System, method and article of manufacture for knowledge-based password protection of computers and other systems

• US 6,934,860 B1
• Filed: 05/08/2000
• Issued: 08/23/2005
• Est. Priority Date: 05/08/2000
• Status: Expired due to Fees

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Goldstein, Richard J.
• Primary Examiner(s): Barrón, Jr., Gilberto
• Assistant Examiner(s): Gurshman, Grigory
• Application Number:
  US09/566,860
• Time in Patent Office: 1,933 Days
• Field of Search: 713/202, 713/200, 713/183
• US Class Current: 713/183
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system, method and article of manufacture are provided for password protecting user access to a computer system. One or more images are displayed to a user. The user is then required to perform a sequence of actions involving the images. The performed sequence of actions is compared with a predefined sequence of actions. If the performed sequence of actions matches the predefined sequence of actions, user access is permitted.

Claims

1. A method for password protecting user access, comprising:

(a) displaying a composite image to a user, the composite image including a plurality of images relevant to a knowledge-based password known to the user;

(b) requiring the user to perform a sequence of actions to one or more of the plurality of images included in the composite image to produce a marked-up composite image;

an action in the sequence of actions including drawing in the composite image at least one of a graphical shape connecting two of the images, and a graphical shape around an image;

(c) comparing the performed sequence of actions indicated by the marked-up composite image with a predefined sequence of actions consistent with the knowledge-based password; and

(d) permitting user access when the performed sequence of actions matches the predefined sequence of actions.

2. A method as recited in claim 1, further comprising requiring the user to input an identifier associated with the user.

3. A method as recited in claim 2, wherein the predefined sequence of actions is associated with the identifier of the user, and further comprising retrieving the predefined sequence associated with the user from a database.

4. A method as recited in claim 2, wherein the plurality of images included in the composite image are associated with the identifier of the user, and further comprising retrieving the plurality of images associated with the identifier from a database.

5. A method as recited in claim 2, wherein positioning each of the plurality of images with respect to one another displayed to the user in the composite image is dependent on the user identifier inputted by the user.

6. A method as recited in claim 1, wherein the actions are performed utilizing a computer input device.

7. A method as recited in claim 1, further comprising utilizing a network to receive the sequence of actions performed by the user prior to comparing the performed sequence of actions with a predefined sequence of actions.

8. A method as recited in claim 1, further comprising encrypting the sequence of actions performed by the user.

9. A method as recited in claim 1, wherein the predefined sequence of actions are defined by the user.

10. A computer program embodied on a computer readable medium for password protecting user access to a computer, comprising:

(a) a code segment that displays a composite image to a user, the the composite image including a plurality of images relevant to a knowledge-based password known to the user;

(b) a code segment that requires the user to perform a sequence of actions to one or more images included in the composite image to produce a marked-up composite image;

an action in the sequence of actions including drawing in the composite image at least one of a graphical shape connecting two of the images and a graphical shape around an image.

(c) a code segment that compares the performed sequence of actions indicated by the marked-up composite image with a predefined sequence of actions consistent with the knowledge based password; and

(d) a code segment that permits user access to a computer when the performed sequence of actions matches the predefined sequence of actions.

11. A computer program as recited in claim 10, further comprising a code segment that requires the user to input an identifier associated with the user.

12. A computer program as recited in claim 11, wherein the predefined sequence of actions is associated with the identifier of the user, and further comprising a code segment that retrieves the predefined sequence associated with the user from a database.

13. A computer program as recited in claim 11, wherein the plurality of images included in the composite image are associated with the identifier of the user, and further comprising a code segment that retrieves the plurality of images associated with the identifier from a database.

14. A computer program as recited in claim 11, wherein each of the plurality of images with respect to one another displayed to the user in the composite image is dependent on the user identifier inputted by the user.

15. A computer program as recited in claim 10, further comprising a code segment that utilizes a network to receive the sequence of actions performed by the user prior to comparing the performed sequence of actions with a predefined sequence of actions.

16. A computer program as recited in claim 10, further comprising a code segment that encrypts the sequence of actions performed by the user.

17. A computer program as recited in claim 10, wherein the predefined sequence of actions are defined by the user.

18. A system for password protecting user access to a computer, comprising:

(a) logic that displays a composite image to a user, the composite image including a plurality of images relevant to a knowledge-based password known to the user;

(b) logic that requires the user to perform a sequence of actions to one or more images included in the composite image to produce a marked-up composite image;

an action in the sequence of actions including drawing in the composite image at least one of a graphical shape connecting two of the images and a graphical shape around an image;

(c) logic that compares the performed sequence of actions indicated by the marked-up composite image with a predefined sequence of actions consistent with the knowledge-based password; and

(d) logic that permits user access to a computer when the performed sequence of actions matches the predefined sequence of actions.