Process for entry of a confidential piece of information and associated terminal

• US 5,815,083 A
• Filed: 04/14/1995
• Issued: 09/29/1998
• Est. Priority Date: 07/01/1993
• Status: Expired due to Term

• Current Assignee: CP8 Technologies (Thales SA)
• Original Assignee: Bull CP8 (SLB)
• Inventors: Patarin, Jacques, Ugon, Michel
• Primary Examiner(s): Zimmerman, Brian
• Assistant Examiner(s): WILSON JR, WILLIAM HALL
• Application Number:
  US08/387,817
• Time in Patent Office: 1,264 Days
• Field of Search: 340/825.3, 340/825.31, 340/825.56, 340/543, 340/825.34, 361/171, 361/172, 341/22, 341/23, 341/20, 341/28, 345/1, 345/3, 345/50, 345/116, 345/141, 345/168, 345/178
• US Class Current: 340/5.27
• CPC Class Codes: G07C 9/33 by means of a password
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1041 PIN input keyboard gets new key allocation at each use

Abstract

With confidential information being composed of authenticating signs which belong to a first series, a second series of signs or designating symbols is defined, the first and second series of signs are displayed in a relatively random position, and this placement in correspondence is used to enter the confidential information in such a way that a third party who observes the entry operations cannot determine the confidential information. The invention also relates to the terminal associated with this process.

Claims

1. Process for entry by a user of a confidential piece of information into a terminal at the terminal having a display associated therewith, this information including a plurality of confidential signs which belong to a first series of authenticating signs (3), said process comprising:

defining a second series of designating symbols (4);

displaying the first series of authenticating signs and second series of designating symbols on the display so that each sign in the first series of authenticating signs is disposed opposite a designating symbol in the second series of designating symbols; and

using the designating symbols in the second series of designating symbols, opposite which the authenticating signs in the first series of authenticating signs composing said confidential information are disposed, for the user'"'"'s designation of the confidential information.

2. Process according to claim 1, wherein the process makes use of a keyboard (1) which is distinct from the display and which includes a plurality of keys, and said process further comprising:

identifying each of the keys on a keyboard by assigning each key a key symbol which belongs to the second series of designating symbols (4);

displaying the first series of authenticating signs and the second series of designating symbols on the display in a mutual random distribution that is known to the terminal; and

designating the authenticating signs in the first series which compose said confidential information by depressing each key on the keyboard (1) whose key symbol corresponds to the designating symbol in the second series (4) located opposite one of the authenticating signs in the first series (3) constituting said confidential information.

3. Process according to claim 2, further including causing the first series of authenticating signs (3) or the second series of designating symbols (4) to disappear as soon as a key on the keyboard (1) is struck.

4. Process according to claim 1, further comprising:

secretly defining at least one reference symbol, from among the designating symbols (4), that is known to the terminal and to the user; and

displaying the authenticating signs in the first series of authenticating signs opposite the designating symbols in the second series of designating symbols so that each time, one of the authenticating signs which compose said confidential information is located opposite said reference symbol.

5. Process according to claim 4, wherein:

during the entire entry process, the authenticating signs in the first series (3) is displayed in arbitrary order;

the first series of authenticating sign (3) is shifted in relation to the designating symbols in the second series (4) so that at least one confidential sign composing said confidential information is located in front of said reference symbol; and

the user gives the terminal a validation order when said confidential sign is located in front of the reference symbol.

6. Process according to claim 4, wherein the user makes use of a keyboard (1) with a plurality of keys, in which each of the keys is identified by being assigned an authenticating sign which belongs to the first series of authenticating signs (3), and wherein the display of each of the authenticating signs in the first series (3) opposite the designating symbols in the second series (4) is produced by depressing the key identified by this authenticating sign, the terminal being arranged in order to effect a comparison between the authenticating sign in the first series that has thus been placed by the user in front of the reference symbol and at least one of the confidential signs of the confidential information.

7. Process according to claim 6, wherein said confidential information includes several confidential signs arranged in a predetermined order with a particular position (i) therein (1 . . . i . . . n), and further wherein before the user displays the authenticating signs in the first series (3), the terminal gives the user a message directing the user to place the confidential sign that is in the particular position (i) opposite the reference symbol.

8. Process according to claim 7, wherein the authenticating signs in the first series (3) which compose said confidential information are digits, and the user is directed by the terminal to place the result of a function of the digit that is in the particular position (i) of said confidential information opposite the reference symbol.

9. Process according to claim 1, wherein the second series of designating symbols (4) includes a number of distinct symbols that is less than the number of authenticating signs in the first series (3).

10. Process according to claim 1, wherein the designating symbols in the second series (4) are different from the authenticating signs in the first series (3).

11. A terminal including a display and means to enter into the terminal a confidential piece of information furnished by a user, said information including a plurality of authenticating signs which belong to a first set of authenticating signs (3), said terminal being operable to display said first series of authenticating signs and a second series of designating symbols (4) in such a way that each authenticating sign in the first series (3) is disposed opposite a designating symbol in the second series (4), said terminal further comprising:

means for using the designating symbols in the second series (4) to allow the user to designate the authenticating signs in the first series (3) which constitute said confidential information.

12. Terminal according to claim 11, wherein said terminal includes a keyboard (1) which is distinct from the display, said keyboard having a plurality of keys (5), each of said keys being identified by a key symbol which belongs to said second series of designating symbols (4), and wherein upon pressing each key on said keyboard whose key symbol corresponds to the designating symbol in the second series (4) displayed opposite one of the confidential signs constituting said confidential information an entry is made of said confidential sign constituting said confidential information.

13. Terminal according to claim 11, wherein said terminal comprises:

means for storing at least one reference symbol that is known to the user and belongs to the second series of designating symbols (4); and

means for enabling the user to display the authenticating signs in the first series (3) such that the confidential signs constituting the confidential information are disposed opposite said reference symbol.

14. Terminal according to claim 11, wherein the second series of designating symbols (4) includes a number of distinct symbols that is less than the number of authenticating signs in the first series (3).

15. Terminal according to claim 11, wherein the designating symbols in the second series (4) are different from the authenticating signs in the first series (3).