Authentication methods and systems

• US 10,740,449 B2
• Filed: 05/27/2016
• Issued: 08/11/2020
• Est. Priority Date: 05/27/2015
• Status: Active Grant

• Current Assignee: Licentia Group Limited, MYPINPAD Ltd.
• Original Assignee: Licentia Group Limited
• Inventors: Pike, Justin
• Primary Examiner(s): Paliwal, Yogesh
• Application Number:
  US15/576,910
• Publication Number:
  US 20180150630A1
• Time in Patent Office: 1,537 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/04886 by partitioning the display area of the touch-screen or the surface of the digitising tablet into independently controllable areas, e.g. virtual keyboards or menus
• CPC Class Codes: G06F 3/0489 using dedicated keyboard keys or combinations thereof
• CPC Class Codes: G06F 7/582 Pseudo-random number generators
• CPC Class Codes: G06F 7/588 Random number generators, i.e. based on natural stochastic processes
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G07F 7/1033 Details of the PIN pad
• CPC Class Codes: G07F 7/1041 PIN input keyboard gets new key allocation at each use
• CPC Class Codes: G07F 7/1075 PIN is checked remotely
• CPC Class Codes: G07F 7/1091 Use of an encrypted form of the PIN
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics

Abstract

The invention provides a solution for secure authentication of an individual. The invention comprises methods and apparatus for secure input of a user'"'"'s identifier e.g. PIN. An image of a keypad is superimposed over a scrambled, operable keypad within a display zone of a screen associated with an electronic device. The keypad image depicts a non-scrambled keypad, in that the keys depicted in the image are in an expected or standardised format or order. The difference in positions of the keys depicted in the image, and those in the operable keypad, provides a mapping which enables an encoded form of the identifier to be generated, such that the un-encoded version is never stored in the device'"'"'s memory. Preferably, the image depicts a keypad which is standard for the device which it is being shown on. The device may be a mobile phone, a tablet computer, laptop, PC, payment terminal or any other electronic computing device with a screen. The underlying keypad, which is at least partially obscured from the user'"'"'s view by the image, may be generated at run time by a procedure call. Preferably, this procedure is native to the device ie part of a library which is provided as standard with the device.

Claims

1. A verification method arranged to verify the identity of a user, comprising:

generating an operable, scrambled keypad and providing said operable, scrambled keypad within a display zone of a screen associated with an electronic device; and

presenting an image of a non-scrambled keypad within at least part of the display zone such that the operable, scrambled keypad is hidden from the user'"'"'s view at least in part and the user is able to operate at least one key of the operable, scrambled keypad via the image of the non-scrambled keypad;

wherein a mapping is generated between keys depicted in the image of the non-scrambled keypad and the keys of the operable, scrambled keypad, and the mapping enables an encoded version of an input from the user to be inputted into the electronic device.

2. The verification method according to claim 1, wherein:

the operable, scrambled keypad is generated at run-time by invoking a portion of code.

3. The verification method according to claim 1, wherein:

the operable, scrambled keypad is generated by a subroutine which is provided as standard with the device.

4. The verification method according to claim 1, wherein:

the image of the non-scrambled keypad depicts a keypad which is a default keypad associated with the device.

5. The verification method according to claim 1, wherein:

the image of the non-scrambled keypad is generated on the device, or

the image of the non-scrambled keypad is received by the device from a remote computing resource.

6. The verification method according to claim 1, wherein:

the operable, scrambled keypad is generated using a keypad configuration derived using a random, or pseudo-random, number, or biometric data relating to the user.

7. The verification method according to claim 1, wherein:

an order of the operable keys in the operable, scrambled keypad is at least partially determined using biometric data derived from or associated with the user.

8. The verification method according to claim 7, wherein:

the biometric data comprises, or is processed to provide, one or more strings, arrays or sequences of values which are used to specify the order of the operable keys in the operable, scrambled keypad.

9. The verification method according to claim 1, wherein:

a plurality of operable keypads is generated, and wherein at least one keypad in the plurality is a scrambled keypad which is selected as the operable, scrambled keypad.

10. The verification method according to claim 1, wherein:

a plurality of keypad images is generated, and wherein at least one image in the plurality is an image of a non-scrambled keypad which is selected as the image of the non-scrambled keypad.

11. The verification method according to claim 1, further comprising:

transmitting the encoded version of the input to a remote computing resource.

12. The verification method according to claim 1, wherein:

the electronic device is a mobile phone, a tablet computer, a payment terminal, a portable computing device or a personal computer.

13. The verification method according to claim 1, wherein:

the image of the non-scrambled keypad masks the operable, scrambled keypad from the user'"'"'s view at least in part.

14. A verification system comprising:

an electronic device; and

a screen associated with the electronic device,

wherein the electronic device is configured to;

generate an operable, scrambled keypad and provide said operable, scrambled keypad within a display zone of the screen; and

present an image of a non-scrambled keypad within at least part of the display zone such that the operable, scrambled keypad is hidden from the user'"'"'s view at least in part and the user is able to operate at least one key of the operable, scrambled keypad via the image of the non-scrambled keypad; and

wherein a mapping is generated between keys depicted in the image of the non-scrambled keypad and the keys of the operable, scrambled keypad, and the mapping enables an encoded version of an input from the user to be inputted into the electronic device.

15. The verification system according to claim 14, wherein:

the image of the non-scrambled keypad masks the operable, scrambled keypad from the user'"'"'s view at least in part.