ACCESS CONTROL FOR A RESOURCE

• US 20170011212A1
• Filed: 03/05/2015
• Published: 01/12/2017
• Est. Priority Date: 03/07/2014
• Status: Active Grant

• Current Assignee: British Telecommunications PLC (BT Group PLC)
• Original Assignee: British Telecommunications PLC (BT Group PLC)
• Inventors: ROWLINGSON, Robert
• Granted Patent: US 10,395,022 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: G06T 11/60 Editing figures and text; Combining figures or text
• CPC Class Codes: G06T 13/80 2D [Two Dimensional] animation, e.g. using sprites
• CPC Class Codes: G06T 2207/10024 Color image
• CPC Class Codes: G06T 5/50 using two or more images, e.g. averaging or subtraction
• CPC Class Codes: G06T 5/70 Denoising; Smoothing

Abstract

An access controller comprising: a data store storing: a challenge image including a user challenge; a mask image including a mask; a composite image generator to superimpose the challenge image and the mask image as a dynamic composite image such that the user challenge is partially masked by the mask in the composite image; and a display to display the dynamic composite image to a user; a user input receiver, wherein the access controller to grants access to the resource on receipt, via the user input receiver, of a correct response by a user to the challenge, wherein that the user challenge is at least 70% masked by the mask, wherein the user challenge is indistinguishable from the mask at boundaries between the user challenge and the mask in the composite image, and wherein the composite image is dynamic by the mask randomly moving in the composite image periodically.

Claims

1. An access control method for a resource in a computer system comprising:

generating a challenge image including a user challenge;

generating a mask image including a mask;

generating a dynamic composite image comprising the challenge image and the mask image superimposed such that the user challenge is partially masked by the mask; and

granting access to the resource on receipt of a correct response by a user of the computer system to the challenge,

wherein the user challenge is at least 70% masked by the mask,

wherein the user challenge is indistinguishable from the mask at boundaries between the user challenge and the mask in the composite image by the mask and the challenge having one or more of;

identical colors, textures or images, and

wherein the composite image is dynamic by the mask randomly moving in the composite image periodically.

2. The method of claim 1 wherein the random movement of the mask is characterized by the mask moving in the composite image in a random direction independently determined for each period.

3. The method of claim 1 wherein the user challenge periodically moves in the composite image in a random direction independently determined for each period.

4. The method of claim 1 wherein the user challenge comprises a plurality of challenge elements and wherein each challenge element periodically moves in a random direction independently determined for each period.

5. The method of claim 1 wherein the mask comprises a plurality of mask elements, the mask elements having spaces therebetween for revealing portions of the user challenge.

6. The method of claim 5 wherein the mask elements are random elements in at least one of:

element size; and

element location in the mask image.

7. The method of claim 5 wherein the mask moves by movement of individual mask elements, each mask element moving in a random direction independently determined for each period.

8. The method of any preceding claim 1 wherein the user challenge is at least 80% masked by the mask and at most 94% masked by the mask.

9. The method of claim 1 wherein the user challenge includes colors and the mask consists exclusively of colors of the user challenge so as to provide that the user challenge is indistinguishable from the mask at boundaries between the user challenge and the mask in the composite image.

10. The method of claim 1 wherein the user challenge and the mask are provided in substantially the same color so as to provide that the user challenge is indistinguishable from the mask at boundaries between the user challenge and the mask in the composite image.

11. The method of claim 1 wherein the composite image is periodically recorded so as to generate a plurality of frames of the composite image.

12. The method of claim 11 wherein the plurality of frames are presented to the user as an animation.

13. The method of claim 12 wherein the animation is provided in a video data format.

14. The method of claim 1 wherein the composite image is generated at a first computer system and communicated to a second computer system for provision to a user, and the user response is received from the second computer system by the first computer system.

20. A computer program element comprising computer program code to, when loaded into a computer system and executed thereon, cause the computer to perform the method as claimed in claim 1.

15. An access controller for a resource in a computer system, the access controller comprising:

a data store having stored therein;

a challenge image including a user challenge, and

a mask image including a mask;

a composite image generator adapted to superimpose the challenge image and the mask image as a dynamic composite image such that the user challenge is partially masked by the mask in the composite image,

a display adapted to display the dynamic composite image to a user; and

a user input receiver,

wherein the access controller is adapted to grant access to the resource on receipt, via the user input receiver, of a correct response by a user of the computer system to the challenge,

wherein the user challenge is at least 70% masked by the mask,

wherein the user challenge is indistinguishable from the mask at boundaries between the user challenge and the mask in the composite image by the mask and the challenge having one or more of;

identical colors, textures or images, and

wherein the composite image is dynamic by the mask randomly moving in the composite image periodically.

16. The access controller of claim 15 wherein the random movement of the mask is characterized by the mask moving in the composite image in a random direction independently determined for each period.

17. The access controller of claim 15 wherein the user challenge periodically moves in the composite image in a random direction independently determined for each period.

18. The access controller of claim 15 wherein the user challenge comprises a plurality of challenge elements and wherein each challenge element periodically moves in a random direction independently determined for each period.

19. The access controller of claim 15 wherein the mask comprises a plurality of mask elements, the mask elements having spaces therebetween for revealing portions of the user challenge.