METHOD AND SYSTEM FOR GRAPHICAL PASSCODE SECURITY

• US 20090313693A1
• Filed: 06/16/2008
• Published: 12/17/2009
• Est. Priority Date: 06/16/2008
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: ROGERS, Sean Scott
• Granted Patent: US 8,683,582 B2
• Time in Patent Office: Days
• US Class Current: 726/21
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method and system for electronic access security uses touches and movements on a touch sensitive surface to determine graphical passcode that are used in a manner similar to passwords. Graphical passcodes comprise various combinations of swipes, taps or drags on a touchscreen surface as defined by a user. A user'"'"'s selected graphical passcode is stored in memory for comparison to subsequent entries of graphical passcode in order to authenticate the users. An envelope may be generated to define a range of acceptable pressure, speed, coordinate positions or other parameters, as a function of time or position, required for passcode authentication. The envelope may be stored in a computer memory and is used to authenticate a user by determine whether an entered graphical passcode falls within the envelope.

Claims

1. A method for limiting access to an asset, comprising:

receiving via a touchsurface an inputted graphical passcode from a user;

measuring various parameter values associated with each touchsurface touch of the inputted graphical passcode, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

comparing the measured parameter values to a passcode template stored in memory; and

granting access to the asset if the measured parameter values of the inputted graphical passcode substantially matches the passcode template.

2. The method of claim 1 wherein one or more of X-axis position, Y-axis position, pressure, speed, and contact area parameter values are measured as a function of time.

3. The method of claim 1, further comprising:

transmitting the measured parameter values to a remote processor, wherein the step of comparing the measured parameter values to the passcode template is performed by the remote processor and the passcode template is stored in memory of the remote processor; and

receiving a signal from the remote processor indicating whether access to the asset is granted or denied.

4. The method of claim 3, wherein the asset is the remote processor.

5. The method of claim 1, wherein the asset is an electronic device and the passcode template is stored in memory of the electronic device.

6. The method of claim 1, further comprising:

receiving via the touchsurface an inputted graphical passcode from the user to be used in generating the passcode template;

measuring various parameter values associated with each touchsurface touch of the inputted graphical passcode, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

generating the passcode template based upon the measured various parameter values; and

storing the generated passcode template in memory.

7. The method of claim 1, further comprising:

receiving via the touchsurface a plurality of inputted graphical passcodes from the user to be used in generating the passcode template, for each of the plurality of inputted graphical passcodes

measuring various parameter values associated with each touchsurface touch of the inputted graphical passcode, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area, and

storing the measured parameter values in memory;

analyzing the stored measured parameter values to determine baseline passcode parameters and an envelope about the baseline passcode parameters that circumscribes at least a portion of the plurality of inputted graphical passcodes; and

storing in memory the baseline passcode parameters and envelope to be used as the passcode template.

8. The method of claim 7, wherein:

analyzing the stored measured parameter values comprises statistically analyzing the measured parameter values to define average parameter values and standard deviations of the measured parameter values;

the baseline passcode parameters are determined as the average parameter values; and

the envelope about the baseline passcode parameters is determined as a multiple of the standard deviations of the measured parameter values.

9. The method of claim 7 wherein the envelope is defined over a time domain.

10. The method of claim 7 wherein the envelope is defined over a position domain.

11. The method of claim 1 wherein the various parameter values are measured as a function of position on the touchsurface.

12. The method of claim 7, further comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the envelope about the baseline passcode parameters based on the received user input before storing the envelope in memory.

13. The method of claim 8, further comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the multiple of the standard deviations of the measured parameter values used to calculate the envelope before storing the envelope in memory.

14. A method for authenticating a client at a server;

comprising;

receiving graphical passcode data from the client, the graphical passcode data including measurements of various parameters associated with a graphical passcode received by a touchsurface coupled to the client, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

comparing the received graphical passcode data to a passcode template stored in memory of the server; and

authenticating the client if the graphical passcode data substantially matches the passcode template.

15. The method of claim 14, wherein the graphical passcode data includes one or more of X-axis position, Y-axis position, pressure, speed, and contact area parameter values measured as a function of time.

16. The method of claim 14, further comprising:

receiving from the client graphical passcode data to be used in generating the passcode template for authenticating the client;

generating the passcode template based upon the received graphical passcode data; and

storing the generated passcode template in server memory.

17. The method of claim 14, further comprising:

Receiving from the client a plurality of graphical passcode datasets to be used in generating the passcode template for authenticating the client;

analyzing the received plurality of graphical passcode datasets to determine baseline passcode parameters and an envelope about the baseline passcode parameters that circumscribes at least a portion of the plurality of graphical passcode datasets; and

storing in server memory the baseline passcode parameters and envelope to be used as the passcode template.

18. The method of claim 17, wherein:

analyzing the received plurality of graphical passcode datasets comprises statistically analyzing the graphical passcode datasets to define average parameter values and standard deviations of the measured parameter values;

the baseline passcode parameters are determined as the average parameter values; and

the envelope about the baseline passcode parameters is determined as a multiple of the standard deviations of the measured parameter values.

19. The method of claim 18, wherein the envelope is defined over a time domain.

20. The method of claim 18, wherein the envelope is defined over a position domain.

21. The method of claim 17, further comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the envelope about the baseline passcode parameters based on the received user input before storing the envelope in memory.

22. The method of claim 18, further comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the multiple of the standard deviations of the measured parameter values used to calculate the envelope before storing the envelope in memory.

23. An electronic device, comprising:

a processor;

a touchsurface coupled to the processor, the touchsurface configured to measure touches to the touchsurface and send measurement signals to the processor; and

a memory coupled to the processor,

wherein the processor is configured with software instructions to perform steps comprising;

receiving via the touchsurface an inputted graphical passcode from a user;

measuring various parameter values associated with each touchsurface touch of the inputted graphical passcode, the various parameter values including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

comparing the measured parameter values to a passcode template stored in the memory; and

granting access to the electronic device if the measured parameter values of the inputted graphical passcode substantially matches the passcode template.

24. The electronic device of claim 23, wherein the processor is configured with software instructions to perform steps comprising measuring one or more of X-axis position, Y-axis position, pressure, speed, and contact area parameter values as a function of time.

25. The electronic device of claim 23, wherein the processor is configured with software instructions to perform further steps comprising:

transmitting the measured parameter values to a remote processor, wherein the step of comparing the measured parameter values to a passcode template is performed by the remote processor and the passcode template is stored in memory of the remote processor; and

receiving a signal from the remote processor indicating whether access to the electronic device is granted or denied.

26. The electronic device of claim 23, wherein the processor is configured with software instructions to perform further steps comprising:

receiving via the touchsurface an inputted graphical passcode from the user to be used in generating the passcode template;

measuring various parameter values associated with each touchsurface touch of the inputted graphical passcode, the various parameter values including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

generating the passcode template based upon the measured parameter values; and

storing the generated passcode template in the memory.

27. The electronic device of claim 23, wherein the processor is configured with software instructions to perform further steps comprising:

receiving via the touchsurface a plurality of inputted graphical passcodes from the user to be used in generating the passcode template, for each of the plurality of inputted graphical passcodes

measuring various parameter values associated with each touchsurface touch of each of the plurality of inputted graphical passcodes, the various parameter values including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area, and

storing the measured parameter values in memory;

analyzing the stored measured parameter values to determine baseline passcode parameters and an envelope about the baseline passcode parameters that circumscribes at least a portion of the plurality of inputted graphical passcodes; and

storing in the memory the baseline passcode parameters and envelope to be used as the passcode template.

28. The electronic device of claim 27, wherein:

analyzing the stored measured parameter values comprises statistically analyzing the measured parameter values to define average parameter values and standard deviations of the measured parameter values;

the baseline passcode parameters are determined as the average parameter values; and

the envelope about the baseline passcode parameters is determined as a multiple of the standard deviations of the measured parameter values.

29. The electronic device of claim 28, wherein the envelope is defined over a time domain.

30. The electronic device of claim 28, wherein the envelope is defined over a position domain.

31. The electronic device of claim 27, wherein the processor is configured with software instructions to perform further steps comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the envelope about the baseline passcode parameters based on the received user input before storing the envelope in memory.

32. The method of claim 28, wherein the processor is configured with software instructions to perform further steps comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the multiple of the standard deviations of the measured parameter values used to calculate the envelope before storing the envelope in memory.

33. The electronic device of claim 28, wherein the various parameter values are measured as a function of position on the touchsurface.

34. The electronic device of claim 23, wherein the touchsurface is a touchscreen.

35. The electronic device of claim 23, wherein the touchsurface is a touchpad coupled to the electronic device.

36. A server, comprising:

a processor;

a network connection coupled to the processor; and

a server memory coupled to the processor,

wherein the processor is configured with software instructions to perform steps comprising;

receiving graphical passcode data from a client via the network connection, the graphical passcode data including measurements of various parameters associated with a graphical passcode received by a touchsurface coupled to the client, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

comparing the received graphical passcode data to a passcode template stored in memory of the server; and

authenticating the client if the received graphical passcode data substantially matches the passcode template.

37. The server of claim 36, wherein the graphical passcode data includes one or more of X-axis position, Y-axis position, pressure, speed, and contact area parameter values measured as a function of time.

38. The server of claim 36, wherein the processor is configured with software instructions to perform further steps comprising:

receiving via a network connection graphical passcode data to be used in generating the passcode template for authenticating the client;

generating the passcode template based upon the received graphical passcode data; and

storing the generated passcode template in server memory.

39. The server of claim 36, wherein the processor is configured with software instructions to perform further steps comprising:

receiving via the network connection a plurality of graphical passcode datasets to be used in generating the passcode template for authenticating the client;

analyzing the received plurality of graphical passcode datasets to determine baseline passcode parameters and an envelope about the baseline passcode parameters that circumscribes at least a portion of the plurality of graphical passcode datasets; and

storing in the server memory the baseline passcode parameters and envelope to be used as the passcode template.

40. The server of claim 39, wherein:

analyzing the received plurality of graphical passcode datasets comprises statistically analyzing the plurality of graphical passcode datasets to define average parameter values and standard deviations of the parameter values;

the baseline passcode parameters are determined as the average parameter values; and

the envelope about the baseline passcode parameters is determined as a multiple of the standard deviations of the parameter values.

41. The server of claim 40, wherein the envelope is defined over a time domain.

42. The server of claim 40, wherein the envelope is defined over a position domain.

43. The server of claim 39, wherein the processor is configured with software instructions to perform further steps comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the envelope about the baseline passcode parameters based on the received user input before storing the envelope in memory.

44. The server of claim 40, wherein the processor is configured with software instructions to perform further steps comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the multiple of the standard deviations of the measured parameter values used to calculate the envelope before storing the envelope in memory.

45. An electronic device, comprising:

means for receiving an inputted graphical passcode from a user;

means for measuring various parameter values associated with each touchsurface touch of the inputted graphical passcode, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

means for comparing the measured parameter values to a passcode template stored in memory; and

means for granting access to the asset if the measured parameter values of the inputted graphical passcode substantially matches the passcode template.

46. The electronic device of claim 45, wherein means for measuring various parameter values measures one or more of X-axis position, Y-axis position, pressure, speed, and contact area parameter values as a function of time.

47. The electronic device of claim 46, further comprising:

means for transmitting the measured parameter values to the means for comparing the measured parameter values to a passcode template, wherein the means for comparing the measured parameter values to a passcode template is remotely located and the passcode template is stored in memory of the means for comparing the measured parameter values to a passcode template; and

means for receiving a signal from the remote processor indicating whether access to the electronic device is granted or denied.

48. The electronic device of claim 47, further comprising:

means for receiving via the touchsurface an inputted graphical passcode from the user to be used in generating the passcode template;

means for measuring various parameter values associated with each touchsurface touch of the inputted graphical passcode, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

means for generating the passcode template based upon the measured parameter values; and

means for storing the generated passcode template in memory.

49. The electronic device of claim 47, further comprising:

means for receiving via the touchsurface a plurality of inputted graphical passcodes from the user to be used in generating the passcode template, for each of the plurality of inputted graphical passcodes

measuring various parameter values associated with each touchsurface touch of the inputted graphical passcode, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area, and

storing the measured various parameter values in memory;

means for analyzing the stored measured various parameter values to determine baseline passcode parameters and an envelope about the baseline passcode parameters that circumscribes at least a portion of the plurality of inputted graphical passcodes; and

means for storing in memory the average passcode parameters and envelope to be used as the passcode template.

50. The electronic device of claim 49, wherein:

means for analyzing the stored measured various parameter values further comprises means for statistically analyzing the measured various parameter values to define average parameter values and standard deviations of the measured various parameter values;

the baseline passcode parameters are determined as the average parameter values; and

the envelope about the baseline passcode parameters is determined as a multiple of the standard deviations of the measured various parameter values.

51. The electronic device of claim 49, further comprising:

means for receiving a user input to adjust the envelop about the baseline passcode parameters; and

means for adjusting the envelope about the baseline passcode parameters based on the received user input before storing the envelope in memory.

52. The electronic device of claim 50, further comprising:

means for receiving a user input to adjust the envelop about the baseline passcode parameters; and

means for adjusting the multiple of the standard deviations of the measured parameter values used to calculate the envelope before storing the envelope in memory.

53. A server, comprising:

means for receiving graphical passcode data from the client, the graphical passcode data including measurements of various parameters associated with a graphical passcode received by a touchsurface coupled to the client, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

means for comparing the received graphical passcode data to a passcode template stored in memory of the server; and

means for authenticating the client if the graphical passcode data substantially matches the passcode template.

54. The server of claim 53, wherein the graphical passcode data includes one or more of X-axis position, Y-axis position, pressure, speed, and contact area parameter values measured as a function of time.

55. The server of claim 53, further comprising:

means for receiving from the client graphical passcode data to be used in generating the passcode template for authenticating the client;

means for generating the passcode template for authenticating the client based upon the received graphical passcode data; and

means for storing the generated passcode template in server memory.

56. The server of claim 55, further comprising:

means for receiving a plurality of graphical passcode datasets to be used by the means for generating the passcode template for authenticating the client;

means for analyzing the received plurality of graphical passcode datasets to determine baseline passcode parameters and an envelope about the baseline passcode parameters that circumscribes at least a portion of the plurality of graphical passcode datasets; and

means for storing in server memory the baseline passcode parameters and envelope to be used as the passcode template.

57. The server of claim 56, wherein:

means for analyzing the received plurality of graphical passcode datasets comprises means for statistically analyzing the graphical passcode datasets to define average parameter values and standard deviations of the parameter values;

the baseline passcode parameters are determined as the average parameter values; and

the envelope about the baseline passcode parameters is determined as a multiple of the standard deviations of the parameter values.

58. The method of claim 56, further comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the envelope about the baseline passcode parameters based on the received user input before storing the envelope in memory.

59. The method of claim 57, further comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the multiple of the standard deviations of the measured parameter values used to calculate the envelope before storing the envelope in memory.

60. Tangible storage medium having stored thereon processor executable software instructions configured to cause a processor to perform steps comprising:

receiving via a touchsurface an inputted graphical passcode from a user;

measuring various parameter values associated with each touchsurface touch of the inputted graphical passcode, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

comparing the measured parameter values to a passcode template stored in memory; and

granting access to an asset if the measured parameter values of the inputted graphical passcode substantially matches the passcode template.

61. The tangible storage medium of claim 60, wherein one or more of X-axis position, Y-axis position, pressure, speed, and contact area parameter values are measured as a function of time.

62. The tangible storage medium of claim 60 having stored thereon processor-executable software instructions configured to cause a processor to perform further steps comprising:

transmitting the measured parameter values to a remote processor, wherein the step of comparing the measured parameter values to a passcode template is performed by the remote processor and the passcode template is stored in memory of the remote processor; and

receiving a signal from the remote processor indicating whether access to the asset is granted or denied.

63. The tangible storage medium of claim 60 having stored thereon processor-executable software instructions configured to cause a processor to perform further steps comprising:

receiving via the touchsurface an inputted graphical passcode from the user to be used in generating the passcode template;

measuring various parameter values associated with each touchsurface touch of the inputted graphical passcode, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

generating the passcode template based upon the measured parameter values; and

storing the generated passcode template in memory.

64. The tangible storage medium of claim 60 having stored thereon processor-executable software instructions configured to cause a processor to perform further steps comprising:

receiving via the touchsurface a plurality of inputted graphical passcodes from the user to be used in generating the passcode template, for each of the plurality of inputted graphical passcodes

measuring various parameter values associated with each touchsurface touch of the inputted graphical passcode, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area,

and storing the measured parameter values in memory;

analyzing the stored measured parameter values to determine baseline passcode parameters and an envelope about the baseline passcode parameters that circumscribes at least a portion of the plurality of inputted graphical passcodes; and

storing in memory the baseline passcode parameters and envelope to be used as the passcode template.

65. The tangible storage medium of claim 64, wherein:

analyzing the stored measured parameter values comprises statistically analyzing the measured parameter values to define average parameter values and standard deviations of the measured values;

the baseline passcode parameters are determined as the average parameter values; and

the envelope about the baseline passcode parameters is determined as a multiple of the standard deviations of the measured values.

66. The tangible storage medium of claim 65, wherein the envelope is defined over a time domain.

67. The tangible storage medium of claim 65, wherein the envelope is defined over a position domain.

68. The method of claim 64, further comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the envelope about the baseline passcode parameters based on the received user input before storing the envelope in memory.

69. The method of claim 65, further comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the multiple of the standard deviations of the measured parameter values used to calculate the envelope before storing the envelope in memory.

70. The tangible storage medium of claim 65, wherein the various parameter values are measured as a function of position on the touchsurface.

71. A tangible storage medium having stored thereon processor executable software instructions configured to cause a server processor to perform steps comprising:

receiving graphical passcode data from a client, the graphical passcode data including measurements of various parameters associated with a graphical passcode received by a touchsurface coupled to the client, the various parameters including one or more of time, X-axis position, Y-axis position, pressure, speed, and contact area;

comparing the received graphical passcode data to a passcode template stored in memory of the server; and

authenticating the client if the graphical passcode data substantially matches the passcode template.

72. The tangible storage medium of claim 71, wherein the graphical passcode data includes one or more of X-axis position, Y-axis position, pressure, speed, and contact area parameter values measured as a function of time.

73. The tangible storage medium of claim 71 having stored thereon processor-executable software instructions configured to cause a processor to perform further steps comprising:

receiving from the client graphical passcode data to be used in generating the passcode template for authenticating the client;

generating the passcode template based upon the received graphical passcode data; and

storing the generated passcode template in server memory.

74. The tangible storage medium of claim 71 having stored thereon processor-executable software instructions configured to cause a processor to perform further steps comprising:

receiving a plurality of graphical passcode datasets to be used in generating the passcode template for authenticating the client;

analyzing the received plurality of graphical passcode datasets to determine baseline passcode parameters and an envelope about the baseline passcode parameters that circumscribes at least a portion of the plurality of graphical passcode datasets; and

storing in server memory the baseline passcode parameters and envelope to be used as the passcode template.

75. The tangible storage medium of claim 74, wherein:

analyzing the received plurality of graphical passcode datasets comprises statistically analyzing the graphical passcode datasets to define average parameter values and standard deviations of the parameter values;

the baseline passcode parameters are determined as the average parameter values; and

the envelope about the baseline passcode parameters is determined as a multiple of the standard deviations of the parameter values.

76. The tangible storage medium of claim 75, wherein the envelope is defined over a time domain.

77. The tangible storage medium of claim 75, wherein the envelope is defined over a position domain.

78. The method of claim 74, further comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the envelope about the baseline passcode parameters based on the received user input before storing the envelope in memory.

79. The method of claim 75, further comprising:

receiving a user input to adjust the envelop about the baseline passcode parameters; and

adjusting the multiple of the standard deviations of the measured parameter values used to calculate the envelope before storing the envelope in memory.