Method and Apparatus for Network Authentication of Human Interaction and User Identity

• US 20080216163A1
• Filed: 01/31/2008
• Published: 09/04/2008
• Est. Priority Date: 01/31/2007
• Status: Active Grant

• Current Assignee: Binary Monkeys Incorporated
• Original Assignee: Binary Monkeys Incorporated
• Inventors: Stephenson, David, Pratte, Warren
• Granted Patent: US 8,510,814 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/36 by graphic or iconic representation

Abstract

A method and apparatus are provided to enable a server to determine if a client connecting to the server is doing so by means of human user interaction, as opposed to an automated process. In order to authorize access to services, the option of determining user identity, such as by means of a graphical shared secret, is also provided. Three aspects are described: (i) image formation from an object model; (ii) presentation of image choices to a user, and (iii) user action. Image formation includes the creation of one or more categorized 2-dimensional images with object regions for each image automatically qualified. These one or more categorized images can be created by means of a Randomizable Image Generation Object for Human Recognition, comprised of (i) a 3-dimensional object model, (ii) a plurality of rendering threshold and constraint parameters, and (iii) categorization and qualitative metadata. The one or more 2-dimensional images are preferably transmitted to the user for authentication without the image metadata, which may be retained on the server. Related inquiry text can be sent when human user interaction is being determined and not user identity authentication.

Claims

1. A computer-implemented method for authenticating a user of a computer comprising:

selecting one or more 3-dimensional models, each of the one or more 3-dimensional models containing geometric shape data for a respective object in three spatial dimensions;

receiving one or more rendering parameters associated with each respective object;

for each respective object, randomly varying the one or more rendering parameters, within pre-defined thresholds and/or constraints, such that each respective object remains recognizable by a human;

generating a 2-dimensional image based on the result of the varying step;

generating metadata based on each respective object, and the one or more rendering parameters;

communicating the 2-dimensional image for presentation at the computer;

receiving user input data concerning the 2-dimensional image;

comparing the metadata and the user input data to determine if the user interacting with the computer is a human user; and

authenticating or not authenticating based on the result of the comparing step.

2. The method of claim 1, wherein communicating the 2-dimensional image comprises communicating the 2-dimensional image over a computer network to a remote computer.

3. The method of claim 2, wherein the computer network is the Internet.

4. The method of claim 2, wherein the computer network is an Intranet.

5. The method of claim 2, wherein the computer network is a wireless network.

6. The method of claim 1, further comprising:

storing a shared secret;

and wherein selecting one or more 3-dimensional models comprises selecting at least one 3-dimensional model based on the shared secret;

and wherein comparing the metadata and the user input data comprises determining whether the shared secret and the user input data are identical.

7. The method of claim 2, further comprising:

storing the metadata at a memory located apart from the remote computer.

8. The method of claim 1, wherein the thresholds and/or constraints include any one or more of limits to position, rotation, and scale in a 3-dimensional environment relative to a projection;

limits to visible area;

limits to critical visible geometry regions;

limits to material property variances;

transformation limits;

limits to lighting variances; and

limits to environmental effects.

9. The method of claim 1, wherein the user input data is calculated based on horizontal and vertical coordinates received from a mouse pointing device.

10. The method of claim 1, wherein the 2-dimensional image comprises any one or more of an image of an animal, a planet, a game piece, a writing instrument, a musical note, a vehicle, an article of clothing, a bicycle, a wagon, a tricycle, a pair of sunglasses, and a piece of furniture.

11. The method of claim 1, wherein upon authentication, the user is provided access to a computer service.

20. A computer readable medium having computer executable instructions stored thereon for execution by one or more computers, that when executed implement a method according to claim 1.

12. A system for authenticating a user comprising:

a processor for;

selecting one or more 3-dimensional models, each of the one or more 3-dimensional models containing geometric shape data for a respective object in three spatial dimensions;

receiving one or more rendering parameters associated with each respective object;

for each respective object, randomly varying the one or more rendering parameters, within pre-defined thresholds and/or constraints, such that each respective object remains recognizable by a human;

generating a 2-dimensional image based on the result of the varying step;

generating metadata based on each respective object, and the one or more rendering parameters;

communicating the 2-dimensional image for presentation at a computer;

receiving user input data concerning the 2-dimensional image;

comparing the metadata and the user input data to determine if the user interacting with the computer is a human user; and

authenticating or not authenticating based on the result of the comparing step.

13. The method of claim 12, wherein communicating the 2-dimensional image comprises communicating the 2-dimensional image over a computer network to a remote computer.

14. The method of claim 13, wherein the computer network is the Internet.

15. The method of claim 13, wherein the computer network is a wireless network.

16. The system of claim 13, further comprising a memory for storing the metadata at a location apart from the remote computer.

17. The system of claim 12, further comprising the processor storing a shared secret, and wherein selecting one or more 3-dimensional models comprises selecting at least one 3-dimensional model based on the shared secret, and wherein comparing the metadata and the user input data comprises determining whether the shared secret and the user input data are identical.

18. The system of claim 12, wherein the thresholds and/or constraints include any one or more of limits to position, rotation, and scale in a 3-dimensional environment relative to a projection;

limits to visible area;

limits to critical visible geometry regions;

limits to material property variances;

transformation limits;

limits to lighting variances; and

limits to environmental effects.

19. The system of claim 12, wherein the 2-dimensional image comprises one or more of an image of an animal, a planet, a game piece, a writing instrument, a musical note, a vehicle, an article of clothing, a bicycle, a wagon, a tricycle, a pair of sunglasses, and a piece of furniture.