System and method for controlling user access to an electronic device

• US 20050022005A1
• Filed: 08/26/2004
• Published: 01/27/2005
• Est. Priority Date: 02/23/2000
• Status: Active Grant

• Current Assignee: Micron Technology, Inc.
• Original Assignee: Mei California, Inc. (Micron Technology, Inc.)
• Inventors: McKeeth, James
• Granted Patent: US 7,877,612 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 3/041 Digitisers, e.g. for touch screens or touch pads, characterised by the transducing means
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G06V 40/12 Fingerprints or palmprints

Abstract

A method and system for authenticating a user to access a computer system. The method comprises communicating security information to the computer system, and providing the computer system with an implicit input. The method further comprises determining whether the security information and implicit input match corresponding information associated with the user. The method further comprises granting the user access to the computer system in the event of a satisfactory match. When authenticating the user, the method and system consider the possibility of the user being legitimate but subject to duress or force by a computer hacker.

Claims

1. A system for controlling user access to information on an electronic device, the system comprising:

at least one input device coupled to an electronic device;

a user interface configured to instruct a user to provide security information with the at least one input device;

a memory configured to store a predetermined pattern; and

a processor coupled to the user interface and to the memory, wherein the processor is configured to receive from the at least one input device said security information and a sequence of electrical signals representing a non-prompted authorization pattern,

and wherein the processor is configured to compare the non-prompted authorization pattern with the predetermined pattern, and wherein the processor is further configured to output a signal granting the user partial access to the electronic device in the event of an unsatisfactory match between the non-prompted authorization pattern and the predetermined pattern.

2. The system of claim 1, wherein the at least one input device comprises a mouse.

3. The system of claim 2, wherein the non-prompted authorization pattern corresponds to particular movement of the mouse.

4. The system of claim 2, wherein the at least one input device further comprises a keyboard.

5. The system of claim 1, further comprising a timer coupled to the processor, wherein the timer is configured to measure a duration of time between the receiving of the security information and the receiving of the sequence of electrical signals.

6. The system of claim 5, wherein the processor is further configured to grant the user partial access to the electronic device if the measured duration exceeds a predetermined amount.

7. The system of claim 1, wherein the partial access is partial access to information stored on the electronic device.

8. The method of claim 1, wherein granting the user partial access to the electronic device comprises limiting the user access to read-only access of files stored on the electronic device.

9. The method of claim 1, wherein granting the user partial access to the electronic device comprises preventing the electronic copying of information stored on the electronic device.

10. A user authentication system for maintaining the security of information stored on an electronic device, the user authentication system comprising:

a user interface configured to prompt a user to provide authentication information using at least one input device;

a processor configured to receive said authentication information, the processor being further configured to receive from the at least one input device a non-prompted authorization pattern;

a memory configured to store a predetermined pattern; and

a compare circuit coupled to the processor and to the memory, wherein the compare circuit is configured to compare at least the non-prompted authorization pattern with the predetermined pattern, and wherein the compare circuit is configured to grant the user partial access to the electronic device in the event of an unsatisfactory match between the non-prompted authorization pattern and the predetermined pattern.

11. The user authentication system of claim 10, further comprising a timer configured to measure a duration of time between the receiving of the authentication information and the receiving of the non-prompted authorization pattern.

12. The user authentication system of claim 11, wherein the compare circuit is configured to grant the user partial access to the electronic device if the measured duration exceeds a designated duration.

13. The user authentication system of claim 10, wherein the at least one input device comprises a mouse.

14. The user authentication system of claim 10, wherein the non-prompted authorization pattern corresponds to a particular movement of the at least one input device.

15. The user authentication system of claim 10, wherein the compare circuit is further configured to cause a security alert in the event of an unsatisfactory match between the non-prompted authorization pattern and the predetermined pattern.

16. The user authentication system of claim 15, wherein the security alert comprises a silent security alert.

17. The user authentication system of claim 10, wherein the processor is configured to cause an alert signal in the event of an absence of the non-prompted authorization pattern.

18. A method of controlling user access to an electronic device, the method comprising:

receiving security information input by a user;

receiving a non-prompted authorization pattern input by the user;

determining whether the non-prompted authorization pattern matches a stored pattern;

measuring a duration of time between the receiving of the security information and the receiving of the non-prompted authorization pattern; and

limiting the scope of user access to an electronic device in the event of an unsatisfactory match between the non-prompted authorization pattern and the stored pattern.

19. The method of claim 18, wherein the act of limiting the scope of user access comprises granting the user partial access to the electronic device.

20. The method of claim 19, wherein granting the user partial access comprises limiting the user access to read-only access of files stored on the electronic device.

21. The method of claim 18, wherein the act of limiting the scope of user access comprises preventing the electronic copying of files stored on the electronic device.

22. The method of claim 18, wherein the act of limiting the scope of user access comprises preventing the electronic printing of information stored on the electronic device.

23. The method of claim 18, additionally comprising limiting the scope of user access to the electronic device if the measured duration of time exceeds a designated amount.

24. The method of claim 18, additionally comprising issuing a security alert in the event of an unsatisfactory match between the non-prompted authorization pattern and the stored pattern.

25. The method of claim 24, wherein the security alert comprises a silent security alert.

26. The method of claim 24, wherein the act of issuing the security alert comprises sending a text message to a remote location.

27. The method of claim 24, wherein the security alert identifies an electronic address of the electronic device.

28. The method of claim 24, wherein the security alert identifies a physical address of the electronic device.

29. The method of claim 18, wherein the non-prompted authorization pattern corresponds to a particular movement of an input device coupled to the electronic device.

30. A method of controlling user access to an electronic device, the method comprising:

receiving security information from the user;

receiving a non-prompted input from the user;

comparing the security information and the non-prompted input with respective information associated with the user; and

granting the user partial access to an electronic device in the event of an unsatisfactory match between the non-prompted input and the respective information associated with the user.

31. The method of claim 30, additionally comprising measuring a duration of time between the receiving of the security information and the receiving of the non-prompted input.

32. The method of claim 31, additionally comprising granting the user partial access to the electronic device if the measured duration exceeds a threshold duration.

33. The method of claim 30, wherein the non-prompted input corresponds to particular movement of an input device.

34. The method of claim 33, wherein the input device comprises a mouse.

35. The method of claim 30, additionally comprising issuing a security alert in the event of an unsatisfactory match between the non-prompted input and the respective information associated with the user.

36. The method of claim 30, wherein the security information comprises a password.

37. The method of claim 30, wherein granting the user partial access comprises limiting the user access to read-only access of selected files accessible through the electronic device.

38. The method of claim 30, wherein granting the user partial access comprises preventing the electronic copying of files stored on the electronic device.

39. A system for authenticating a user of an electronic device, the system comprising:

means for prompting the input of security information by a user;

means for receiving the security information and for receiving the input of a non-prompted authorization pattern from the user; and

means for comparing the security information and the non-prompted authorization pattern with respective information associated with the user, wherein said means for comparing is configured to grant the user partial access to information stored in an electronic device in the event of an unsatisfactory match between the non-prompted authorization pattern and the respective information associated with the user.

40. The system of claim 39, further comprising means for measuring a duration of time between the input of security information and the input of the non-prompted authorization pattern.

41. The system of claim 40, wherein the means for comparing is configured to grant the user partial access to information stored in the electronic device if the measured duration exceeds a threshold duration.

42. The system of claim 39, wherein the security information comprises at least one of a user identification and a password.

43. The system of claim 39, further comprising means for generating an alert signal in the event of an unsatisfactory match between the non-prompted authorization pattern and the respective information associated with the user.

44. The system of claim 43, wherein the alert signal comprises a silent alert signal.

45. The system of claim 39, further comprising means for inputting the non-promoted authorization pattern.

46. The system of claim 45, wherein the non-prompted authorization pattern corresponds to a particular movement of the means for inputting.

47. The system of claim 39, wherein granting the user partial access comprises prohibiting the user from electronically copying information stored on the electronic device.