Method and apparatus that enable a computer user to verify whether they have correctly input their password into a computer

• US 7,028,192 B2
• Filed: 11/06/2003
• Issued: 04/11/2006
• Est. Priority Date: 11/26/1999
• Status: Expired due to Fees

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Butler, Richard M.
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): Lemma, Samson
• Application Number:
  US10/703,946
• Publication Number:
  US 20040098628A1
• Time in Patent Office: 887 Days
• Field of Search: 713/189, 713/202, 713/183, 713/184, 713/185, 713/168, 726/2
• US Class Current: 713/183
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords

Abstract

Upon input of a password to a computer, the password is subjected to a hashing function to generate an N-bit number. The N-bit number is used as an index to retrieve at least one object from a list of objects. The retrieved objects are presented to a user, and the user is prompted to verify that the objects are recognizable as the objects which the user knows to be associated with their password. If the objects are verified as being recognizable, the password is accepted as a correct and intended input. Alternative embodiments of this method, and associated apparatus, are also disclosed.

Claims

1. A method which enables a computer user to verify whether they have correctly input their password into a computer, comprising:

upon input of the password, subjecting the password to a hashing function to thereby generate an N-bit number;

utilizing the N-bit number as an index for retrieving at least one object from a list of objects;

presenting the retrieved objects to the user and prompting the user to verify that the retrieved objects are recognizable as the objects which the user knows to be associated with their password; and

if the retrieved objects are verified as being recognizable, accepting the password as the user'"'"'s intended input.

2. A method as in claim 1, wherein the list of objects is a list of words.

3. A method as in claim 1, wherein the list of objects is a list of pictures.

4. A method as in claim 1, further comprising, if in response to the verification prompt the user indicates an uncertainty as to recognition of the retrieved objects, prompting the user to re-input their password.

5. A method as in claim 4, further comprising, if the re-input password matches the first input password, accepting the re-input password as the user'"'"'s intended input.

6. A method as in claim 5, further comprising, if the re-input password matches the first input password, once again presenting the retrieved objects to the user and accepting the re-input password.

7. A method as in claim 1, wherein presenting the retrieved objects to the user comprises displaying the retrieved objects to the user.

8. A method as in claim 7, further comprising, if the retrieved objects are not verified as being recognizable within a predetermined amount of time, discontinuing the display of the retrieved objects and prompting the user to re-input their password.

9. A method as in claim 1, wherein presenting the retrieved objects to the user comprises audibly presenting the retrieved objects to the user.

10. A method as in claim 1, wherein prompting the user to verify that the retrieved objects are recognizable as the objects which the user knows to be associated with their password comprises prompting the user to make a single keystroke.

11. A method as in claim 1, wherein prompting the user to verify that the retrieved objects are recognizable as the objects which the user knows to be associated with their password comprises prompting the user to make a single mouse click.

12. A method as in claim 1, wherein prompting the user to verify that the retrieved objects are recognizable as the objects which the user knows to be associated with their password comprises prompting the user to utter a voiced response.

13. A method as in claim 1, further comprising, if the verification prompt is responded to in less than a predetermined amount of time, rejecting the response.

14. A method as in claim 1, further comprising, if the password is accepted, using the password to encrypt a file.

15. Apparatus which enables a computer user to verify whether they have correctly input their password into a computer, comprising:

a number of computer readable media; and

computer readable program code stored on the number of computer readable media, the computer readable program code comprising;

code for subjecting the password to a hash function to thereby generate an N-bit number;

code for maintaining a list of objects;

code that uses the N-bit number as an index for retrieving at least one object from the list of objects;

code for presenting the retrieved objects to the user and prompting the user to verify that the retrieved objects are recognizable as the objects which the user knows to be associated with their password; and

code that accepts the password as the user'"'"'s intended input if the user'"'"'s response to the verification prompt indicates that the user recognizes the retrieved objects as being the objects which the user knows to be associated with their password.

16. Apparatus as in claim 15, wherein the list of objects is a list of words.

17. Apparatus as in claim 15, further comprising code for prompting the user to re-input their password when the user'"'"'s response to the verification prompt indicates that the user is uncertain as to whether the retrieved objects are recognizable.

18. Apparatus as in claim 17, further comprising code for accepting the re-input password as the user'"'"'s intended input when the re-input password matches the first input password.

19. Apparatus as in claim 15, further comprising code to, upon acceptance of the password, use the password to encrypt a file.