MULTIFACTOR-BASED PASSWORD AUTHENTICATION

• US 20200134168A1
• Filed: 10/30/2018
• Published: 04/30/2020
• Est. Priority Date: 10/30/2018
• Status: Active Grant

• Current Assignee: Blue Popcon Co. Ltd
• Original Assignee: Blue Popcon Co. Ltd
• Inventors: HWANG, YOUNG MAN
• Granted Patent: US 11,010,467 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 2221/031 Protect user input by software means
• CPC Class Codes: G06F 3/04886 by partitioning the display area of the touch-screen or the surface of the digitising tablet into independently controllable areas, e.g. virtual keyboards or menus
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

A system and method are disclosed to improve password security assigned to a user, the method comprising: a method for performing enhanced security authentication, the method comprises: generating one-time password, by a security server, by filtering original password characters, wherein a security server provides a display on a hardware display screen, in which a plurality of keys are arranged and at least one selected from the arranged keys is used to filter original password characters; storing, by a memory unit, the original password and the one-time password generated; determining, by the security server, whether a user'"'"'s password entered on the hardware display screen be accepted by comparing the entered password with the one-time password. The system comprises a storage module and a computer program for performing the method.

Claims

1. A method for performing enhanced security authentication, the method comprising:

generating a login password, by a security server, by filtering a user password characters, wherein at least one selected key location in the keyboard layout displayed on a hardware display screen is used to filter the user password;

storing, by a memory unit, the user password and the login password generated; and

determining, by the security server, whether a password entered by the user on the hardware display screen is valid to access a secured system by comparing the entered password with the login password generated.

2. The method according to claim 1, further comprising allowing the user, by the security server, to enter the user password using a virtual keyboard, a mouse, or a physical keyboard electrically connected to the security server.

3. The method according to claim 1, further comprising:

providing, by the security server, the keyboard layout that is arranged in a manner that guides the user how to enter the user password to log in the secured system.

4. The method according to claim 1, each of the keys in the keyboard layout indicates numbers, symbols, or figures comprising the user password to be entered on the hardware display screen.

5. The method according to claim 4, wherein an arrangement of the keys displayed on the hardware display screen changes each time the user tries to log in the secured data system.

6. The method according to claim 5, wherein an arrangement of keys in the keyboard layout and the user selected key location are used to remove a character of the user password that is placed on the selected key location.

7. The method according to claim 5, wherein an arrangement of keys in the keyboard layout and the user selected key location in the keyboard layout are used to replace a character of the user password that is placed on the selected key location.

8. The method according to claim 7, the user is allowed to direct the server how to replace the character of the user password placed on the selected key location when generating the login password.

9. A system for performing enhanced security authentication, the system comprising:

a terminal configured to output a keyboard layout on a hardware display and receive a password from a user attempting to access a secured data system,

a security server configured to

generate a login password by filtering a user password stored, wherein at least one selected key location in the keyboard layout is used to filter a user password, and

determine whether the password entered from the user is valid for the user to access by comparing the entered password with the login password generated.

10. The system according to claim 9, wherein the terminal is further configured to allow the user to enter the password using a virtual keyboard, a mouse, or a physical keyboard electrically connected to the security server.

11. The system according to claim 9, wherein the security server is further configured to perform a security process by providing the keyboard layout that is arranged in a manner that guides the user how to enter the user password to log in the secured system.

12. A system according to claim 9, each of the arranged keys indicates numbers, symbols, or figures comprising the user password characters to be entered on the hardware display screen.

13. A system according to claim 9, wherein the security server is further configured to change the arrangement of the keys displayed on the hardware display screen each time the user tries to access the secured data system.

14. The system according to claim 9, wherein the plurality of keys are arranged in the keypad layout, and the security server is further configured to use the selected key location in the keyboard layout to remove the character of the user password that is placed on the selected key location.

15. The system according to claim 9, wherein the plurality of keys are arranged in the keypad layout and the security server is further configured to use the user selected key location in the keyboard layout to replace the character of the user password that is placed on the selected key location with a character that a user has defined.

16. The system according to claim 15, the security server is further configured to receive an instruction from a user setting a login password how to replace the character of the user password that is placed on the selected key location.

17. The system according to claim 9, the security server is further configured to generate a login password as same as the user password when none of the characters of the user password is placed on the selected key location.