Method And System For On-Screen Authentication Using Secret Visual Message

• US 20110026716A1
• Filed: 05/04/2009
• Published: 02/03/2011
• Est. Priority Date: 05/02/2008
• Status: Abandoned Application

• Current Assignee: CrimsonLogic Pte Ltd. (Government of Singapore)
• Original Assignee: CrimsonLogic Pte Ltd. (Government of Singapore)
• Inventors: Nuradi, Arief, Tang, Weng Sing, Lee, Pern Chern
• Application Number:
  US12/936,548
• Publication Number:
  US 20110026716A1
• Time in Patent Office: Days
• US Class Current: 380/284
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A method of authenticating a user includes providing a user key to an authentication authority, providing a transmission message from the authentication authority in response to the user key, providing a secret message using the transmission message, displaying the secret message to the user using a display screen, and providing a user response to the authentication authority in response to the user observing the secret message.

Claims

1. A method of authenticating a user, comprising:

providing a user key to an authentication authority;

providing a transmission message from the authentication authority in response to the user key;

providing a secret message using the transmission message;

displaying the secret message to the user using a display screen; and

providing a user response to the authentication authority in response to the user observing the secret message.

2. The method of claim 1, wherein the secret message is a pseudo-random alphanumeric code.

3. The method of claim 1, wherein the secret message is a part of an (m,n)-threshold secret sharing scheme, m is the number of parts required to recover a secret and n is the total number parts.

4. The method of claim 1, wherein the display screen is a flat-panel display screen.

5. The method of claim 1, wherein the display screen is an LCD screen.

6. The method of claim 1, wherein the display screen is a mobile phone screen.

7. The method of claim 1, wherein the user response is the secret message.

8. The method of claim 1, wherein the authentication authority provides the user key to the user.

9. The method of claim 1, wherein the authentication authority provides the transmission message to the user using the Internet, and the user provides the user response to the authentication authority using the Internet.

10. The method of claim 1, wherein the method is a two-factor authentication scheme, the user key is the first factor and the user response is the second factor.

61. The method of claim 1 further comprising:

providing a user response to the authentication authority in response to the user observing the encrypted secret message by using a mobile phone with the decryption key.

11. A method of authenticating a user, comprising:

providing a visual overlay from an authentication authority;

providing a user key to the authentication authority;

providing a background message from the authentication authority in response to the user key;

displaying the background message on a display screen while the visual overlay is positioned over, aligned with and attached to the display screen;

displaying a secret message to the user using the visual overlay and the background message; and

providing a user response to the authentication authority in response to the user observing the secret message.

12. The method of claim 11, wherein the visual overlay includes a visual matrix pattern.

13. The method of claim 11, wherein the visual overlay includes a pseudo-random visual matrix pattern.

14. The method of claim 11, wherein the visual overlay includes a visual matrix pattern and a transparent medium, the visual matrix pattern is non-transparent and the visual matrix pattern is printed on the transparent medium.

15. The method of claim 11, wherein the visual overlay includes a pseudo-random visual matrix pattern and a transparent medium, the pseudo-random visual matrix pattern is non-transparent and the pseudo-random visual matrix pattern is printed on the transparent medium.

16. The method of claim 14, wherein the authentication authority prints the visual matrix pattern on the transparent medium.

17. The method of claim 14, wherein the user prints the visual matrix pattern on the transparent medium.

18. The method of claim 16, wherein the authentication authority prints the pseudo-random visual matrix pattern on the transparent medium.

19. The method of claim 16, wherein the user prints the pseudo-random visual matrix pattern on the transparent medium.

20. The method of claim 11, wherein the visual overlay allows the user to observe a first selected portion of the display screen without allowing the user to observe a second selected portion of the display screen, and the first selected portion of the display screen displays the secret message within the background message.

21. The method of claim 20, wherein the first selected portion of the display screen is a window within the second selected portion of the display screen.

22. The method of claim 21, wherein the visual overlay allows the user to observe a third selected portion of the display screen, and the user enters the user response into the third selected portion of the display screen.

23. The method of claim 11, wherein the visual overlay is a part of an (m,n)-threshold secret sharing scheme, m is the number of parts required to recover a secret and n is the total number parts.

24. The method of claim 11, wherein the visual overlay is substantially the same size as the display screen.

28. The method of claim 11, wherein the authentication authority provides the user key to the user, and the authentication authority provides the visual overlay to the user in response to the user key from the user.

29. The method of claim 11, wherein the authentication authority provides the background message to the user using the Internet, and the user provides the user response to the authentication authority using the Internet.

31. The method of claim 11 further comprising:

providing the user key from the authentication authority to the user;

then

providing the user key from the user to the authentication authority a first time;

providing a visual overlay from the authentication authority to the user in response to the user key provided the first time;

then

providing the user key from the user to the authentication authority a second time;

providing the background message from the authentication authority to the user in response to the user key provided the second time;

displaying the background message on a display screen facing the user while the visual overlay is positioned over, aligned with and attached to the display screen;

displaying a secret message to the user using the visual overlay and the background message; and

then

providing a user response from the user to the authentication authority in response to the user observing the secret message.

25-27. -27. (canceled)

30. (canceled)

32-40. -40. (canceled)

41. A method of authenticating a user, comprising:

providing a user key to the authentication authority;

encoding a secret message at the authentication authority in response to the user key, thereby providing an encoded message;

providing the encoded message from the authentication authority in response to the user key;

decoding the encoded message, thereby providing the secret message;

displaying the secret message on a display screen to the user in response to decoding the encoded message; and

providing a user response to the authentication authority in response to the user observing the secret message on the display screen.

51. The method of claim 41, wherein:

providing the user key from the authentication authority to the user;

then

providing the user key from the user to the authentication authority;

encoding the secret message at the authentication authority in response to the user key, thereby providing the encoded message;

providing the encoded message from the authentication authority to the user in response to the user key from the user;

displaying the encoded message on a display screen, thereby prompting the user to decode the encoded message;

decoding the encoded message in response to the user observing the encoded message on the display screen, thereby providing the secret message;

displaying the secret message on a display screen in response to decoding the encoded message; and

providing a user response from the user to the authentication authority in response to the user observing the secret message on the display screen.

101. The method of claim 41, wherein the secret message is an encrypted message encoded in a barcode.

102. The method of claim 41, wherein the private key is a part of a private-public key pair required to recover a secret message.

42-50. -50. (canceled)

52-60. -60. (canceled)

62-70. -70. (canceled)

71. A method of authenticating a user, comprising:

providing a private key from an authentication authority;

providing a user key to the authentication authority;

providing a background message from the authentication authority in response to the user key;

displaying the background message on a display screen while a mobile phone with the user private key is used to capture the background message on the display screen;

displaying a secret message to the user using the mobile phone containing the private key and the background message; and

providing a user response to the authentication authority in response to the user observing the secret message.

72. The method of claim 71, wherein the private key is generated as a private-public key pair by the authentication authority.

73. The method of claim 71, wherein the private key is downloaded to the user as a Midlet.

74. The method of claim 71, wherein the private key is downloaded to the user as a Midlet and installed into the user mobile phone.

75. The method of claim 71, wherein the private key is downloaded to the user as a Midlet and installed into the user mobile phone and is linked to a barcode capture application.

76. The method of claim 74, wherein the authentication authority generates a private-public key for the user during registration.

77. The method of claim 74, wherein the user downloads the Midlet.

78. The method of claim 76, wherein the authentication sends the private key to the user as a Midlet.

79. The method of claim 76, wherein the user installs the Midlet onto a mobile phone.

80. The method of claim 71, wherein the mobile phone with the private key allows the user to observe a first selected portion of the display screen without allowing the user to observe a second selected portion of the display screen, and the first selected portion of the display screen displays the secret message encrypted and stored in a barcode.

81. The method of claim 80, wherein the first selected portion of the display screen is a window within the second selected portion of the display screen.

82. The method of claim 81, wherein the mobile phone with the private key allows the user to observe a third selected portion of the display screen, and the user enters the user response into the third selected portion of the display screen.

83. The method of claim 71, wherein the private key is a part of private-public key pair generated by the authentication authority required to recover a secret message.

91. The method of claim 71 further comprising:

providing the user key from the authentication authority to the user;

then

providing the user key from the user to the authentication authority a first time;

providing the private key from the authentication authority to the user in response to the user key provided the first time;

then

providing the user key from the user to the authentication authority a second time;

providing a background message from the authentication authority to the user in response to the user key provided the second time;

displaying the background message on a display screen facing the user while a mobile phone is positioned over, aligned with to capture the background message on the display screen;

displaying a secret message to the user using the mobile phone; and

then

providing a user response from the user to the authentication authority in response to the user observing the secret message.

84-90. -90. (canceled)

92-100. -100. (canceled)