Two-factor graphical password for text password and encryption key generation

• US 20100287382A1
• Filed: 03/02/2010
• Published: 11/11/2010
• Est. Priority Date: 05/07/2009
• Status: Abandoned Application

• Current Assignee: John Charles Gyorffy
• Original Assignee: John Charles Gyorffy
• Inventors: Miller, James, Gyorffy, John Charles
• Application Number:
  US12/659,264
• Publication Number:
  US 20100287382A1
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

This invention details systems, methods, and devices for providing a two-factor graphical password system to a user so that the user may obtain access to a restricted resource. A first previously selected image (previously selected by the user) is presented to the user to enter his password by sequentially selecting predetermined areas on the first image. The user'"'"'s input is used to create an encryption/decryption key which is used for communicating between a user application and a device. If the user has entered the correct password, then the device can communicate with the user application. Once the device can communicate with the user application, a second previously selected image (previously selected by the user) is presented to the user from the device. The user enters his second password and the user'"'"'s input is sent to the device. The device then creates the user'"'"'s alphanumeric password or another encryption key from the user'"'"'s input and sends this to the user application. The user application then transmits the password or key to the system which restricts access to the restricted resource.

Claims

1. A device for providing access to a restricted resource, the device comprising:

storage means for storing at least one user selected image

processor means for deriving at least one access provision means from a plurality of user selected inputs based on said at least one user selected image, said access provision means being for provision to an access restriction system, said access restriction system providing access to said restricted resource when a correct access provision means is provided to said access restriction system

wherein said access restriction system receives said access provision means through an application interface means for interfacing between said device to said access restriction system.

2. A device according to claim 1 wherein said device is constructed and adapted for coupling to a data processing system.

3. A device according to claim 1 wherein said access provision means is a password

4. A device according to claim 1 wherein said access provision means is an encryption key or alphanumeric password for communicating with said access restriction system.

5. A device according to claim 1 wherein said restricted resource is a website.

6. A device according to claim 1 wherein said restricted resource is a data processing system.

7. A device according to claim 1 wherein said restricted resource is a computer network.

8. A device according to claim 2 wherein said device is coupled to said data processing device through a USB interface.

9. A device according to claim 1 wherein said storage means stores a plurality of user selected images.

10. A device according to claim 9 wherein at least one of said plurality of user selected images is used as a basis for user selected inputs for deriving another access provision means for use in allowing communications between said device and said application interface means.

11. An access provision system for providing an access provision means to an access restriction system, said access restriction system being for controlling access to a restricted resource, the access provision system comprising:

a storage means for storing at least two user selected images and a stored key

an initial image provision means for providing to a user application an initial image from said at least two user selected images

a decryption means for decrypting incoming data transmissions from said user application using said stored key, said incoming data transmissions being encrypted using a key derived from first user input based on said initial user selected image

encryption means for encrypting outgoing data transmissions for transmittal to said user application, said outgoing data transmissions being encrypted using said stored key

subsequent image provision means for providing to said user application at least one subsequent image from said at least two user selected images

derivation means for deriving said access provision means from subsequent user input received from said user application, said subsequent user input being based on said at least one subsequent image

coupling means for coupling said access provision means to said access restriction system through said user application.

12. A system according to claim 11 wherein said access provision means is an encryption/decryption key.

13. A system according to claim 11 wherein said access provision means is a password.

14. A system according to claim 11 wherein at least one of said first user input and said subsequent user input comprises coordinates of a user selected predetermined region on an image.

15. A system according to claim 11 wherein at least one of said first user input and said subsequent user input comprises pixel attributes of a user selected predetermined region on an image.

16. A system according to claim 11 wherein at least one of said first user input and said subsequent user input comprises a predetermined alphanumeric value assigned to a user selected predetermined region on an image.

17. A system according to claim 11 wherein said restricted resource is a computer network.

18. A system according to claim 11 wherein said restricted resource is a data processing system.

19. A system according to claim 11 wherein said restricted resource is a website.

20. A method for providing an access provision means to an access restriction system, the method comprising:

a) receiving a request for at least one initial user selected image from a user application

b) transmitting said at least one initial user selected image to said user application

c) receiving at least one encrypted communication from said user application, said at least one encrypted communication being encrypted using an encryption key derived from user input based on said at least one initial user selected image

d) decrypting said at least one encrypted communication from said user application using a stored encryption key and determining if said at least one encrypted communication is properly encrypted

e) in the event said at least one encrypted communication is not properly encrypted, preventing access by said user application to at least one subsequent user selected image

f) in the event said at least one encrypted communication is properly encrypted,

encrypting subsequent transmissions to said user application using said stored transmission key

decrypting subsequent transmissions from said user application using said stored encryption key, and

receiving a request from said user application for said at least one subsequent user selected image

g) transmitting said at least one subsequent user selected image to said user application

h) receiving user input from said user application, said user input being based on said at least one subsequent user selected image.

i) deriving said access provision means from said user input

j) transmitting said access provision means to said user application.