METHOD OF REGISTERING AND AUTHENTICATING A USER OF AN ONLINE SYSTEM

• US 20200134167A1
• Filed: 07/10/2018
• Published: 04/30/2020
• Est. Priority Date: 07/10/2017
• Status: Active Grant

• Current Assignee: Shayype Global Limited
• Original Assignee: Cloud PIN Limited
• Inventors: Craymer, Jonathan Geoffrey Milton, Beal, Jon Andrew
• Granted Patent: US 11,514,153 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 2221/2117 User registration

Abstract

The present invention provides a method of registering a new user of an online system wherein the user provides a passcode, for example an ordered set of positions within a grid, user identifying information and a passcode identifier is generated, and the passcode identifier is then split into k parts using a secret sharing algorithm wherein q of the k parts are required to regenerate the passcode identifier. n of the k parts are then stored in a first location and q>n≥1, m of the k parts are stored in a second location and q>m≥1, p of the k parts are discarded and p≥0, and the n parts and the m parts are stored with user identifying information.

Claims

1-20. -20. (canceled)

21. A method of registering a new user of an online system comprising the steps of:

receiving and confirming an input from a user comprising a passcode;

generating a passcode identifier from the passcode

generating user identifying information for the user;

splitting the passcode identifier into k parts using a secret sharing algorithm wherein;

q of the k parts are required to regenerate the passcode identifier and k≥

q

n of the k parts are stored in a first location and q>

n≥

1;

m of the k parts are stored in a second location and q>

m≥

1; and

p of the k parts are discarded and p≥

0; and

the n parts and/or the m parts are stored with user identifying information.

22. A method according to claim 21, wherein p≥

1.

23. A method according to claim 21, wherein the first location is remote from the second location.

24. A method according to claim 21, wherein (n+m)≥

q.

25. A method according to claim 21, wherein:

r of the k parts are stored in a third location and q>

r≥

1;

(n+m)<

q;

(n+r)<

q;

(m+r)<

q; and

(n+m+r)≥

q.

26. A method according to claim 21, wherein:

r of the k parts are stored in a third location and q>

r≥

1; and

at least one of (n+m), (n+r), and (m+r) is ≥

q.

27. A method according to claim 26, wherein at least two of (n+m), (n+r), and (m+r) are ≥

q.

28. A method according to claim 26, wherein all of (n+m) or (n+r), or (m+r) are ≥

q.

29. A method according to claim 21, wherein:

r of the k parts are stored in a third location and r>

n≥

1; and

s of the k parts are stored in a fourth location and s>

n≥

1.

30. A method according to claim 21, wherein the input from the user comprises an indication of an ordered set of cells in a grid, said grid comprising a plurality of cells each containing a character.

31. A method according to claim 30, wherein the shape of the grid and the number of cells of the grid are selected by the user.

32. A method according to claim 31, wherein the grid comprises at least 6×

6 cells.

33. A method according to claim 30, wherein a base grid is created for the user, the base grid comprising a re-createable pseudo-randomised grid that is unique to a user.

34. A method according to claim 33, wherein:

a X-OTC and a Y-OTC are read from a user'"'"'s base grid using the user'"'"'s passcode identifier;

the X-OTC is used as an index to store the n of k parts in an array;

the Y-OTC is used as an index to store the m of k parts in the array; and

the position in the array are returned as x-delta and y-delta.

35. A method according to claim 30, wherein the input from the user comprises a string of characters as located in each of the ordered set of cells in the grid.

36. A method according to claim 21, wherein a user token comprising data relating to the user including information identifying the first location and the second location is generated and encrypted and then stored by the user.

37. A method of authenticating a user of an online system that has registered using the method of claim 21, the method comprising the steps of:

receiving an input from an user comprising an indication of their passcode and user identifying information;

generating a passcode identifier from the input;

retrieving q parts of the passcode identifier from more than one location;

regenerating a passcode identifier associated with the user from the q parts using a secret sharing algorithm; and

authenticating the user if the regenerated passcode identifier matches the passcode of the input.

38. A method according to claim 37, wherein the input from the user comprises an indication of an ordered set of cells in a grid, each cell of the grid containing a character.

39. A method according to claim 38, wherein the input from the user comprises the string of characters located in the ordered set of cells.

40. A method according to claim 37, wherein the input from the user comprises a plurality of user gestures indicating the ordered set of cells.