Method and system for authenticating a user of a computer system

• US 20050021960A1
• Filed: 06/25/2004
• Published: 01/27/2005
• Est. Priority Date: 02/23/2000
• Status: Abandoned Application

• Current Assignee: Micron Technology, Inc.
• Original Assignee: Micron Technology, Inc.
• Inventors: McKeeth, James
• Application Number:
  US10/877,782
• Publication Number:
  US 20050021960A1
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 3/041 Digitisers, e.g. for touch screens or touch pads, characterised by the transducing means
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G06V 40/12 Fingerprints or palmprints

Abstract

A method and system for authenticating a user to access a computer system. The method comprises communicating security information to the computer system, and providing the computer system with an implicit input. The method further comprises determining whether the security information and implicit input match corresponding information associated with the user. The method further comprises granting the user access to the computer system in the event of a satisfactory match. When authenticating the user, the method and system consider the possibility of the user being legitimate but subject to duress or force by a computer hacker.

Claims

1. Cancelled.

2. A system for authenticating a user of an electronic device, the system comprising:

an input device configured to communicate an authorization pattern to an electronic device;

a user interface configured to receive security information;

a compare circuit coupled to the input device and configured to determine whether the authorization pattern matches a stored pattern;

a timer configured to measure a duration of time between the communication of the authorization pattern and the receiving of the security information; and

a process circuit coupled to the compare circuit and to the timer, wherein the process circuit is configured to grant a user access to the electronic device in the event of a satisfactory match and if the measured duration is less than a designated amount.

3. The system of claim 2, wherein the input device comprises a mouse.

4. The system of claim 3, wherein the authorization pattern identifies a particular movement of the mouse.

5. The system of claim 2, wherein the security information comprises a user identification.

6. The system of claim 2, wherein the process circuit is configured to deny the user access to the electronic device if the measured duration exceeds the designated amount.

7. The system of claim 2, wherein the process circuit is configured to generate an alert signal in the event of an unsatisfactory match between the authorization pattern and the stored pattern.

8. The system of claim 2, wherein the process circuit is configured to grant the user a limited scope of access to the electronic device in the event of an unsatisfactory match between the authorization pattern and the stored pattern.

9. The system of claim 8, wherein the process circuit is configured to generate a silent alert in the event of an unsatisfactory match between the authorization pattern and the stored pattern.

10. A system for authenticating a user of an electronic device, the system comprising:

a user interface configured to receive security information and an authorization pattern from a user;

a memory configured to store a predetermined pattern;

a compare circuit coupled to the user interface and to the memory;

wherein the compare circuit is configured to determine whether the authorization pattern matches the predetermined pattern;

a timer configured to measure a duration of time between the receiving of the security information and the receiving of the authorization pattern; and

a process circuit coupled to the timer and to the compare circuit, wherein the process circuit is configured to grant the user access to the electronic device in the event of a satisfactory match and if the measured duration is less than a designated amount.

11. The system of claim 10, wherein the process circuit is configured to grant partial access to the electronic device in the event of an unsatisfactory match between the authorization pattern and the predetermined pattern.

12. The system of claim 11, wherein the partial access does not allow for the electronic printing of files.

13. The system of claim 11, wherein the partial access does not allow for the electronic copying of files.

14. The system of claim 10, wherein the process circuit is configured to grant partial access to the electronic device if the measured duration is not less than the designated amount.

15. The system of claim 10, further comprising an input device coupled to the user interface.

16. The system of claim 15, wherein the authorization pattern identifies a particular movement of the input device.

17. The system of claim 16, wherein the input device comprises a mouse.

18. A system for authenticating a user of an electronic device, the system comprising:

a user interface configured to instruct a user to provide security information to an electronic device;

process circuitry coupled to the user interface and configured to receive a first input signal representing the security information, wherein the process circuitry is further configured to receive a second input signal representing an authorization pattern; and

a timer coupled to the process circuitry and configured to measure a duration of time between the receiving of the first input signal and the receiving of the second input signal,

wherein the process circuitry is further configured to determine the authenticity of the security information and of the authorization pattern.

19. The system of claim 18, further comprising a memory configured to store a predetermined pattern.

20. The system of claim 19, wherein the process circuitry comprises a compare circuit configured to compare the authorization pattern with the predetermined pattern.

21. The system of claim 20, wherein the process circuitry is configured to grant the user access to the electronic device in the event of a satisfactory match between the authorization pattern and the predetermined pattern.

22. The system of claim 18, wherein the authorization pattern corresponds to a particular movement of an input device.

23. The system of claim 22, wherein the input device comprises a mouse.

24. The system of claim 18, wherein the process circuitry is further configured to deny the user access to the electronic device if the measured duration exceeds a predetermined amount.

25. The system of claim 18, wherein the second input signal comprises a sequence of electrical signals.

26. A method of authenticating a user of an electronic device, the method comprising:

receiving authentication information from a user;

receiving an authorization pattern provided by an input device, wherein the authorization pattern is non-prompted;

comparing the non-prompted authorization pattern with a stored pattern;

measuring a duration of time between the receiving of the authentication information and the receiving of the authorization pattern; and

granting the user access to an electronic device in the event of a satisfactory match between the non-prompted authorization pattern and the stored pattern and if the duration of time is less than a threshold amount.

27. The method of claim 26, additionally comprising authenticating the authentication information

28. The system of claim 26, wherein the authentication information comprises a user identification.

29. The method of claim 26, wherein the authentication information comprises a password.

30. The method of claim 26, wherein the input device includes at least one of a mouse, a trackball, a keyboard, a touch screen, a microphone, and a scanner.

31. The method of claim 26, additionally comprising limiting the scope of access in the event of an unsatisfactory match between the non-prompted authorization pattern and the stored pattern.

32. The method of claim 26, wherein the non-prompted authorization pattern corresponds to a particular movement of the input device.

33. The method of claim 26, additionally comprising issuing a security alert in the event of an unsatisfactory match between the non-prompted authorization pattern and the stored pattern.

34. The method of claim 33, wherein the security alert comprises a silent security alert.

35. A method of authenticating a user of an electronic device, the method comprising:

receiving security information from a user;

receiving an authorization pattern provided by an input device;

determining whether the authorization pattern matches a stored pattern;

measuring a duration of time between the receiving of the security information and the receiving of the authorization pattern; and

granting the user access to an electronic device in the event of a satisfactory match and if the measured duration of time is less than a designated time.

36. The method of claim 35, wherein the authorization pattern corresponds to a particular movement of the input device.

37. The method of claim 36, wherein the input device comprises a mouse.

38. The method of claim 35, wherein the input device comprises a touch screen.

39. The method of claim 35, wherein said input device comprises an optical scanner.

40. The method of claim 39, wherein the optical scanner is configured to scan a finger of the user.

41. The method of claim 39, wherein the optical scanner is configured to scan a retina of the user.

42. The method of claim 35, wherein the authorization pattern corresponds to an implicit act by the user.

43. The method of claim 35, wherein the act of receiving the security information occurs prior to the act of receiving the authorization pattern.

44. The method of claim 35, additionally comprising denying the user access to the electronic device in the event of an unsatisfactory match between the authorization pattern and the stored pattern.

45. The method of claim 35, additionally comprising issuing a security alert in the event of an unsatisfactory match between the authorization pattern and the stored pattern.

46. The method of claim 45, wherein the security alert comprises a silent security alert.

47. A system for authenticating a user of an electronic device, the system comprising:

means for inputting an authorization pattern into an electronic device,

means for comparing the authorization pattern with respective information associated with the user;

means for measuring a duration of time between an entry of security information and the inputting of the authorization pattern; and

processing means for granting the user access to the electronic device if the measured duration is less than a threshold duration and in the event of a satisfactory match between the authorization pattern and the respective information associated with the user.

48. The system of claim 47, wherein the security information comprises at least one of a user identification and a password.

49. The system of claim 47, wherein the processing means is configured to generate an alert signal in the event of an unsatisfactory match between the authorization pattern and the respective information associated with the user.

50. The system of claim 47, wherein the processing means is configured to grant the user a limited scope of access to the electronic device in the event of an unsatisfactory match between the authorization pattern and the respective information associated with the user.

51. The system of claim 50, wherein the limited scope of access is limited to read-only access of selected files stored on the electronic device.

52. The system of claim 47, wherein the processing means is configured to generate an alert signal in the event of an absence of the authorization pattern.

53. The system of claim 47, wherein the processing means is configured to grant the user a limited scope of access to the electronic device if the measured duration is not less than the threshold duration.