System and method for user authentication with enhanced passwords

• US 20040054929A1
• Filed: 08/27/2002
• Published: 03/18/2004
• Est. Priority Date: 08/27/2002
• Status: Active Grant

• Current Assignee: S Aqua Semiconductor LLC (Intellectual Ventures LLC)
• Original Assignee: Michael Lawrence Serpa
• Inventors: Serpa, Michael Lawrence
• Granted Patent: US 6,954,862 B2
• Time in Patent Office: Days
• US Class Current: 713/202
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour

Abstract

A system and method for enhancing passwords, access codes, and personal identification numbers by making them pace, rhythm, or tempo sensitive. The sequence of characters comprising the password/access code/personal identification number has an associated timing element. To access a restricted device or function a user must enter the correct character sequence according to the correct pace, rhythm, or tempo. The entered sequence and timing element are compared with stored values and access is granted only if the entered and stored values match. In an alternative embodiment the stored timing element is set, and periodically altered, by a computer or program without consent from the user and visual, auditory, and/or tactile prompts indicate the correct timing element to the user during the authentication process.

Claims

1. A system and method for user authentication, the system and method comprising a password or access code;

and

the password or access code being pace, rhythm, or tempo sensitive.

2. The system and method of claim 1, the system and method further including a user identification name or number.

3. A system and method for user authentication, the system and method comprising the steps of:

receiving a password or access code from a user, the password or access code entered according to a certain pace, rhythm, or tempo;

determining whether the entered password or access code matches a stored password or access code and whether the certain pace, rhythm, or tempo of the password or access code entry matches a stored certain pace, rhythm, or tempo of password or access code entry for the stored password or access code; and

granting access only if the entered password or access code matches the stored password or access code and the certain pace, rhythm, or tempo of password or access code entry matches the stored certain pace, rhythm, or tempo of password or access code entry for the stored password or access code.

4. The system and method of claim 3, wherein the user is required to enter a user identification name or number.

5. The system and method of claim 3, wherein a visual, auditory, and/or tactile timing aid assists the user with entering the password or access code according to the certain pace, rhythm, or tempo.

6. The system and method of claim 3, wherein the user is required to enter an identification name or number;

and

a visual, auditory, and/or tactile timing aid assists the user with entering the password or access code according to the certain pace, rhythm, or tempo.

7. The system and method of claim 3, wherein the stored certain pace, rhythm, or tempo for the stored password or access code is set and can be altered by a computer or program without consent from the user;

and

visual, auditory, and/or tactile prompts from the computer or program indicate to the user the stored certain pace, rhythm, or tempo for the stored password or access code.

8. A system and method for user authentication, the system and method for use with a device or system having a computer or computer program;

the device or system also including computer memory;

the device or system permitting input by a user;

the system and method comprising a password or access code, the password or access code consisting of characters;

the password or access code having a timing element, the timing element consisting of pauses occurring before, between, or after certain of the characters of the access code;

the password or access code being stored in the computer memory;

the timing element being stored in the computer memory or being generated by the computer or computer program; and

user authentication resulting when the user inputs the password or access code in accordance with the timing element.

9. The system and method of claim 8, wherein:

the timing element is conveyed to the user by visual, auditory, and/or tactile prompts.

10. The system and method of claim 8, wherein:

the system and method including a ghost character feature, the ghost character feature capable of being locked and unlocked by the user;

the ghost character feature permitting the user to input, during the pauses in the password or access code, certain or random additional characters; and

the computer or program able to ignore the certain or random additional characters depending upon whether the ghost feature is locked or unlocked.