Keypad for the entry of authentication data

• US 20160093131A1
• Filed: 09/30/2014
• Published: 03/31/2016
• Est. Priority Date: 09/30/2014
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP SE
• Inventors: SCHUETTE, Mark Thomas
• Granted Patent: US 9,489,663 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G07C 9/00674 with switch-buttons
• CPC Class Codes: G07F 19/2055 Anti-skimming aspects at ATMs
• CPC Class Codes: G07F 7/1033 Details of the PIN pad
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

The invention provides for an electronic system with a keypad for manual entry of authentication data by a user. The keypad comprises: multiple keys for entering the authentication data. At least one of the multiple keys comprises a three position switch with an elastic element for restoring the three position switch to a first position. The three position switch is operable to be depressed in a motion direction to a second position and a third position. The motion direction is perpendicular to a surface where the keys are mounted. A first force is required to depress the three position switch to the second position and a second force is required to depress the three position switch from the second position to the third position. The second force is greater than the first force.

The keypad further comprises a controller configured for monitoring key presses of the multiple keys and for monitoring key position data of the three position switch of each of the at least one of the multiple keys during the key presses. The controller is further configured for decoding the key presses and the key position data into the authentication data. The keypad is further configured for outputting the authentication data via a data connection.

Claims

1. An electronic system comprising an input device, wherein the input device comprises a keypad for manual entry of authentication data by a user, wherein the keypad comprises:

multiple keys for entering the authentication data, wherein at least one of the multiple keys comprises a three position switch, wherein the three position switch comprises an elastic element for restoring the three position switch to a first position when no force is applied to the three position switch, wherein the three position switch is operable to be depressed in a motion direction to a second position, wherein the multiple keys are mounted on a surface, wherein the motion direction is perpendicular to the surface, wherein the three position switch is operable to be depressed in the motion direction to a third position beyond the second position, wherein a first force is required to depress the three position switch to the second position, wherein a second force is required to depress the three position switch from the second position to the third position, wherein the second force is greater than the first force; and

a controller configured for monitoring key presses of the multiple keys and for monitoring key position data of the three position switch of each of the at least one of the multiple keys during the key presses, wherein the controller is further configured for decoding the key presses and the key position data into the authentication data, wherein the keypad is further configured for outputting the authentication data via a data connection.

2. The electronic system of claim 1, wherein the difference between the first force and the second force provides tactile feedback to the user.

3. The electronic system of claim 1, wherein the difference between the first force and the second force is at least 10 gram force.

4. The electronic system of claim 1, wherein the authentication data is a character string, wherein decoding the key presses and the key position data into the authentication data comprises mapping the key position data into characters in the character string.

5. The electronic system of claim 1, wherein the authentication data comprises a character string representing the key presses and metadata descriptive of the key position data.

6. The electronic system of claim 1, wherein the key presses is time dependent.

7. The electronic system of claim 1, wherein the key position data is time dependent.

8. The electronic system of claim 1, wherein the authentication data is descriptive the velocity of the three position switch.

9. The electronic system of claim 1, wherein the authentication data is descriptive of a rhythm used to enter the authentication data.

10. The electronic system of claim 1, wherein the authentication data is descriptive of a duration between depressing the three position switch to the second position and the third position.

11. The electronic system of claim 1, wherein the electronic system is a hardware token generator for generating a security token, wherein the electronic system further comprises:

a display for displaying the security token;

a clock for generating a current time;

a processor configured for receiving the authentication data via a data connection; and

a memory for storing machine executable instructions and a cryptographic key, wherein execution of the machine executable instructions causes the processor to;

generate the security token by using the current time, the authentication data, and the cryptographic key as input to a cryptographic algorithm, and

display the security token on the display.

12. The electronic system of claim 1, wherein the input device further comprises an interface for connecting the input device to the electronic system, wherein the data connection is configured for transferring the authentication data to the interface.

13. The electronic device of claim 12, wherein the interface is any one of the following:

a PS/2 port connection, a USB connection, a WIFI connection, a Bluetooth connection, a wireless connection, and a wired connection.

14. The electronic system of claim 1, wherein the input device is a keyboard.

15. The electronic system of claim 1, wherein the electronic system further comprises:

a memory for storing machine executable instructions and an authentication data database; and

a processor for executing the machine executable instructions, wherein execution of the machine executable instructions causes the processor to;

receive the authentication data via the interface,

validate the authentication data using the authentication data database, and

grant access to the electronic system if the authentication data is validated.

16. The electronic system of claim 15, wherein execution of the instructions causes the processor to ignore a portion of the authentication data during the validation of the authentication data using the authentication data database.

17. The electronic system of claim 16, wherein the portion of the authentication data is determined by any one of the following:

using a predetermined location or locations in the authentication data, and

determining a start of the portion by identifying an incorrect key press and determining an end of the portion by determining a correct key press.

18. An automated teller machine comprising:

a display;

a keypad for manual entry of authentication data by a user, wherein the keypad comprises multiple keys for entering the authentication data, wherein at least one of the multiple keys comprises a three position switch, wherein the three position switch comprises an elastic element for restoring the three position switch to a first position when no force is applied to the three position switch, wherein the three position switch is operable to be depressed in a motion direction to a second position, wherein the multiple keys are mounted on a surface, wherein the motion direction is perpendicular to the surface, wherein the three position switch is operable to be depressed in the motion direction to a third position beyond the second position, wherein a first force is required to depress the three position switch to the second position, wherein a second force is required to depress the three position switch from the second position to the third position, wherein the second force is greater than the first force, wherein the keypad further comprises a controller configured for monitoring key presses of the multiple keys and for monitoring key position data of the three position switch of each of the at least one of the multiple keys during the key presses, wherein the controller is further configured for decoding the key presses and the key position data into the authentication data, wherein the keypad is further configured for outputting the authentication data via a data connection;

a processor configured for receiving the authentication data via a data connection; and

a memory for storing machine executable instructions, wherein execution of the machine executable instructions causes the processor to;

display a request for a personal identification number on the display,

receive the authentication data via the data connection in response to displaying the request for the personal identification number,

validate the authentication data via a remote server, and

provide account access if the authentication data is validated.

19. A method of preventing the theft of authentication data while accessing a computer system, wherein the computer system comprises a keypad for manual entry of authentication data by a user, wherein the keypad comprises multiple keys for entering the authentication data, wherein at least one of the multiple keys comprises a three position switch, wherein the keypad is further configured for outputting the authentication data via a data connection;

and

wherein the method comprises;

receiving the authentication data via the data connection,

validating the authentication data using an authentication data database, and

granting access to the computer system if the authentication data is validated.

20. The method of claim 19, wherein the three position switch comprises an elastic element for restoring the three position switch to a first position when no force is applied to the three position switch, wherein the three position switch is operable to be depressed in a motion direction to a second position, wherein the multiple keys are mounted on a surface, wherein the motion direction is perpendicular to the surface, wherein the three position switch is operable to be depressed in the motion direction to a third position beyond the second position, wherein a first force is required to depress the three position switch to the second position, wherein a second force is required to depress the three position switch from the second position to the third position, wherein the second force is greater than the first force, wherein the keypad further comprises a controller configured for monitoring key presses of the multiple keys and for monitoring key position data of the three position switch of each of the at least one of the multiple keys during the key presses, and wherein the controller is further configured for decoding the key presses and the key position data into the authentication data.