Method and apparatus for dynamic personal identification number management

• US 20030177366A1
• Filed: 03/18/2002
• Published: 09/18/2003
• Est. Priority Date: 03/18/2002
• Status: Abandoned Application

• Current Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: de Jong, Eduard
• Application Number:
  US10/101,303
• Publication Number:
  US 20030177366A1
• Time in Patent Office: Days
• US Class Current: 713/184
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04W 74/00 Wireless channel access

Abstract

A method for dynamic personal identification number (PIN) management includes selecting a PIN comprising at least one picture category ID, determining a correspondence between at least one entry token and the at least one picture category ID and creating a picture category ID list in response to an access request. The picture category ID list includes the at least one picture category ID. The method also includes providing the picture category ID list for displaying a composite image including pictures based on the picture category ID list, receiving an entry token list in response to the providing and granting access to the service based upon whether at least one entry token in the entry token list corresponds to the at least one picture category ID. According to one aspect, the method also includes providing instructions to the user regarding which pictures are based on the PIN.

Claims

1. A method for dynamic personal identification number (PIN) management, the method comprising:

selecting a PIN comprising at least one picture category ID;

determining a correspondence between at least one entry token and said at least one picture category ID;

creating a picture category ID list in response to an access request, said picture category ID list including said at least one picture category ID;

providing said picture category ID list for displaying a composite image including at least one picture based on said picture category ID list;

receiving an entry token list in response to said providing; and

granting said access request based upon whether at least one entry token in said entry token list corresponds to said at least one picture category ID.

2. The method of claim 1 wherein said entry token list comprises at least one character.

3. The method of claim 1 wherein said entry token list comprises at least one number.

4. The method of claim 1 wherein said entry token list comprises at least one letter.

5. The method of claim 1 wherein said entry token list comprises at least one non-alphanumeric symbol.

6. The method of claim 1 wherein said selecting comprises selecting a PIN from a plurality of PINs.

7. The method of claim 1 wherein said creating further comprises using a randomized process to determine the position of said at least one picture category ID within said picture category ID list.

8. The method of claim 1 wherein said creating further comprises using a randomized process to determine the position of picture categories other than said least one picture category ID within said picture category ID list.

9. The method of claim 1 wherein said creating further comprises using a randomized process to select picture categories other than said at least one picture category ID within said picture category ID list.

10. The method of claim 1 wherein the number of picture categories in said PIN is less than the number of picture categories in said picture category ID list.

11. The method of claim 10 wherein

said PIN comprises four picture categories;

and

said picture category ID list comprises nine picture categories.

12. The method of claim 10 wherein

said PIN comprises four picture categories;

and

said picture category ID list comprises sixteen picture categories.

13. The method of claim 1 wherein said granting further comprises granting said access request based on said correspondence and said entry token list.

14. The method of claim 1 wherein said granting further comprises granting said access request if each picture category in said PIN is represented by an entry token in said entry token list.

15. The method of claim 1 wherein said correspondence indicates a required order for entry tokens in said entry token list.

16. The method of claim 1 wherein

said creating further comprises associating each of said picture categories in said PIN with an entry token;

and

said granting further comprises granting said access request if each entry token in said entry token list matches the entry token associated with the corresponding picture category ID of the PIN.

17. The method of claim 1 wherein said granting further comprises granting said access request if at least one but less than all of said entry tokens in said entry token list correspond to a picture category in said PIN.

18. The method of claim 1 wherein said method further comprises sending at least one PIN instruction in response to said request.

19. The method of claim 18 wherein said at least one PIN instruction comprises at least one picture category ID.

20. The method of claim 18 wherein said at least one PIN instruction comprises a required picture category sequence.

21. The method of claim 18, further comprising repeating said at least one PIN instruction for successive access requests.

22. The method of claim 1, further comprising receiving from a user at least one picture belonging to said at least one picture category ID.

23. The method of claim 1, further comprising receiving from a user said at least one picture category.

24. The method of claim 1, further comprising receiving from a user said correspondence.

25. The method of claim 1 wherein

said creating further comprises creating at least one composite image instruction;

and

said providing further comprises providing said composite image instruction for use in generating said composite image.

26. The method of claim 25 wherein said at least one composite image instruction indicates that the position of each picture category ID in said picture category ID list determines the position of a corresponding picture in said composite image.

27. The method of claim 1 wherein said displaying comprises presenting each picture in said composite image serially.

28. The method of claim 27 wherein said displaying comprises presenting pictures comprising said composite image serially in groups of two pictures.

29. The method of claim 27 wherein said displaying comprises presenting pictures comprising said composite image serially in groups of four pictures.

30. The method of claim 25 wherein said at least one composite image instruction indicates at least one entry token to be superimposed on a picture corresponding to a picture category ID in said picture category ID list.

31. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for dynamic personal identification number (PIN) management, the method comprising:

selecting a PIN comprising at least one picture category ID;

determining a correspondence between at least one entry token and said at least one picture category ID;

creating a picture category ID list in response to an access request, said picture category ID list including said at least one picture category ID;

providing said picture category ID list for displaying a composite image including at least one picture based on said picture category ID list;

receiving an entry token list in response to said providing; and

granting said access request based upon whether at least one entry token in said entry token list corresponds to said at least one picture category ID.

32. The program storage device of claim 31 wherein said entry token list comprises at least one character.

33. The program storage device of claim 31 wherein said entry token list comprises at least one number.

34. The program storage device of claim 31 wherein said entry token list comprises at least one letter.

35. The program storage device of claim 31 wherein said entry token list comprises at least one non-alphanumeric symbol.

36. The program storage device of claim 31 wherein said selecting comprises selecting a PIN from a plurality of PINs.

37. The program storage device of claim 31 wherein said creating further comprises using a randomized process to determine the position of said at least one picture category ID within said picture category ID list.

38. The program storage device of claim 31 wherein said creating further comprises using a randomized process to determine the position of picture categories other than said least one picture category ID within said picture category ID list.

39. The program storage device of claim 31 wherein said creating further comprises using a randomized process to select picture categories other than said at least one picture category ID within said picture category ID list.

40. The program storage device of claim 31 wherein the number of picture categories in said PIN is less than the number of picture categories in said picture category ID list.

41. The program storage device of claim 40 wherein

said PIN comprises four picture categories;

and

said picture category ID list comprises nine picture categories.

42. The program storage device of claim 40 wherein

said PIN comprises four picture categories;

and

said picture category ID list comprises sixteen picture categories.

43. The program storage device of claim 31 wherein said granting further comprises granting said access request based on said correspondence and said entry token list.

44. The program storage device of claim 31 wherein said granting further comprises granting said access request if each picture category in said PIN is represented by an entry token in said entry token list.

45. The program storage device of claim 31 wherein said correspondence indicates a required order for entry tokens in said entry token list.

46. The program storage device of claim 31 wherein

said creating further comprises associating each of said picture categories in said PIN with an entry token;

and

said granting further comprises granting said access request if each entry token in said entry token list matches the entry token associated with the corresponding picture category ID of the PIN.

47. The program storage device of claim 31 wherein said granting further comprises granting said access request if at least one but less than all of said entry tokens in said entry token list correspond to a picture category in said PIN.

48. The program storage device of claim 31 wherein said method further comprises sending at least one PIN instruction in response to said request.

49. The program storage device of claim 48 wherein said at least one PIN instruction comprises at least one picture category ID.

50. The program storage device of claim 48 wherein said at least one PIN instruction comprises a required picture category sequence.

51. The program storage device of claim 48, further comprising repeating said at least one PIN instruction for successive access requests.

52. The program storage device of claim 31, further comprising receiving from a user at least one picture belonging to said at least one picture category ID.

53. The program storage device of claim 31, further comprising receiving from a user said at least one picture category.

54. The program storage device of claim 31, further comprising receiving from a user said correspondence.

55. The program storage device of claim 31 wherein

said creating further comprises creating at least one composite image instruction;

and

said providing further comprises providing said composite image instruction for use in generating said composite image.

56. The program storage device of claim 55 wherein said at least one composite image instruction indicates that the position of each picture category ID in said picture category ID list determines the position of a corresponding picture in said composite image.

57. The program storage device of claim 31 wherein said displaying comprises presenting each picture in said composite image serially

58. The program storage device of claim 57 wherein said displaying comprises presenting pictures comprising said composite image serially in groups of two pictures.

59. The program storage device of claim 57 wherein said displaying comprises presenting pictures comprising said composite image serially in groups of four pictures.

60. The program storage device of claim 55 wherein said at least one composite image instruction indicates at least one entry token to be superimposed on a picture corresponding to a picture category ID in said picture category ID list.

61. An apparatus for dynamic personal identification number (PIN) management, the apparatus comprising:

means for selecting a PIN comprising at least one picture category ID;

means for determining a correspondence between at least one entry token and said at least one picture category ID;

means for creating a picture category ID list in response to an access request, said picture category ID list including said at least one picture category ID;

means for providing said picture category ID list for displaying a composite image including at least one picture based on said picture category ID list;

means for receiving an entry token list in response to said providing; and

means for granting said access request based upon whether at least one entry token in said entry token list corresponds to said at least one picture category ID.

62. The apparatus of claim 61 wherein said entry token list comprises at least one character.

63. The apparatus of claim 61 wherein said entry token list comprises at least one number.

64. The apparatus of claim 61 wherein said entry token list comprises at least one letter.

65. The apparatus of claim 61 wherein said entry token list comprises at least one non-alphanumeric symbol.

66. The apparatus of claim 61 wherein said selecting comprises means for selecting a PIN from a plurality of PINs.

67. The apparatus of claim 61 wherein said means for creating further comprises means for using a randomized process to determine the position of said at least one picture category ID within said picture category ID list.

68. The apparatus of claim 61 wherein said means for creating further comprises means for using a randomized process to determine the position of picture categories other than said least one picture category ID within said picture category ID list.

69. The apparatus of claim 61 wherein said means for creating further comprises means for using a randomized process to select picture categories other than said at least one picture category ID within said picture category ID list.

70. The apparatus of claim 61 wherein the number of picture categories in said PIN is less than the number of picture categories in said picture category ID list.

71. The apparatus of claim 70 wherein

said PIN comprises four picture categories;

and

said picture category ID list comprises nine picture categonies.

72. The apparatus of claim 70 wherein

said PIN comprises four picture categories;

and

said picture category ID list comprises sixteen picture categories.

73. The apparatus of claim 61 wherein said means for granting further comprises means for granting said access request based on said correspondence and said entry token list.

74. The apparatus of claim 61 wherein said means for granting further comprises means for granting said access request if each picture category in said PIN is represented by an entry token in said entry token list.

75. The apparatus of claim 61 wherein said correspondence indicates a required order for entry tokens in said entry token list.

76. The apparatus of claim 61 wherein

said means for creating further comprises means for associating each of said picture categories in said PIN with an entry token;

and

said means for granting further comprises means for granting said access request if each entry token in said entry token list matches the entry token associated with the corresponding picture category ID of the PIN.

77. The apparatus of claim 61 wherein said means for granting further comprises means for granting said access request if at least one but less than all of said entry tokens in said entry token list correspond to a picture category in said PIN.

78. The apparatus of claim 61 wherein said apparatus further comprises means for sending at least one PIN instruction in response to said request.

79. The apparatus of claim 78 wherein said at least one PIN instruction comprises at least one picture category ID.

80. The apparatus of claim 78 wherein said at least one PIN instruction comprises a required picture category sequence.

81. The apparatus of claim 78, further comprising means for repeating said at least one PIN instruction for successive access requests.

82. The apparatus of claim 61, further comprising means for receiving from a user at least one picture belonging to said at least one picture category ID.

83. The apparatus of claim 61, further comprising means for receiving from a user said at least one picture category.

84. The apparatus of claim 61, further comprising means for receiving from a user said correspondence.

85. The apparatus of claim 61 wherein

said means for creating further comprises means for creating at least one composite image instruction;

and

said means for providing further comprises means for providing said composite image instruction for use in generating said composite image.

86. The apparatus of claim 85 wherein said at least one composite image instruction indicates that the position of each picture category ID in said picture category ID list determines the position of a corresponding picture in said composite image.

87. The apparatus of claim 61 wherein said means for providing further comprises means for providing said picture category ID list for displaying serially a composite image including at least one picture based on said picture category ID list.

88. The apparatus of claim 87 wherein said means for providing further comprises means for providing said picture category ID list for displaying serially in groups of two a composite image including at least one picture based on said picture category ID list.

89. The apparatus of claim 87 wherein said means for providing further comprises means for providing said picture category ID list for displaying serially in groups of four a composite image including at least one picture based on said picture category ID list.

90. The apparatus of claim 85 wherein said at least one composite image instruction indicates at least one entry token to be superimposed on a picture corresponding to a picture category ID in said picture category ID list.

91. An apparatus for dynamic personal identification number management, comprising:

a memory for storing at least one PIN comprising at least one picture category ID;

a category selector for creating a picture category ID list in response to an access request, said picture category ID list including said at least one picture category ID, said category selector coupled to said memory;

a picture database for storing at least one categorized picture;

an image generator for generating a composite image comprising a picture for each of said at least one category ID, each picture obtained from said picture database; and

a PIN comparator for receiving an entry token list and an entry token correspondence list, said entry token correspondence list including at least one entry token that corresponds with said at least one picture category ID, said PIN comparator further configured to grant said access request based upon whether said entry token correspondence list matches said entry token list.

92. The apparatus of claim 91, further comprising a PIN selector to select a PIN comprising at least one picture category ID.

93. The apparatus of claim 91 wherein said category selector is further configured to use a randomized number generator to determine the position of said at least one picture category ID within said picture category ID list.

94. The apparatus of claim 91 wherein said category selector is further configured to use a randomized number generator to determine the position of picture categories other than said least one picture category ID within said picture category ID list.

95. The apparatus of claim 91 wherein said category selector is further configured to use a randomized number generator to select picture categories other than said at least one picture category ID within said picture category ID list.

96. The apparatus of claim 91 wherein the number of picture categories in said PIN is less than the number of picture categories in said picture category ID list.

97. The apparatus of claim 91 wherein said PIN comparator is further configured to grant said access request based on said entry token correspondence list and said entry token list.

98. The apparatus of claim 91 wherein said PIN comparator is further configured to grant said access request if each picture category in said PIN is represented by an entry token in said entry token list.

99. The apparatus of claim 91 wherein said entry token correspondence list indicates a required order for entry tokens in said entry token list.

100. The apparatus of claim 91 wherein

said category selector is further configured to associate each of said picture categories in said PIN with an entry token;

and

said PIN comparator is further configured to grant said access request if each entry token in said entry token list matches the entry token associated with the corresponding picture category ID of the PIN.

101. The apparatus of claim 91 wherein said PIN comparator is further configured to grant said access request if at least one but less than all of said entry tokens in said entry token list correspond to a picture category in said PIN.

102. The apparatus of claim 91 wherein said apparatus is further configured to send at least one PIN instruction in response to said request.

103. The apparatus of claim 102 wherein said at least one PIN instruction comprises at least one picture category ID.

104. The apparatus of claim 102 wherein said at least one PIN instruction comprises a required picture category sequence.

105. The apparatus of claim 102 wherein said apparatus is further configured to repeat said at least one PIN instruction for successive access requests.

106. The apparatus of claim 91 wherein said apparatus is further configured to receive from a user at least one picture belonging to said at least one picture category ID.

107. The apparatus of claim 91 wherein said apparatus is further configured to receive from a user said at least one picture category.

108. The apparatus of claim 91 wherein said category selector is further configured to create said entry token correspondence list.

109. The apparatus of claim 91 wherein

said category selector is further configured to select at least one composite image instruction;

and

said apparatus is further configured to provide said composite image instruction for use in generating said composite image.

110. The apparatus of claim 109 wherein said at least one composite image instruction indicates that the position of each picture category ID in said picture category ID list determines the position of a corresponding picture in said composite image.

111. The apparatus of claim 91 wherein said image generator is further configured to present each picture in said composite image serially.

112. The apparatus of claim 111 wherein said image generator is further configured to present each picture in said composite image serially in groups of two pictures.

113. The apparatus of claim 111 wherein said image generator is further configured to present each picture in said composite image serially in groups of four pictures.

114. The apparatus of claim 91 wherein said apparatus comprises a smart card.

115. The apparatus of claim 114 wherein said smart card comprises a Java Card™

technology-enabled smart card.

116. The apparatus of claim 114 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

117. The apparatus of claim 114 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

118. The apparatus of claim 114 wherein said smart card comprises a WIM (Wireless Interface Module).

119. The apparatus of claim 114 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

120. The apparatus of claim 114 wherein said smart card comprises a UIM (User Identity Module).

121. The apparatus of claim 114 wherein said smart card comprises a R-UIM (Removable User Identity Module).

122. An apparatus for dynamic personal identification number management, comprising:

a memory for storing at least one PIN comprising at least one picture category ID;

a category selector for creating a picture category ID list in response to an access request, said picture category ID list including said at least one picture category ID, said category selector coupled to said memory; and

a PIN comparator for receiving an entry token list and an entry token correspondence list, said entry token correspondence list including at least one entry token that corresponds with said at least one picture category ID, said PIN comparator further configured to grant said access request based upon whether said entry token correspondence list matches said entry token list.

123. The apparatus of claim 122, further comprising a PIN selector to select a PIN comprising at least one picture category ID.

124. The apparatus of claim 122 wherein said category selector is further configured to use a randomized number generator to determine the position of said at least one picture category ID within said picture category ID list.

125. The apparatus of claim 122 wherein said category selector is further configured to use a randomized number generator to determine the position of picture categories other than said least one picture category ID within said picture category ID list.

126. The apparatus of claim 122 wherein said category selector is further configured to use a randomized number generator to select picture categories other than said at least one picture category ID within said picture category ID list.

127. The apparatus of claim 122 wherein the number of picture categories in said PIN is less than the number of picture categories in said picture category ID list.

128. The apparatus of claim 122 wherein said PIN comparator is further configured to grant said access request based on said entry token correspondence list and said entry token list.

129. The apparatus of claim 122 wherein said PIN comparator is further configured to grant said access request if each picture category in said PIN is represented by an entry token in said entry token list.

130. The apparatus of claim 122 wherein said entry token correspondence list indicates a required order for entry tokens in said entry token list.

131. The apparatus of claim 122 wherein

said category selector is further configured to associate each of said picture categories in said PIN with an entry token;

and

said PIN comparator is further configured to grant said access request if each entry token in said entry token list matches the entry token associated with the corresponding picture category ID of the PIN.

132. The apparatus of claim 122 wherein said PIN comparator is further configured to grant said access request if at least one but less than all of said entry tokens in said entry token list correspond to a picture category in said PIN.

133. The apparatus of claim 122 wherein said apparatus is further configured to send at least one PIN instruction in response to said request.

134. The apparatus of claim 133 wherein said at least one PIN instruction comprises at least one picture category ID.

135. The apparatus of claim 133 wherein said at least one PIN instruction comprises a required picture category sequence.

136. The apparatus of claim 133 wherein said apparatus is further configured to repeat said at least one PIN instruction for successive access requests.

137. The apparatus of claim 122 wherein said apparatus is further configured to receive from a user at least one picture belonging to said at least one picture category ID.

138. The apparatus of claim 122 wherein said apparatus is further configured to receive from a user said at least one picture category.

139. The apparatus of claim 122 wherein said category selector is further configured to create said entry token correspondence list.

140. The apparatus of claim 122 wherein

said category selector is further configured to select at least one composite image instruction;

and

said apparatus is further configured to provide said composite image instruction for use in generating said composite image.

141. The apparatus of claim 140 wherein said at least one composite image instruction indicates that the position of each picture category ID in said picture category ID list determines the position of a corresponding picture in said composite image.

142. The apparatus of claim 140 wherein said at least one composite image instruction indicates each picture in said composite image should be presented serially.

143. The apparatus of claim 140 wherein said at least one composite image instruction indicates pictures comprising said composite image should be presented serially in groups of two pictures.

144. The apparatus of claim 140 wherein said at least one composite image instruction indicates pictures comprising said composite image should be presented serially in groups of four pictures.

145. The apparatus of claim 122 wherein said apparatus comprises a smart card.

146. The apparatus of claim 122 wherein said smart card comprises a Java Card™

technology-enabled smart card.

147. The apparatus of claim 145 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

148. The apparatus of claim 145 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

149. The apparatus of claim 145 wherein said smart card comprises a WIM (Wireless Interface Module).

150. The apparatus of claim 145 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

151. The apparatus of claim 145 wherein said smart card comprises a UIM (User Identity Module).

152. The apparatus of claim 145 wherein said smart card comprises a R-UIM (Removable User Identity Module).

153. A method for dynamic personal identification number (PIN) management, the method comprising:

receiving a picture category ID list;

selecting a picture for each of said picture categories in said picture category ID list;

positioning each said picture within a composite image;

presenting said composite image to a user;

receiving an entry token list in response to said presenting, at least one entry token in said entry token list corresponding to a picture within said composite image; and

sending said entry token list.

154. The method of claim 153 wherein said positioning further comprises positioning each said picture within said composite image based upon the position of the corresponding picture category ID in said picture category ID list.

155. The method of claim 153 wherein

said receiving further comprises receiving at least one composite image instruction;

and

said positioning further comprises positioning each said picture within a composite image based upon said at least one composite image instruction.

156. The method of claim 155 wherein said presenting further comprises presenting each picture in said composite image serially.

157. The method of claim 156 wherein said presenting further comprises presenting each picture in said composite image serially in groups of two pictures.

158. The method of claim 156 wherein said presenting further comprises presenting each picture in said composite image serially in groups of four pictures.

159. The method of claim 155, further comprising superimposing an entry token on at least one picture in said composite image based on said at least one composite image instruction.

160. The method of claim 159 wherein said entry token comprises an alphanumeric character.

161. The method of claim 160 wherein said entry token comprises a number.

162. The method of claim 160 wherein said entry token comprises a letter.

163. The method of claim 159 wherein said entry token comprises a non-alphanumeric symbol.

164. The method of claim 153 wherein at least one of said pictures belongs to a plurality of picture categories.

165. The method of claim 153 wherein at least one of said pictures comprises two or more sub-pictures, at least one of said sub-pictures associated with said corresponding picture category.

166. The method of claim 153 wherein said selecting further comprises using a randomized process to select a picture for a picture category ID in said picture category ID list if more than one picture belongs to said picture category.

167. The method of claim 153 wherein said selecting is based upon the last time a picture was selected if more than one picture belongs to said picture category.

168. The method of claim 153 wherein said composite image comprises a rectangular grid of pictures.

169. The method of claim 168 wherein said composite image comprises a square grid of pictures.

170. The method of claim 153 wherein at least one of said picture categories in said picture category ID list is repeated in said picture category ID list.

171. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for dynamic personal identification number management, the method comprising:

receiving a picture category ID list;

selecting a picture for each of said picture categories in said picture category ID list;

positioning each said picture within a composite image;

presenting said composite image to a user;

receiving an entry token list in response to said presenting, at least one entry token in said entry token list corresponding to a picture within said composite image; and

sending said entry token list.

172. The program storage device of claim 171 wherein said positioning further comprises positioning each said picture within said composite image based upon the position of the corresponding picture category ID in said picture category ID list.

173. The program storage device of claim 171 wherein

said receiving further comprises receiving at least one composite image instruction;

and

said positioning further comprises positioning each said picture within a composite image based upon said at least one composite image instruction.

174. The program storage device of claim 173 wherein said presenting further comprises presenting each picture in said composite image serially.

175. The program storage device of claim 174 wherein said presenting further comprises presenting each picture in said composite image serially in groups of two pictures.

176. The program storage device of claim 174 wherein said presenting further comprises presenting each picture in said composite image serially in groups of four pictures.

177. The program storage device of claim 173 wherein said method further comprises superimposing an entry token on at least one picture in said composite image based on said at least one composite image instruction.

178. The program storage device of claim 171 wherein at least one of said pictures belongs to a plurality of picture categories.

179. The program storage device of claim 171 wherein at least one of said pictures comprises two or more sub-pictures, at least one of said sub-pictures associated with said corresponding picture category.

180. The program storage device of claim 171 wherein said selecting further comprises using a randomized process to select a picture for a picture category ID in said picture category ID list if more than one picture belongs to said picture category.

181. The program storage device of claim 171 wherein said selecting is based upon the last time a picture was selected if more than one picture belongs to said picture category.

182. The program storage device of claim 171 wherein said composite image comprises a rectangular grid of pictures.

183. The program storage device of claim 182 wherein said composite image comprises a square grid of pictures.

184. The program storage device of claim 171 wherein at least one of said picture categories in said picture category ID list is repeated in said picture category ID list.

185. An apparatus for dynamic personal identification number management, the apparatus comprising:

means for receiving a picture category ID list;

means for selecting a picture for each of said picture categories in said picture category ID list; and

means for positioning each said picture within a composite image.

186. The apparatus of claim 185, further comprising:

means for presenting said composite image to a user;

means for receiving an entry token list in response to said presenting, at least one entry token in said entry token list corresponding to a picture within said composite image; and

means for sending said entry token list.

187. The apparatus of claim 185 wherein said means for positioning further comprises means for positioning each said picture within said composite image based upon the position of the corresponding picture category ID in said picture category ID list.

188. The apparatus of claim 185 wherein

said means for receiving further comprises means for receiving at least one composite image instruction;

and

said means for positioning further comprises means for positioning each said picture within a composite image based upon said at least one composite image instruction.

189. The apparatus of claim 188 wherein said presenting further comprises presenting each picture in said composite image serially.

190. The apparatus of claim 189 wherein presenting further comprises presenting each picture in said composite image serially in groups of two pictures.

191. The apparatus of claim 189 wherein presenting further comprises presenting each picture in said composite image serially in groups of four pictures.

192. The apparatus of claim 188, further comprising means for superimposing an entry token on at least one picture in said composite image based on said at least one composite image instruction.

193. The apparatus of claim 185 wherein at least one of said pictures belongs to a plurality of picture categories.

194. The apparatus of claim 185 wherein at least one of said pictures comprises two or more sub-pictures, at least one of said sub-pictures associated with said corresponding picture category.

195. The apparatus of claim 185 wherein said means for selecting further comprises means for using a randomized process to select a picture for a picture category ID in said picture category ID list if more than one picture belongs to said picture category.

196. The apparatus of claim 185 wherein said means for selecting is based upon the last time a picture was selected if more than one picture belongs to said picture category.

197. The apparatus of claim 185 wherein said composite image comprises a rectangular grid of pictures.

198. The apparatus of claim 197 wherein said composite image comprises a square grid of pictures.

199. The apparatus of claim 185 wherein at least one of said picture categories in said picture category ID list is repeated in said picture category ID list.

200. The apparatus of claim 185, further comprising means for creating an entry token correspondence list including at least one token that corresponds with at least one picture category in said picture category ID list.

201. An apparatus for dynamic personal identification number management, comprising:

a picture database for storing at least one categorized picture; and

an image generator configured to receive a picture category ID list, said image generator further configured to select a picture from said picture database for each of said picture categories in said picture category ID list, said image generator further configured to position each said picture within a composite image based upon said picture category ID list.

202. The apparatus of claim 201 wherein

said image generator is further configured to provide said composite image for display to a user;

said apparatus is further configured to receive an entry token list after providing said composite image, at least one entry token in said entry token list corresponding to a picture within said composite image and

said apparatus is further configured to provide said entry token list to determine whether said user is authorized to access a service.

203. The apparatus of claim 201 wherein said positioning further comprises positioning each said picture within said composite image based upon the position of the corresponding picture category ID in said picture category ID list.

204. The apparatus of claim 201 wherein

said image generator is further configured to receive at least one composite image instruction;

and

said image generator is further configured to position each said picture within said composite image based upon said at least one composite image instruction.

205. The apparatus of claim 202 wherein said image generator is further configured to provide each picture in said composite image for display to said user serially.

206. The apparatus of claim 205 wherein said image generator is further configured to provide each picture in said composite image for display to said user serially in groups of two pictures.

207. The apparatus of claim 205 wherein said image generator is further configured to provide each picture in said composite image for display to said user serially in groups of four pictures.

208. The apparatus of claim 201 wherein said image generator is further configured to superimpose an entry token on at least one picture in said composite image.

209. The apparatus of claim 204 wherein said image generator is further configured to superimpose an entry token on at least one picture in said composite image based on said at least one composite image instruction.

210. The apparatus of claim 201 wherein at least one of said pictures belongs to a plurality of picture categories.

211. The apparatus of claim 201 wherein at least one of said pictures comprises two or more sub-pictures, at least one of said sub-pictures associated with said corresponding picture category.

212. The apparatus of claim 201 wherein said image generator is further configured to use a randomized number generator to select a picture for a picture category ID in said picture category ID list if more than one picture belongs to said picture category.

213. The apparatus of claim 201 wherein said image generator is further configured to select a picture based upon the last time a picture was selected if more than one picture belongs to said picture category.

214. The apparatus of claim 201 wherein said composite image comprises a rectangular grid of pictures.

215. The apparatus of claim 214 wherein said composite image comprises a square grid of pictures.

216. The apparatus of claim 201 wherein at least one of said picture categories in said picture category ID list is repeated in said picture category ID list.

217. The apparatus of claim 201 wherein said apparatus comprises a mobile phone.

218. The apparatus of claim 201 wherein said apparatus comprises a Web server.

219. The apparatus of claim 201 wherein said apparatus is further configured to create an entry token correspondence list including at least one token that corresponds with at least one picture category in said picture category ID list.

220. An apparatus for dynamic personal identification number management, comprising:

a picture database for storing at least one categorized picture; and

an image generator configured to receive a picture category ID list, said image generator further configured to select a picture from said picture database for each of said picture categories in said picture category ID list, said image generator further configured to position each said picture within a composite image based upon said picture category ID list, said image generator further configured to provide said composite image for display to a user to determine whether said user is authorized to access a service.

221. The apparatus of claim 220 wherein said apparatus comprises a mobile phone.

222. The apparatus of claim 220 wherein said apparatus comprises a Web server.