, an electronic resource, a medical resource, an information or data resource, or a computer-based resource.

27. A method comprising:

generating, by a remote server in communication with an electronic device, a plurality of images of scrambled keypads;

removing, by the remote server and from the plurality of images of scrambled keypads, any image that represents a scrambled keypad having at least one key in a same position as a respective key of an operable keypad of the electronic device, to provide a remaining plurality of images;

selecting, by the remote server and from the remaining plurality of images, an image of a scrambled keypad from the remaining plurality of images; and

sending, from the remote server and for delivery to the electronic device, a copy of the image of the scrambled keypad, the image of the scrambled keypad configured (i) for display at least partially within a keypad zone of the electronic device and (ii) to function as a cover superimposed over an operable keypad of the electronic device such that the operable keypad is hidden, at least partially, by the image.

28. The method of claim 27 further comprising, responsive to sending the copy of the image of the scrambled keypad, removing the image of the scrambled keypad from the plurality of images.

29. The method of claim 27 further comprising:

receiving, from the electronic device, data representative of an identifier received at the electronic device responsive to operation of at least one key of an operable keypad of the electronic device via the image of the scrambled keypad; and

processing the data representative of the identifier.

30. The method of claim 29, wherein the remote server processes the data representative of the identifier using a stored form or version of a configuration of the keys depicted in the image of the scrambled keypad.

31. The method of claim 30, wherein the stored form or version of the configuration of the keys is a filename.

32. The method of claim 30, wherein the processing includes providing a decoded version of the data representative of the identifier using the stored form or version of the configuration of the keys.

33. The method of claim 29 further comprising:

comparing the processed data representative of the identifier with a stored version of the identifier, and responsive to determining that the data representative of the identifier matches the stored version of the identifier, verifying the data representative of the identifier.

34. A system comprising:

an electronic device having a screen, a processor and associated memory, the electronic device being configured to;

output an operable keypad for positioning within a keypad zone of the screen, the operable keypad comprising a plurality of operable, labeled keypad keys, each labeled keypad key having at least one indicia associated therewith that, when operated by a user, causes the associated indicia to be inputted to the electronic device;

receive, from a remote computer-based resource, an image of a scrambled keypad having no keys in a same position as a respective key of the operable keypad;

output, for display at least partially within the keypad zone, at least a portion of the image of the scrambled keypad, the image of the scrambled keypad functioning as a cover superimposed over the operable keypad such that the operable keypad is hidden, at least partially, by the image; and

receive, by operation of at least one key of the operable keypad via the image of the scrambled keypad, an identifier.