Computer Implemented System and Method for Providing Challenge-Response Solutions to Authenticate a User

• US 20130174240A1
• Filed: 03/01/2012
• Published: 07/04/2013
• Est. Priority Date: 12/28/2011
• Status: Active Grant

• Current Assignee: TATA Consultancy Services Limited (Tata Sons Pvt Ltd.)
• Original Assignee: TATA Consultancy Services Limited (Tata Sons Pvt Ltd.)
• Inventors: Bidare, Prasanna
• Granted Patent: US 8,650,627 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system and method for providing challenge-response solutions to authenticate a user have been provided. The system includes web server comprising interlinking means adapted to interlink a plurality of images with unique index values such that each of the images has a unique index value. The web server includes registration means adapted to enable users to select at least two interlinked images for the purpose of registration. The web server includes challenge generation means adapted to generate, transmit an authentication challenge of the form of one-time equation. The web server, prior to transmitting the one-time equation, computes the value of the equation based on at least the sequence specified by the user. The web server compares the value calculated by the user with the value calculated prior to transmission and authenticates the user only in the event that said value calculated by the user is equivalent to the stored value.

Claims

1. A computer implemented system for providing challenge-response solutions to authenticate a user, said system comprising:

a web server comprising;

interlinking means adapted to interlink a plurality of images with unique index values such that each of said images has a corresponding unique index value;

registration means adapted to enable said user to select at least two interlinked images for the purpose of registration, said registration means further including;

generation means adapted to generate at least two image matrices having interlinked images, wherein each of said image matrices include at least one interlinked image selected by said user, said generation means further adapted to arrange the unique index values corresponding to said interlinked images in the form of matrices and generate index-value matrices, said generation means still further adapted to transmit said image matrices and index-value matrices; and

communication means adapted to enable said user to specify the sequence in which said image matrices and said index-value matrices are to be traversed, said sequence selected from the group of sequences consisting of clockwise sequence, anticlockwise sequence, clockwise Z sequence, anti clockwise Z sequence;

challenge generation means adapted to generate and transmit an authentication challenge of the form of one-time equation, said challenge generation means further including;

computing means adapted to compute the value of said one-time equation based on the sequence specified by said user, the interlinked images selected by the user during registration and the corresponding unique index-values; and

storage means adapted to store the value of said one-time equation;

said challenge generation means further adapted to prompt said user to calculate value of said one-time equation by using said image matrices, said index-value matrices and said sequence;

comparator means adapted to compare the value stored in said storage means with the value calculated by said user; and

authentication means adapted to authenticate said user in the event that said value calculated by said user is equivalent to the value stored in said storage means.

2. The system as claimed in claim 1, wherein said web server cooperates with a client device, said client device comprising:

display means adapted to receive and display at least one of said one time equation, said image matrices and said index value matrices, at least temporarily; and

transmission means adapted to transmit to said web server, at least the value calculated by said user.

3. The system as claimed in claim 1, wherein said web server includes a repository adapted to store at least one of profile information corresponding to said users, a set of alphanumeric characters, a set of images derived out of dot matrix combinations, a plurality of numbers and questions to which said numbers serve as answers, the plurality of images and the unique index values corresponding to said images.

4. The system as claimed in claim 1, wherein said registration means is further adapted to optionally enable the user to select for the purpose of registration at least one of a plurality of alphanumeric characters from said set of alphanumeric characters and a plurality of images from said set of images derived out of dot matrix combinations, said set of alphanumeric characters and said set of images arranged in the form of respective 5×

7 matrices, said registration means further including tracking means adapted to track the order in which at least one of said plurality of alphanumeric characters and said plurality of images are selected by the user, said registration means still further adapted to store the order in which said user selects at least one of said plurality of alphanumeric characters and said plurality of images.

5. The system as claimed in claim 1, wherein said challenge generation means is further adapted to:

generate and transmit an authentication challenge of the form of a secondary matrix only in the event that said user selects at least one of the set of alphanumeric characters and the set of images derived out of dot matrix combinations for the purpose of registration, wherein said secondary matrix includes entries selected form the group of entries consisting of numerals, alphabets and the set of images derived out of dot matrix combinations; and

instruct said user to select the entries of the secondary matrix in the same order as that in which at least one of said plurality of alphanumeric characters and said plurality of images were selected from said 5×

7 matrix during said registration.

6. The system as claimed in claim 1, wherein said comparator means is adapted to compare the order in which said user selects the entries from said secondary matrix, with the order in which at least one of said plurality of alphanumeric characters and said plurality of images were selected from said 5×

7 matrix during said registration.

7. The system as claimed in claim 1, wherein said authentication means is further adapted to authenticate the user only in the event that the order in which said user selects the entries from said secondary matrix is same as the order in which at least one of said plurality of alphanumeric characters and said plurality of images were selected from said 5×

7 matrix during said registration.

8. The system as claimed in claim 1, wherein said registration means is adapted to optionally present said user with a plurality of questions/prompts, said registration means further adapted to enable said user to input a plurality of personal details in the form of numbers as answers for said questions/prompts, said registration means further adapted to store said numbers along with the corresponding questions/prompts.

9. The system as claimed in claim 1, wherein said challenge generation means is further adapted to:

optionally select at least one number and the corresponding question/prompt from said repository;

instruct said computing means to calculate the value of said one-time equation based on said number;

instruct said storage means to store said value; and

prompt said user to calculate value of said one-time equation by using the number which serves as the answer for the question/prompt.

10. A computer implemented method for providing challenge-response solutions to authenticate a user, said method including the following steps:

interlinking a plurality of images with unique index values such that each of said images has a corresponding unique index value;

enabling said user to select at least two interlinked images for the purpose of registration;

generating at least two image matrices having interlinked images, wherein each of said image matrices include at least one interlinked image selected by said user, and arranging the unique index values corresponding to said interlinked images in the form of matrices and generating index-value matrices;

enabling said user to specify the sequence in which said image matrices and said index-value matrices are to be traversed;

generating and transmitting an authentication challenge of the form of one-time equation, computing at a web server the value of the one-time equation based on at least the interlinked images selected by the user during the registration, the corresponding index values and the sequence specified by the user, and storing the computed value at the web server;

displaying said one time equation, said image matrices and said index value matrices, at least temporarily, on a client device;

prompting said user to calculate the value of said one-time equation by using said image matrices, said index-value matrices and said sequence;

transmitting to said web server the value calculated by said user; and

comparing the value stored at the web server with value calculated by said user and authenticating said user only in the event that said value calculated by said user is equivalent to the value stored in said web server.

11. The computer implemented method as claimed in claim 10, wherein the method further includes the following steps:

optionally arranging a set of alphanumeric characters and a set of images derived out of dot matrix combinations in the form of 5×

7 matrices respectively;

optionally enabling said user to select at least one of said set of alphanumeric characters and said set of images derived out of dot matrix combinations for the purpose of registration;

prompting said user to select for the purpose of registration at least one of a plurality of alphanumeric characters from said set of alphanumeric characters and a plurality of images from said set of images derived out of dot matrix combinations;

tracking the order in which at least one of a plurality of alphanumeric characters from said set of alphanumeric characters and a plurality of images from said set of images derived out of dot matrix combinations are selected by said user during said registration;

storing the order in which said user selects at least one of a plurality of alphanumeric characters from said set of alphanumeric characters and a plurality of images from said set of images derived out of dot matrix combinations;

generating and transmitting an authentication challenge of the form of a secondary matrix having entries selected form the group of entries consisting of numerals, alphabets and the images derived out of dot matrix combinations;

instructing said user to select the entries of said secondary matrix in the same order as that in which at least one of said plurality of alpha numeric characters and said plurality of images were selected during said registration;

comparing the order in which said user selects the entries in the secondary matrix, with the order in at least one of said plurality of alpha numeric characters and said plurality of images were selected during said registration; and

authenticating the user if said order in which said user selects the entries in the secondary matrix is same as the order in which at least one of said plurality of alpha numeric characters and said plurality of images were selected from said 5×

7 matrix during said registration.

12. The computer implemented method as claimed in claim 10, wherein the method further includes the following steps:

optionally presenting said user with a plurality of questions/prompts;

enabling said user to input a plurality of personal details in the form of numbers as answers for said questions/prompts;

storing said numbers along with the corresponding questions/prompts;

generating a one-time equation and selecting at least one number and the corresponding question/prompt from the repository;

instructing said computing means to calculate the value of said one-time equation based on said number and further instructing said storage means to store said value;

presenting said one time equation and selected question/prompt to the user;

prompting said user to calculate value of said one-time equation by using the number which serves as the answer for the question/prompt; and

comparing the value stored in the storage means with the value calculated by said user and authenticating said user in the event that stored value is equivalent to the value calculated by the user.

13. A computer program for instructing a computer to perform the method of providing challenge-response solutions to authenticate a user, said computer program configured to:

interlink a plurality of images with unique index values such that each of said plurality of images has a corresponding unique index value;

enable a user to select at least two interlinked images for the purpose of registration;

generate at least two image matrices having interlinked images, wherein each of said image matrices include at least one interlinked image selected by said user, and arrange the unique index values corresponding to said interlinked images in the form of matrices and generating index-value matrices;

enable said user to specify the sequence in which said image matrices and said index-value matrices are to be traversed;

generate and transmit an authentication challenge of the form of one-time equation;

compute the value of the one-time equation based on at least the interlinked images selected by the user during the registration, the corresponding index values and the sequence specified by the user, and store the computed value at said web server;

display said one time equation, said image matrices and said index value matrices, at least temporarily, on a client device;

prompt said user to calculate the value of said one-time equation by using said image matrices, said index-value matrices and said sequence;

transmit to said web server the value calculated by said user; and

compare the value stored at the web server with value calculated by said user and authenticate said user only in the event that said value calculated by said user is equivalent to the value stored in said web server.

14. The computer program as claimed in claim 13, wherein said computer program is further configured to:

optionally arrange a set of alphanumeric characters and a set of images derived out of dot matrix combinations in the form of 5×

7 matrices respectively;

optionally enable said user to select at least one of said set of alphanumeric characters and said set of images derived out of dot matrix combinations for the purpose of registration;

prompt said user to select for the purpose of registration, at least one of a plurality of alphanumeric characters from said set of alphanumeric characters and a plurality of images from said set of images derived out of dot matrix combinations;

track the order in which at least one of a plurality of alphanumeric characters from said set of alphanumeric characters and a plurality of images from said set of images derived out of dot matrix combinations are selected by said user during said registration;

store the order in which said user selects at least one of a plurality of alphanumeric characters from said set of alphanumeric characters and a plurality of images from said set of images derived out of dot matrix combinations;

generate and transmit an authentication challenge of the form of a secondary matrix having entries selected form the group of entries consisting of numerals, alphabets and the images derived out of dot matrix combinations;

instruct said user to select the entries of said secondary matrix in the same order as that in which at least one of said plurality of alpha numeric characters and said plurality of images were selected during said registration;

compare the order in which said user selects the entries in the secondary matrix, with the order in at least one of said plurality of alpha numeric characters and said plurality of images were selected during said registration; and

authenticate the user if the order in which said user selects the entries in the secondary matrix is same as the order in which at least one of said plurality of alpha numeric characters and said plurality of images were selected from said 5×

7 matrix during said registration.

15. The computer program as claimed in claim 13, wherein said computer program is further configured to:

optionally present said user with a plurality of questions/prompts;

enable said user to input a plurality of personal details in the form of numbers as answers for said questions/prompts;

store said numbers along with the corresponding questions/prompts;

generate a one-time equation and select at least one number and the corresponding question/prompt from the repository;

instruct said computing means to calculate the value of said one-time equation based on said number and further instruct said storage means to store said value;

present said one time equation and selected question/prompt to the user;

prompt said user to calculate value of said one-time equation by using the number which serves as the answer for the question/prompt; and

compare the value stored in the storage means with the value calculated by said user and authenticate said user in the event that stored value is equivalent to the value calculated by the user.