Establishing a secure channel with a human user

• US 7,149,899 B2
• Filed: 04/25/2003
• Issued: 12/12/2006
• Est. Priority Date: 04/25/2002
• Status: Active Grant

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Sander, Tomas, Pinkas, Binyamin, Tarjan, Robert E., Haber, Stuart A.
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US10/423,546
• Publication Number:
  US 20040073813A1
• Time in Patent Office: 1,327 Days
• Field of Search: 713/182, 713/181, 713/193
• US Class Current: 713/182
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07C 9/33 by means of a password
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A method of establishing a secure channel between a human user and a computer application is described. A secret unique identifier (“PIN”) is shared between a user and an application. When the user makes a request that involves utilizing the PIN for authentication purposes, the application renders a randomly selected identifier. The randomly selected identifier is in a format that is recognizable to a human but is not readily recognizable by an automated agent. The randomly selected identifier is then presented to the human user. The user identifies the relationship between the randomly selected identifier and the PIN. If the user'"'"'s input reflects the fact that the user knows the PIN, then the user is authenticated.

Claims

1. A method of establishing a secure channel between a user and a computer application comprising:

rendering to the user a randomly selected identifier;

receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user, wherein the user inputs a sequence of data, the sequence of data indicating the difference between the secret identifier and the randomly selected identifier;

determining, based on the input whether the user demonstrates knowledge of the secret identifier; and

authenticating or not authenticating the user based upon the outcome of said determining step.

2. A method of establishing a secure channel between a user and a computer application comprising:

rendering to the user a randomly selected identifier;

receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user, wherein the input represents a series of locations on the randomly selected identifier, the locations indicating the secret identifier;

determining, based on the input whether the user demonstrates knowledge of the secret identifier; and

authenticating or not authenticating the user based upon the outcome of said determining step.

3. A method of establishing a secure channel between a user and a computer application comprising:

rendering to the user a randomly selected identifier, wherein the randomly selected identifier is rendered as an image generated by a Reverse Turing Test (RTT);

receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user;

determining, based on the input whether the user demonstrates knowledge of the secret identifier; and

authenticating or not authenticating the user based upon the outcome of said determining step.

4. A method of establishing a secure channel between a user and a computer application comprising:

rendering to the user a randomly selected identifier, wherein the randomly selected identifier is rendered as an image formatted using various styles;

receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user;

determining, based on the input whether the user demonstrates knowledge of the secret identifier; and

authenticating or not authenticating the user based upon the outcome of said determining step.

5. A method for authenticating a user with a secure application in an insecure environment comprising the steps of:

generating a PIN that is associated with the user, the PIN being known by both the secure application and the user;

requesting an operation such that the secure application renders a randomly generated identifier;

sending the randomly generated identifier to a display device, which displays the randomly generated identifier to the user;

receiving input in the form of at least one command such that at least one value is attributed to the at least one command, the at least one value having a relationship to the PIN;

sending the at least one value to the secure application, wherein the secure application compares the at least one value to the PIN to determine if the at least one value corresponds to the PIN; and

if the user input demonstrates knowledge of the PIN authenticating the user; and

if the user input does not demonstrate knowledge of the PIN not authenticating the user.

6. The method of claim 5, wherein the command represents a relationship between the PIN and the randomly generated identifier.

7. The method of claim 5, wherein the command represents clicks in a sequence, the clicks indicating the difference between the PIN and the randomly generated identifier.

8. The method of claim 5, wherein the command represents a series of locations on the randomly generated identifier, the locations indicating the PIN.

9. The method of claim 5, wherein the randomly generated identifier is used only once.

10. A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising:

a display;

a memory for storing information concerning the PIN;

a processor configured for executing instructions stored in the memory wherein the memory stores instructions that;

generate a random identifier in response to a request using the PIN;

render the random identifier to the user;

receive information from the user, wherein the information received represents a relationship between the value of the random identifier and the value of the PIN; and

determine if the information received sufficiently demonstrates knowledge of the PIN.

11. A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising:

a display;

a memory for storing information concerning the PIN;

a processor configured for executing instructions stored in the memory wherein the memory stores instructions that;

generate a random identifier in response to a request using the PIN;

render the random identifier to the user;

receive information from the user, wherein the information received represents clicks in a sequence, the clicks indicating the difference between the value of the random identifier and the value of the PIN; and

determine if the information received sufficiently demonstrates knowledge of the PIN.

12. A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising:

a display;

a memory for storing information concerning the PIN;

a processor configured for executing instructions stored in the memory wherein the memory stores instructions that;

generate a random identifier in response to a request using the PIN;

render the random identifier to the user;

receive information from the user, wherein the information represents a series of locations on the random identifier, the locations indicating the value of the PIN; and

determine if the information received sufficiently demonstrates knowledge of the PIN.

13. A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising:

a display;

a memory for storing information concerning the PIN;

a processor configured for executing instructions stored in the memory wherein the memory stores instructions that;

generate a random identifier in response to a request using the PIN;

render the random identifier to the user, wherein random identifier is

rendered as an image generated by a Reverse Turing Test (RTT);

receive information from the user; and

determine if the information received sufficiently demonstrates knowledge of the PIN.

14. A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising:

a display;

a memory for storing information concerning the PIN;

a processor configured for executing instructions stored in the memory wherein the memory stores instructions that;

generate a random identifier in response to a request using the PIN;

render the random identifier to the user, wherein the random identifier is

rendered as an image formatted using various styles;

receive information from the user; and

determine if the information received sufficiently demonstrates knowledge of the PIN.