Dynamic Secure Login Authentication

• US 20140075512A1
• Filed: 09/07/2012
• Published: 03/13/2014
• Est. Priority Date: 09/07/2012
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: eBay Inc.
• Inventors: Vargas, Luis, Aggarwal, Vishal, Kandlur, Yogesh
• Granted Patent: US 9,104,855 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A system for performing a secured transaction using a network including a server in communication with the network is provided. The server has a processor and a memory to store private account information from registered users and store commands that when executed by the processor cause the server to perform a method including: providing a login configuration to a user, including a matrix of dynamic symbols; determining an expected password for the user based on a trace pattern from the user and the symbols in the matrix; receiving a password from the user; and determining whether the password matches the expected password. A non-transitory machine-readable medium including a plurality of machine-readable instructions which when executed by one or more processors of a server controlled by a service provider are adapted to cause the server to perform a method as above is also provided.

Claims

1. A system for performing a secured transaction using a network, the system comprising:

a server in communication with the network, the server comprising a processor circuit and a memory circuit;

wherein;

the memory circuit stores private account information from registered users; and

the memory circuit stores commands that when executed by the processor circuit cause the server to perform a method comprising;

providing a login configuration to a user, the login configuration comprising a matrix of dynamic symbols;

determining an expected password for the user based on a trace pattern provided by the user and the symbols in the matrix;

receiving a password from the user; and

determining whether the password matches the expected password.

2. The system of claim 1 wherein the login configuration further comprises a password request.

3. The system of claim 1 wherein the private account information includes a sequence of matrix elements pre-selected by the user.

4. The system of claim 1 wherein the method performed by the server further comprises:

storing a sequence of matrix elements pre-selected by the user in the memory circuit.

5. The system of claim 4 wherein the expected password comprises a sequence of symbols selected from the sequence of matrix elements pre-selected by the user in the memory circuit.

6. The system of claim 4 wherein each of the matrix elements comprises at least a symbol.

7. The system of claim 6 wherein the symbol includes at least a character from the American Standard Code for Information Interchange (ASCII) character.

8. A non-transitory machine-readable medium comprising a plurality of machine-readable instructions which when executed by one or more processors of a server controlled by a service provider are adapted to cause the server to perform a method comprising:

receiving a user identifier;

accessing an account of a user based on the user identifier;

providing a matrix of cells to the user, wherein at least a plurality of the cells includes a dynamic symbol;

receiving a password from the user;

comparing the password with an expected password for the user based on a stored trace pattern for the user and the symbols in the cells; and

authorizing the user if the password matches with the expected password.

9. The non-transitory machine-readable medium of claim 8 further comprising coupling one of the processors in the server to a network link.

10. The non-transitory machine-readable medium of claim 8 wherein receiving a user identifier comprises matching the user identifier with data stored in a memory circuit, wherein the data comprises at least one of an e-mail address, a cell phone number, and a personal identification number (PIN).

11. The non-transitory machine-readable medium of claim 8 wherein receiving the password from the user comprises receiving a selected sequence of adjacent matrix elements forming a trace.

12. The non-transitory machine-readable medium of claim 11 wherein the trace is selected by a user associated to the user account.

13. The non-transitory machine-readable medium of claim 11 further comprising placing matrix elements in the matrix of cells in the selected sequence of matrix elements to generate the expected password.

14. The non-transitory machine-readable medium of claim 13 further comprising storing the selected sequence of matrix elements in a memory circuit in the server.

15. A method to login into a user account of a service provider linked to a network to complete a transaction through the network, the method comprising:

requesting, electronically by a processor in a server, a login information from a user;

when login information is available requesting an account password;

when the account password is not available, or the user selects a display matrix option providing, electronically by the processor in the server, a matrix pattern option;

generating a matrix of dynamic symbols;

generating an expected password based on a stored trace pattern for the user and the dynamic symbols in the matrix; and

completing the transaction when a password received from the user matches the expected password.

16. The method of claim 15 further comprising completing the transaction when the account password is available.

17. The method of claim 15 further comprising requesting, electronically by the processor in the server the new password from the user;

and

terminating the transaction when the password received from the user does not match the expected password.

18. The method of claim 15 wherein the generating an expected password comprises selecting symbols from the matrix of dynamic symbols according to a pre-selected sequence.

19. The method of claim 18 wherein the selecting symbols from the matrix of dynamic symbols includes retrieving the pre-selected sequence from a memory circuit.

20. The method of claim 19 further comprising receiving the pre-selected sequence from the user upon user registration;

and

storing the pre-selected sequence in a memory circuit.