System for authentication and identification for computerized and networked systems

• US 20060020559A1
• Filed: 07/14/2005
• Published: 01/26/2006
• Est. Priority Date: 07/20/2004
• Status: Abandoned Application

• Current Assignee: Scribocel Incorporated
• Original Assignee: Scribocel Incorporated
• Inventors: Steinmetz, Moshe
• Application Number:
  US11/181,302
• Publication Number:
  US 20060020559A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07C 9/21 having a variable access code
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: G07F 7/1058 PIN is checked locally
• CPC Class Codes: G07F 7/1066 PIN data being compared to data on card
• CPC Class Codes: G09C 1/02 by using a ciphering code in chart form
• CPC Class Codes: G09C 1/04 with sign carriers or indicators moved relative to one another to positions determined by a permutation code, or key, so as to indicate the appropriate corresponding clear or ciphered text
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

The invention consists of a uniquely punched or printed key, often in the form of a card, that is used to identify and authenticate a user during online transactions. The computer randomly generates an array of characters, such as numbers, letters or symbols, which is displayed to the user, e.g., on a computer monitor, or printed, such as in matrix format. When held over the displayed matrix, the key allows the user to view only certain portions of the matrix, which portions together form the user'"'"'s one-time-password, which is unique for each authentication transaction. The user is then authenticated by utilizing both the actual key and a password or personal identification number. This two-pronged requirement for authentication insures the high security level provided by the system.

Claims

1. A system for authenticating a user for a transaction, comprising:

means for generating, from among a set of characters, a scrambled set of characters, in an array format;

a key having a plurality of view areas, said key being uniquely associated with a predetermined code, and said plurality of view areas being arranged on said key in accordance with said predetermined code;

an input means for allowing the user to input a password, said password comprising selected characters from said scrambled array, said selected characters having been revealed to the user by said key when said key is placed over said scrambled array; and

means for correlating said password with said predetermined code;

whereby the user is authenticated for the transaction if said entered password correlates to said predetermined code, and the user is not authenticated for the transaction if said entered password does not correlate to said predetermined code.

2. The system of claim 1 wherein said array format of characters comprises characters arranged within a two-dimensional shape.

3. The system of claim 2 wherein said array format of characters comprises at least one row and at least one column oriented orthogonally with respect to each other.

4. The system of claim 2 wherein said array format of characters comprises at least one row and at least one column oriented non-orthogonally with respect to each other.

5. The system of claim 2 wherein said array format of characters comprises a spiral or circular formation with at least one concentric spiral or circular row of characters.

6. The system of claim 2 wherein said array format of characters comprises a spiral or circular formation with said characters spiraling outward from a central node.

7. The system of claim 1 wherein said array format of characters is determined in accordance with said predetermined code.

8. The system of claim 1 wherein said set of said characters comprises numbers, letters, symbols or a combination of two or more thereof, and wherein said scrambled set of characters comprises a subset of said set of characters.

9. The system of claim 8 wherein each character in said scrambled set of characters appears only once in said scrambled array.

10. The system of claim 8 wherein each character in said scrambled set of characters may appear more than once in said scrambled array.

11. The system of claim 1 wherein said key comprises a substantially two-dimensional body.

12. The system of claim 11 wherein said key is substantially opaque and said plurality of view areas comprise a plurality of transparent regions, said selected characters of said scrambled array being revealed to the user through said transparent regions when said key is placed over said scrambled array.

13. The system of claim 11 wherein said plurality of view areas comprise a plurality of apertures formed through said body, said selected characters of said scrambled array being revealed to the user through said plurality of apertures when said key is placed over said scrambled array.

14. The system of claim 11 wherein said key is substantially transparent and said plurality of view areas comprise a plurality of areas having a distinctive indication, said selected characters of said scrambled array being revealed to the user through said distinctive indications when said key is placed over said scrambled array.

15. The system of claim 1 wherein said key further comprises a memory for storage of data.

16. The system of claim 1 further comprising a display device for presenting to the user said array of scrambled characters.

17. The system of claim 16 wherein said display device is a screen or monitor.

18. The system of claim 16 wherein said display device is a printer.

19. The system of claim 16 wherein said display device presents said scrambled array in substantially the same physical dimensions as said key, such that there is only one position in which said key may be placed over said presented scrambled array wherein selected characters of said scrambled array are revealed to the user.

20. The system of claim 16 wherein said display device presents said scrambled array in larger physical dimensions than said key, such that there is more than one position in which said key may be placed over said presented scrambled array wherein selected characters of said scrambled array are revealed to the user.

21. The system of claim 20 wherein the identities of said selected characters from said scrambled array that comprise said password are dependent upon the position in which said key is placed over said presented scrambled array, such that the number of different passwords correspond to the number of different positions in which said key may be placed over said presented scrambled array, wherein said means for correlating correlates each of the number of different passwords with said predetermined code to allow the user to be authenticated for the transaction.

22. The system of claim 16 wherein said key has a size and shape that are determined in accordance with the size and shape of said display device.

23. The system of claim 1 wherein said input means comprises a keyboard, touch screen, mouse, telephone, voice recognition or handwriting recognition, or combinations thereof.

24. The system of claim 23 wherein said input means comprises a touch screen, said system further comprising means for recognizing pressure or heat variations on said touch screen and means for correlating a pressure or heat variation on said touch screen to the character from said scrambled array most proximate to the pressure or heat variation.

25. The system of claim 24 further comprising a display device for presenting to the user the array format but not the characters in said scrambled array.

26. The system of claim 23 wherein said input means comprises a mouse and screen, said system further comprising means for recognizing mouse clicks on said screen and means for correlating a mouse click on said screen to the character from said scrambled array most proximate to the mouse click.

27. The system of claim 26 further comprising a display device for presenting to the user the array format but not the characters in said scrambled array.

28. The system of claim 1 wherein said predetermined code is uniquely associated with the user.

29. The system of claim 1 wherein said predetermined code comprises a plurality of vectors that indicate a plurality of specific positions in said scrambled array, and said plurality of view areas in said key correspond to said plurality of specific positions in said scrambled array.

30. The system of claim 29 wherein each vector comprises at least one number or character that identifies a position in said scrambled array.

31. The system of claim 30 wherein said characters of said scrambled array are arranged among a plurality of positions that are sequentially identified from a first position in said array to a last position in said array.

32. The system of claim 29 wherein said means for generating a scrambled set of characters in an array format comprises a processing device and software operative to perform the steps of:

creating an array of said characters in a predetermined format;

determining for said array the identities of said characters within said plurality of specific positions;

storing in a memory the identities of said characters within said plurality of specific positions;

scrambling said array such that the plurality of specific positions of said characters whose identities have been stored may or may not be the same in said scrambled array as they were in said array prior to scrambling; and

presenting to the user said array of scrambled characters.

33. The system of claim 32 wherein said means for correlating said password with said predetermined code comprises a processing device and software operative to perform the steps of:

deriving, from said password input by the user and from said scrambled array, the specific positions in said scrambled array of said selected password characters which were input by the user;

determining the identities of the characters in the unscrambled array at the same positions as the specific positions just derived; and

matching the identities of the characters in the unscrambled array just determined with the identities of said characters stored in said memory.

34. The system of claim 33 wherein the identities of said characters are stored in said memory in a specific sequence, and said selected characters in said scrambled array have been input by the user in a specific sequence, and wherein said software of said means for correlating said password is operative to perform the further step, in said step of matching the identities, of determining whether the sequence of said characters in the unscrambled array just determined based upon the selected characters in said scrambled array input by the user matches the sequence of said characters stored in said memory.

35. The system of claim 1 wherein said means for generating a scrambled set of characters is adapted to randomly generate for a first transaction a scrambled array of characters that has a statistically insignificant chance of being repeated for a second transaction.

36. The system of claim 35 wherein the chance of said scrambled array of characters being the same for a first transaction as for a second transaction decreases as the number of character positions present in said array increases.

37. The system of claim 1 wherein said means for generating a scrambled set of characters is adapted to randomly generate for a first transaction a scrambled array of characters such that said selected characters comprising the password have a statistically insignificant chance of being repeated for a second transaction.

38. The system of claim 37 wherein the chance of said selected characters comprising the password being the same for a first transaction as for a second transaction decreases as the number of character positions present in said array increases.

39. The system of claim 37 wherein the chance of said selected characters comprising the password being the same for a first transaction as for a second transaction decreases as the number of character positions present in said password increases.

40. The system of claim 1 wherein said key comprises an indication of the order in which the characters of said password are to be input by the user.

41. The system of claim 40 wherein said indication of the order of password input comprises a plurality of sequential characters, each of which is provided adjacent to a specific one of said plurality of view areas in said key.

42. The system of claim 1 wherein said key comprises an indication of arithmetic modification that are to be made to said selected characters from said scrambled array by the user prior to input of said password.

43. The system of claim 42 wherein said indication of arithmetic modification comprises a plurality of arithmetic operation indicators and a plurality of operands, one of each of which is provided adjacent to a specific one of said plurality of view areas to indicate the arithmetic operation to be taken and the operand to be used with respect to the selected character from said scrambled array that is revealed through said respective view area so as to derive a respective one of said password characters.

44. The system of claim 42 wherein said indication of arithmetic modification comprises a plurality of arithmetic operation indicators, one of each of which is provided adjacent to a specific one of said plurality of view areas to indicate the arithmetic operation to be taken with respect to an operand and the selected character from said array that is revealed through said respective view area so as to derive a respective one of said password characters.

45. The system of claim 44 wherein said key comprises an indication of said operand.

46. The system of claim 1 wherein said means for generating is located remote from said input means and is linked thereto via an electronic network.

47. The system of claim 1 wherein said means for correlating is located remote from said input means and is linked thereto via an electronic network.