User authentication

• US 20050193208A1
• Filed: 02/26/2004
• Published: 09/01/2005
• Est. Priority Date: 02/26/2004
• Status: Abandoned Application

• Current Assignee: FMR Corporation (FMR LLC)
• Original Assignee: FMR Corporation (FMR LLC)
• Inventors: Charrette, Edmond Eldrick III, Rosenbaum, Richard
• Application Number:
  US10/787,685
• Publication Number:
  US 20050193208A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G07F 7/1033 Details of the PIN pad

Abstract

There are methods and apparatus, including computer program products, for user authentication. For example, there is a method that includes generating a dynamic mapping between assigned authentication symbols and temporary authentication symbols, presenting the dynamic on an electronic device, and receiving a selection signal that identifies one or more of the temporary authentication symbols.

Claims

1. A method comprising:

generating a dynamic one-to-one mapping between assigned authentication symbols and temporary authentication symbols;

presenting the dynamic one-to-one mapping on an electronic device; and

receiving a selection signal that identifies one or more of the temporary authentication symbols.

2. The method of claim 1 wherein the assigned authentication symbols correspond to alphanumeric characters.

3. The method of claim 1 wherein the temporary authentication symbols correspond to keystrokes on a keyboard.

4. The method of claim 3 wherein the selection signal comprises a signal from the keyboard.

5. The method of claim 1 wherein the dynamic one-to-one mapping is presented in an image.

6. The method of claim 5 wherein the image includes obscured symbols.

7. The method of claim 6 wherein the obscured symbols comprise obscured text.

8. The method of claim 6 wherein the obscured symbols comprise a CAPTCHA.

9. The method of claim 1 further comprising:

providing authentication to a user, based on the identified temporary authentication symbols, the dynamic one-to-one mapping, and a user credential.

10. The method of claim 1 wherein the dynamic one-to-one mapping is generated according to a pseudorandom algorithm.

11. The method of claim 1 further comprising changing the dynamic one-to-one mapping after a log on attempt.

12. The method of claim 1 wherein the dynamic one-to-one mapping is sent to the electronic device over a communication channel.

13. A system comprising:

a server module configured to generate a dynamic one-to-one mapping between assigned authentication symbols and temporary authentication symbols; and

a client module configured to;

present the dynamic one-to-one mapping on an electronic device; and

receive a selection signal that identifies one or more of the temporary authentication symbols.

14. The system of claim 13 wherein the server module is further configured to:

provide authentication to a user, based on the identified temporary authentication symbols, the dynamic one-to-one mapping, and a user credential.

15. The system of claim 13 wherein the dynamic one-to-one mapping is generated according to a pseudorandom algorithm.

16. An article of manufacture having computer-readable program portions embodied therein, the article comprising instruction for causing a processor to:

generate a dynamic one-to-one mapping between assigned authentication symbols and temporary authentication symbols;

present the dynamic one-to-one mapping on an electronic device; and

receive a selection signal that identifies one or more of the temporary authentication symbols.

17. The article of manufacture of claim 16 further comprising instruction for causing the processor to:

provide authentication to a user, based on the identified temporary authentication symbols, the dynamic one-to-one mapping, and a user credential.

18. The article of manufacture of claim 16 wherein the dynamic one-to-one mapping is generated according to a pseudorandom algorithm.

19. A method comprising:

generating a dynamic mapping between symbols and respective subsets of screen coordinates of an electronic device; and

receiving a selection signal that identifies one or more of the subsets of screen coordinates;

wherein the dynamic mapping changes at least after each log on attempt.

20. The method of claim 19 wherein the symbols correspond to alphanumeric characters.

21. The method of claim 19 wherein the subsets of screen coordinates correspond to on-screen buttons.

22. The method of claim 21 wherein the on-screen buttons include a button labeled with a plurality of symbols.

23. The method of claim 21 wherein the on-screen buttons include a plurality of buttons labeled with the same symbol.

24. The method of claim 21 wherein the on-screen buttons comprise more than ten buttons.

25. The method of claim 19 wherein the selection signal is received from an input device that bypasses a keyboard.

26. The method of claim 25 wherein the input device controls an on-screen pointer.

27. The method of claim 25 wherein the input device comprises a mouse.

28. The method of claim 19 further comprising:

providing authentication to a user, based on the identified subsets of screen coordinates, the dynamic mapping, and a user credential.

29. The method of claim 19 wherein the dynamic mapping is generated according to a pseudorandom algorithm.

30. The method of claim 19 wherein the dynamic mapping is sent to the electronic device over a communication channel.

31. A system comprising:

a server module configured to generate a dynamic mapping between symbols and respective subsets of screen coordinates of an electronic device; and

a client module configured to;

receive a selection signal that identifies one or more of the subsets of screen coordinates;

wherein the dynamic mapping changes at least after each log on attempt.

32. The system of claim 31 wherein the server module is further configured to:

provide authentication to a user, based on the identified subsets of screen coordinates, the dynamic mapping, and a user credential.

33. The system of claim 31 wherein the dynamic mapping is generated according to a pseudorandom algorithm.

34. An article of manufacture having computer-readable program portions embodied therein, the article comprising instruction for causing a processor to:

generate a dynamic mapping between symbols and respective subsets of screen coordinates of an electronic device; and

receive a selection signal that identifies one or more of the subsets of screen coordinates;

wherein the dynamic mapping changes at least after each log on attempt.

35. The article of manufacture of claim 34 further comprising instruction for causing the processor to:

provide authentication to a user, based on the identified subsets of screen coordinates, the dynamic mapping, and a user credential.

36. The article of manufacture of claim 34 wherein the dynamic mapping is generated according to a pseudorandom algorithm.

37. A method comprising:

generating a dynamic spatial mapping between assigned authentication locations and temporary authentication symbols;

presenting the dynamic spatial mapping in an image on an electronic device; and

receiving a selection signal that identifies one or more of the temporary authentication symbols.

38. The method of claim 37 wherein the dynamic spatial mapping locates the temporary authentication symbols at respective locations within the image corresponding to the assigned authentication locations.

39. The method of claim 37 wherein the image represents an identification card.

40. The method of claim 39 wherein the assigned authentication locations correspond to locations of holes in the identification card.

41. The method of claim 37 wherein the temporary authentication symbols correspond to keystrokes on a keyboard.

42. The method of claim 41 wherein the selection signal comprises a signal from the keyboard.

43. The method of claim 37 further comprising:

providing authentication to a user, based on the identified temporary authentication symbols, the dynamic spatial mapping, and a user credential.

44. The method of claim 37 wherein the dynamic spatial mapping is generated according to a pseudorandom algorithm.

45. The method of claim 37 further comprising changing the dynamic spatial mapping after a log on attempt.

46. The method of claim 37 wherein the dynamic spatial mapping is sent to the electronic device over a communication channel.

47. A system comprising:

a server module configured to generate a dynamic spatial mapping between assigned authentication locations and temporary authentication symbols; and

a client module configured to;

present the dynamic spatial mapping on an electronic device; and

receive a selection signal that identifies one or more of the temporary authentication symbols.

48. The system of claim 47 wherein the server module is further configured to:

provide authentication to a user, based on the identified temporary authentication symbols, the dynamic spatial mapping, and a user credential.

49. The system of claim 47 wherein the dynamic spatial mapping is generated according to a pseudorandom algorithm.

50. An article of manufacture having computer-readable program portions embodied therein, the article comprising instruction for causing a processor to:

generate a dynamic spatial mapping between assigned authentication locations and temporary authentication symbols;

present the dynamic spatial mapping on an electronic device; and

receive a selection signal that identifies one or more of the temporary authentication symbols.

51. The article of manufacture of claim 50 further comprising instruction for causing the processor to:

provide authentication to a user, based on the identified temporary authentication symbols, the dynamic spatial mapping, and a user credential.

52. The article of manufacture of claim 50 wherein the dynamic spatial mapping is generated according to a pseudorandom algorithm.