SELECTIVE COMPLEX DATA ENTRY FROM ONE TIME PASSWORDS FOR AUTHENTICATION

• US 20150067798A1
• Filed: 09/05/2013
• Published: 03/05/2015
• Est. Priority Date: 09/05/2013
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: McCown, Jonathan, Hubner, Paul V., Archer, Steven T., Hubbard, Paul
• Granted Patent: US 9,077,711 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0838 using one-time-passwords

Abstract

A one time password (OTP) associated with a client device, and a padding rule, of a plurality of possible padding rules, associated with the client device may be determined. A padded OTP that include the OTP and additional data may be formed based on the padding rule. The padding rule may be associated with at least one of a position of the OTP within the padded OTP, a characteristic of the additional data, or a characteristic of the padded OTP. The padded OTP may be provided to the client device. A selection of a portion of the padded OTP may be received from the client device, and the client device may be authenticated when the selected portion of the padded OTP corresponds to the OTP. If the selected portion of the padded OTP does not correspond to the OTP, other actions may be performed based on the selected portion.

Claims

1. A method comprising:

determining, by a processor, a one time password (OTP) associated with a client device;

determining, by the processor, a padding rule, of a plurality of possible padding rules, associated with the client device;

forming, by the processor, a padded OTP that include the OTP and additional data based on the padding rule,

the padding rule being associated with the client device with at least one of;

a position of the OTP within the padded OTP,

a characteristic of the additional data, or

a characteristic of the padded OTP; and

providing, by the processor, the padded OTP to the client device.

2. The method of claim 1, further comprising:

providing information associated with the padding rule to the client device in a first communication,

wherein the padded OTP is provided to the client device in a second communication that differs from the first communication.

3. The method of claim 1, wherein:

the OTP is associated with a first string of characters, and

the padded OTP is associated with a second string of characters that includes the first string of characters and one or more additional characters.

4. The method of claim 1, wherein:

the padded OTP is associated with a bar code,

the OTP is associated with a first portion of the bar code, and

the additional data is associated with a second portion of the bar code that differs from the first portion.

5. The method of claim 4, wherein forming the padded OTP includes:

determining a character string associated with the OTP;

adding one or more additional characters associated with the additional data to the character string to form an augmented character string; and

converting the augmented character string to the bar code.

6. The method of claim 1, wherein:

the padded OTP is associated with an image,

the OTP is associated with a first portion of the image, and

the additional data is associated with a second portion of the image that differs from the first portion.

7. The method of claim 6, wherein forming the padded OTP includes:

determining a subject associated with the OTP; and

identifying, as the image associated with the padded OTP, a particular image that includes respective representations of the subject and at of least one other subject.

8. The method of claim 1, wherein:

the padded OTP is associated with audio data,

the OTP is associated with a first portion of the audio data, and

the additional data is associated with a second portion of the audio data that differs from the first portion.

9. The method of claim 1, further comprising:

identifying a characteristic associated with the OTP; and

identifying, as the additional data, information that causes a combination of the OTP and the information to be associated with the characteristic.

10. The method of claim 9, wherein the characteristic is associated with a checksum value.

11. An apparatus comprising:

a memory storing a one time password (OTP); and

a processor configured to;

receive information received from a client device,

the information identifying a portion of a padded OTP, and

the padded OTP including the OTP and additional data,

compare the portion of the padded OTP and the OTP, and

determine that the client device is authenticated when the portion of the padded OTP corresponds to the OTP.

12. The apparatus of claim 11, wherein the processor is further configured to:

receive the padded OTP and a rule for determining the OTP from the padded OTP, and

determine the OTP from the padded OTP using the rule.

13. The apparatus of claim 11, wherein the padded OTP includes a communication code, and

wherein the processor is further configured to:

determine, when the portion of the padded OTP does not correspond to the OTP, whether the portion of the padded OTP corresponds to the communication code, and

perform an appropriate response based on the when the portion of the padded OTP corresponds to the communication code.

14. The apparatus of claim 11, wherein the processor is further configured to:

determine, when the portion of the padded OTP does not correspond to the OTP, whether the portion of the padded OTP includes at least a threshold amount of the padded OTP, and

perform an action when the portion of the padded OTP includes at least the threshold amount of the padded OTP,

wherein the action includes at least one;

determining that the client device is lost,

determining that the client device is partially authenticated, or

performing additional authentication of the client device.

15. The apparatus of claim 14, wherein the processor is further configured to:

receive, from the client device, another selection of another portion of the padded OTP,

determine whether the other portion corresponds to the OTP, and

determine that the client device is authenticated when the other portion corresponds to the OTP.

16. A non-transitory computer readable medium for storing instructions, the instructions comprising:

one or more instructions that, when executed by a processor associated with a computing device, cause the processor to;

provide for display, at a first time, information associated with a rule for extracting a password from a padded password that includes the password and additional data;

receive, at a second time, the padded password;

provide for display, information associated with the padded password;

receive, from a user associated with the computing device, a selection associated with a portion of the padded password; and

forward, to an authentication device, data regarding the selection,

wherein the authentication device determines that the computing device is authenticated when the portion of the padded password corresponds to the password.

17. The non-transitory computer readable medium of claim 16, wherein the instructions further comprise:

one or more instructions to;

receive an input related to rule, and

determine the rule based on the input.

18. The non-transitory computer readable medium of claim 16, wherein the padded password corresponds to a character string, and

wherein the one or more instructions to receive the selection further include:

one or more instructions to receive, as the selection, an input associated identifying one or more of the characters.

19. The non-transitory computer readable medium of claim 16, wherein the padded password corresponds to an image, and

wherein the one or more instructions to receive the selection further include:

one or more instructions to receive, as the selection, an input associated identifying a section of the image.

20. The non-transitory computer readable medium of claim 19, wherein the image corresponds to a geometric pattern associated with a character string, and

wherein the instructions further comprise:

one or more instructions to identify a portion of the character string associated with selection.