Method and system for authenticating a user of a computer system

• US 6,766,456 B1
• Filed: 02/23/2000
• Issued: 07/20/2004
• Est. Priority Date: 02/23/2000
• Status: Expired due to Term

• Current Assignee: Micron Technology, Inc.
• Original Assignee: Micron Technology, Inc.
• Inventors: McKeeth, James
• Primary Examiner(s): HUA, LY
• Application Number:
  US09/511,092
• Time in Patent Office: 1,609 Days
• Field of Search: 713/200, 713/202, 713/201, 713/183, 713/184, 713/186, 345/168, 345/156, 345/158
• US Class Current: 726/2
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 3/041 Digitisers, e.g. for touch screens or touch pads, characterised by the transducing means
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G06V 40/12 Fingerprints or palmprints

Abstract

A method and system for authenticating a user to access a computer system. The method comprises communicating security information to the computer system, and providing the computer system with an implicit input. The method further comprises determining whether the security information and implicit input match corresponding information associated with the user. The method further comprises granting the user access to the computer system in the event of a satisfactory match. When authenticating the user, the method and system consider the possibility of the user being legitimate but subject to duress or force by a computer hacker.

Claims

1. A method of authenticating a user of an electronic device, the method comprising:

receiving security information from a user,

receiving in the electronic device an authorization pattern provided by a mouse, wherein the authorization pattern identifies a particular movement made by the mouse;

determining whether the authorization pattern matches a stored pattern;

measuring a duration of time between the receipt of the security information and the authorization; and

granting the user access to the electronic device in the event of a satisfactory match and the duration of time is less than a threshold.

2. The method of claim 1, further comprising denying the user access to the electronic device in the event of an unsatisfactory match.

3. The method of claim 2, further comprising issuing a security alert to security personnel in the event of an unsatisfactory match between the authorization pattern and the stored pattern.

4. The method of claim 2, further comprising issuing a silent security alert to security personnel in event of an unsatisfactory match.

5. The method of claim 1, further comprising limiting the scope of access in the event of an unsatisfactory match.

6. A system for authenticating a user of an electronic device, the system comprising:

a mouse configured to communicate an authorization pattern to the electronic device, wherein the authorization pattern identifies a particular movement made by the mouse;

a user interface configured to receive security information;

a compare circuit that is operationally coupled to the mouse, and configured to determine whether authorization pattern matches a stored pattern;

a process circuit that is operationally coupled to the compare circuit, and configured to grant the user access to the the electronic device in the event of a satisfactory match; and

a timer that is operationally connected to the process circuit the timer being configured to measure duration of time between entry of the security information and entry of the authorization pattern, the process circuit determining whether the measured duration exceeds a threshold, access to the electronic device being denied if the measured duration exceeds the threshold.

7. The system as defined in claim 6, wherein the security information comprises a user identification and timer that is operationally connected to the process circuit, the timer being configured to measure duration of time between entry of security information and entry of the authorization pattern, the process circuit determining whether the measured duration exceeds a threshold, access to the electronic device being denied if the measured duration exceeds the threshold password.

8. The system as defined in claim 6, wherein the process circuit is configured to generate an alert signal in the event an unsatisfactory match between the authorization pattern and the stored pattern.

9. The system as defined in claim 6, wherein the process circuit is configured to grant the user a limited scope of access to the system, and further configured to generate a silent alert signal in the event of an unsatisfactory match between the authorization pattern and the stored pattern.

10. The system as defined in claim 6, wherein the process circuit is configured to generate an alert signal in an event of an absence of the authorization pattern.

11. A system for authenticating a user of an electronic device, the system comprising:

means in a mouse for interfacing the user with the electronic device, the interfacing means being configured to communicate an authorization pattern to the electronic device, wherein the authorization pattern identifies a particular movement made by the mouse;

means, operationally coupled to the interfacing means, for comparing the authorization pattern with respective information associated with the user;

means, operationally coupled to the comparing means, for granting the user access to the computer in the event of a satisfactory match; and

means, operationally connected to the process circuit, for measuring the duration of time between entry of security information and entry of the authorization pattern, access to the electronic device being denied if the measured duration exceeds a threshold.

12. The system as defined in claim 11, wherein the security information comprises at least one of a user identification and password.

13. The system as defined in claim 11, wherein the processing means is configured to generate an alert signal in the event an unsatisfactory match between the authorization pattern and the respective information associated with the user.

14. The system as defined in claim 11, wherein the processing means is configured to grant the user a limited scope of access to the system, and further configured to generate a silent alert signal, in the event of an unsatisfactory match between the authorization pattern and the respective information associated with the user.

15. The system as defined in claim 11, wherein the processing means is configured to generate an alert signal in the an event of an absence of authorization pattern.