System and method for user authentication with enhanced passwords

• US 6,954,862 B2
• Filed: 08/27/2002
• Issued: 10/11/2005
• Est. Priority Date: 08/27/2002
• Status: Active Grant

• Current Assignee: S Aqua Semiconductor LLC (Intellectual Ventures LLC)
• Original Assignee: Michael Lawrence Serpa
• Inventors: Serpa, Michael Lawrence
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US10/228,551
• Publication Number:
  US 20040054929A1
• Time in Patent Office: 1,141 Days
• Field of Search: 713/183, 713/184, 713/200, 713/202, 709/225, 709/229, 340/5.54
• US Class Current: 726/5
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour

Abstract

A system and method for enhancing passwords, access codes, and personal identification numbers by making them pace, rhythm, or tempo sensitive. The password includes a sequence of characters and an associated timing element. To access a restricted device or function a user enters the correct character sequence according to the correct pace, rhythm, or tempo. The entered sequence and timing element are compared with stored values and access is granted only if the entered and stored values match. In an alternative embodiment the stored timing element is set, and periodically altered, by a computer or program without consent from the user and visual, auditory, and/or tactile prompts indicate the correct timing element to the user during the authentication process. The meaning of the prompts are provided to the user in advance.

Claims

1. A method for user authentication, the method comprising:

receiving an access code from a user, the access code entered according to a certain pace, rhythm, or tempo;

determining whether the entered access code matches a stored access code character sequence and whether the certain pace, rhythm, or tempo of the access code as entered by the user matches a stored certain pace, rhythm, or tempo for the stored access code;

granting access only if (i) the entered access code matches the stored access code character sequence; and

(ii) the certain pace, rhythm, or tempo of the access code as entered by the user matches the stored certain pace, rhythm, or tempo for the stored access code; and

providing the user with a visual, auditory, and/or tactile timing aid to assist the user with entering the access code according to the certain pace, rhythm, or tempo.

2. The method of claim 1, further comprising:

requiring the user to enter an identification string associated with the stored access code character sequence prior to granting access.

3. The system of claim 1, configured to selectively grant access to a domain upon entry of the password, wherein the domain comprises a physical location.

4. The method of claim 1, further comprising selectively granting access to a domain upon entry of the password, wherein the domain comprises a software program or file.

5. A method for user authentication, the method comprising:

receiving an access code from a user, the access code entered according to a certain pace, rhythm, or tempo;

determining whether the entered access code matches a stored access code character sequence and whether the certain pace, rhythm or tempo of the access code as entered by the user matches a stored certain pace, rhythm, or tempo for the stored access code, wherein the stored certain pace, rhythm, or tempo for the stored access code character sequence is set and can be altered by a computer without consent from the user;

granting access only if (i) the entered access code matches the stored access code character sequence; and

(ii) the certain pace, rhythm, or tempo of the access code as entered by the user matches the stored certain pace, rhythm, or tempo for the stored access code; and

providing prompts from the computer while receiving the access code, wherein the prompts indicate to the user the stored certain pace, rhythm, or tempo for the stored access code character sequence.

6. The method of claim 5, further comprising providing the user with prompt meanings prior to providing prompts.

7. A system for user authentication, the system comprising:

a computer and a computer memory;

an input device permitting input by a user;

a password including a sequence of characters;

a timing element, the timing element defined by predetermined pauses occurring before, within, or after the sequence of characters; and

an output device, wherein the timing element is generated by the computer and is conveyed to the user by prompts on the output device;

the sequence of characters of the password being stored in the computer memory;

the timing element being stored in the computer memory or being generated by the computer;

wherein the system is configured to provide user authentication when the user inputs the password sequence of characters with the input device according, to the predetermined pauses of the timing element.

8. The system of claim 7, wherein the prompts are selected from the group consisting of visual, auditory and tactile prompts.

9. A system for user authentication, the system comprising:

a computer and a computer memory;

an input device permitting input by a user;

a password including a sequence of characters, wherein the sequence of characters of the password is stored in the computer memory;

a timing element, the timing element defined by predetermined pauses occurring before, within, or after the sequence of characters, wherein the timing element is stored in the computer memory or being generated by the computer;

wherein the system is configured to provide user authentication when the user inputs the password sequence of characters with the input device according to the predetermined pauses of the timing, element;

a ghost character feature, the ghost character feature capable of being locked and unlocked by the user;

the ghost character feature permitting the user to input, during the pauses in the password or access code, additional characters; and

the computer being configured to ignore the additional characters when the ghost character feature is unlocked.