NETWORK AUTHENTICATION SYSTEM AND METHOD

• US 20100186071A1
• Filed: 10/01/2009
• Published: 07/22/2010
• Est. Priority Date: 01/22/2009
• Status: Active Grant

• Current Assignee: Chunghwa Telecom Co., Ltd.
• Original Assignee: Chunghwa Telecom Co., Ltd.
• Inventors: Tzeng, Shi-Chuan
• Granted Patent: US 8,510,809 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2127 Bluffing
• CPC Class Codes: G06F 3/0482 Interaction with lists of selectable items, e.g. menus
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A network authentication system and method are provided. When an authentication request is initiated by a user of a computer device through a network, a display interface displaying an identifier, an authentication (matching) result corresponding to the identifier and one or more non-authentication (bogus) results unrelated to the identifier are transmitted to the computer device. The user then chooses among the authentication result and the non-authentication results with the goal of choosing the result that is associated with displayed identifier. If a non-authentication result is chosen, the user is given an opportunity to repeat the authentication. The identifier includes advertising information, thereby predictably producing a desired advertising effect.

Claims

1. A network authentication method applied in a network authentication system, wherein the network authentication system is used to authenticate a user of a computer device initiating an authentication request through a network, the method comprising the steps of:

storing a plurality of identifiers in a memory unit;

receiving an authentication request from the computer device through the network, retrieving at least one of the identifiers from the memory unit, and processing the retrieved identifier so as to form an authentication result and a non-authentication (bogus) result distinct from the authentication result, allowing the network authentication system to thereby generate a display interface and transmit the display interface to the computer device, wherein the display interface comprises an identifier display region for displaying the retrieved identifier and an option display region for displaying the authentication result and the non-authentication result; and

determining, after receiving a response of the user choosing among the authentication result and the non-authentication result in the option display region from the computer device, whether the response is the same as the authentication result, wherein, if it is, authentication is successful, and otherwise, the user of the computer device is directed to repeat authentication.

2. The method of claim 1, wherein the identifiers stored in the memory unit are selected from the group consisting of pictures, characters, strings, pictures with characters, pictures with strings, sounds, images, and images with sounds.

3. The method of claim 2, wherein the pictures are static pictures or dynamic pictures.

4. The method of claim 1, wherein the number of the non-authentication result distinct from the authentication result is one or more.

5. The method of claim 1, wherein each of the identifiers corresponds to a first authentication code, and the authentication result and non-authentication result respectively correspond to different second authentication codes, the response received by the network authentication system is a second authentication code corresponding to the authentication result or the non-authentication result, and the network authentication system compares the received second authentication code with the first authentication code corresponding to the retrieved identifier so as to determine whether the second authentication code is the same as the first authentication code, wherein, if it is, authentication is successful.

6. The method of claim 1, wherein the network authentication system changes the order of the authentication result and the non-authentication result in the option display region, and wherein the processing module generates a corresponding response result and inputs said response result into the authentication module such that the authentication module can determine whether the received response is the authentication result corresponding to the retrieved identifier.

7. A network authentication method applied in a network authentication system, wherein the network authentication system is used to authenticate a user of a computer device initiating an authentication request through a network, the method comprising the steps of:

storing a plurality of identifiers in a memory unit;

receiving an authentication request from the computer device through the network, retrieving at least one of the identifiers from the memory unit, and processing the retrieved identifier so as to form a first identifier-corresponding message, allowing the network authentication system to thereby generate a display interface and transmit the display interface to the computer device, wherein the display interface comprises an identifier display region for displaying the retrieved identifier and an option input region for displaying an input region for the user to input a second identifier-corresponding message according to the content displayed in the identifier display region as a response; and

after receiving the response from the computer device, determining whether the response is the same as the first identifier-corresponding message, wherein, if it is, authentication is successful, and otherwise, the user of the computer device is directed to repeat authentication.

8. The method of claim 7, wherein the identifiers stored in the memory unit are selected from the group consisting of pictures, characters, strings, pictures with characters, pictures with strings, sounds, images, and images with sounds.

9. The method of claim 8, wherein the pictures are static pictures or dynamic pictures.

10. A network authentication system for authenticating a user of a computer device initiating an authentication request through a network, the system comprising:

a memory unit for storing a plurality of identifiers;

a processing module for receiving an authentication request from the computer device through the network, retrieving at least one of the identifiers from the memory unit, and processing the retrieved identifier so as to form an authentication result and a non-authentication (bogus) result distinct from the authentication result and thereby generate a display interface comprising an identifier display region for displaying the retrieved identifier and an option display region for displaying the authentication result and non-authentication result;

a transmitting module for transmitting the display interface to the computer device;

an authentication option receiving module for receiving a response of the user to the authentication result and the non-authentication result in the option display region from the computer device; and

an authentication module for determining whether the response is the same as the authentication result, wherein, if it is, authentication is successful, and otherwise, the user of the computer device is directed to repeat authentication.

11. The system of claim 10, wherein the identifiers stored in the memory unit are selected from the group consisting of pictures, characters, strings, pictures with characters, pictures with strings, sounds, images, and images with sounds.

12. The system of claim 11, wherein the pictures are static pictures or dynamic pictures.

13. The system of claim 10, wherein the number of the non-authentication result distinct from the authentication result is one or more.

14. The system of claim 10, wherein each of the identifiers corresponds to a first authentication code, and the authentication result and non-authentication result respectively correspond to different second authentication codes, the response received by the authentication option receiving module is a second authentication code corresponding to the authentication result or the non-authentication result, and the authentication module compares the received second authentication code with the first authentication code corresponding to the retrieved identifier so as to determine whether the second authentication code is the same as the first authentication code, wherein, if it is, authentication is successful.

15. The system of claim 10, wherein the processing module changes the order of the authentication result and the non-authentication result in the option display region, and wherein the processing module generates a corresponding response result and inputs said response result into the authentication module such that the authentication module can determine whether the received response is the authentication result corresponding to the retrieved identifier.