Validated mutual authentication

• US 7,266,693 B1
• Filed: 02/13/2007
• Issued: 09/04/2007
• Est. Priority Date: 02/13/2007
• Status: Expired due to Fees

• Current Assignee: US Bank National Association (US Bancorp)
• Original Assignee: US Bancorp Licensing Incorporated (US Bancorp)
• Inventors: Potter, Eric R., Skirvin, Peter M.
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): CERVETTI, DAVID GARCIA
• Application Number:
  US11/674,422
• Time in Patent Office: 203 Days
• Field of Search: 713/169
• US Class Current: 713/169
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

A method of authenticating a user through a validated mutual authentication system is provided. In an exemplary embodiment, the method includes establishing a validating fractal image during an enrollment or other process. A plurality of fractal images are provided to a client during an authentication attempt by the user, and the plurality of fractal images includes the validating fractal image. Fractal image selection data is received from the client, and the system uses the received fractal image selection data to determine a fractal image selected by the user from the plurality of fractal images. The user is authenticated only if the fractal image selected by the user is the validating fractal image.

Claims

1. A method of authenticating a user, the method comprising:

establishing a validating fractal image;

providing a plurality of fractal images to a client during an authentication attempt by a user, wherein the plurality of fractal images includes the validating fractal image;

receiving fractal image selection data from the client;

determining, based on the received fractal image selection data, a fractal image selected by the user from the plurality of fractal images;

authenticating the user only if the fractal image selected by the user is the validating fractal image;

establishing a communication key during the authentication attempt;

dividing the communication key into one or more units; and

integrating the one or more units of the communication key into a plurality of fractal equations corresponding to the plurality of fractal images.

2. The method of claim 1, further comprising receiving a user identification during the authentication attempt.

3. The method of claim 2, further comprising authenticating the user only if the received user identification is a valid user identification.

4. The method of claim 1, further comprising receiving a password during the authentication attempt.

5. The method of claim 4, further comprising authenticating the user only if the received password is a valid password.

6. The method of claim 1, wherein establishing the validating fractal image comprises requiring the user to select the validating fractal image from a library of fractal images during an enrollment process.

7. The method of claim 1, further comprising providing an image rendering tool to the client, wherein the image rendering tool includes information regarding how the units of the communication key are integrated into the plurality of fractal equations such that the plurality of fractal images can be rendered by the client.

8. The method of claim 1, wherein the fractal image selection data comprises one or more fractal equations.

9. The method of claim 1, wherein the fractal image selection data comprises positional data.

10. The method of claim 1, wherein the validating fractal image is customized by the user.

11. A method of enrolling a user in a validated mutual authentication system, the method comprising:

providing a library of fractal images to a client for presentation to a user;

establishing a validating fractal image, wherein the validating fractal image is selected by the user from the library of fractal images;

providing a mosaic of fractal images to the client for presentation to the user, wherein the mosaic of fractal images includes the validating fractal image;

receiving fractal image selection data from the client;

determining, based on the received fractal image selection data, a fractal image selected by the user from the mosaic of fractal images;

enrolling the user only if the fractal image selected by the user is the validating fractal image; and

storing a fractal equation corresponding to the validating fractal image in a user profile database.

12. The method of claim 11, further comprising receiving a user identification and a password from the user.

13. The method of claim 12, further comprising establishing the user identification and the password.

14. The method of claim 12, further comprising enrolling the user only if the received user identification is a valid user identification and the received password is a valid password.

15. The method of claim 11, further comprising receiving fractal image customization data from the client.

16. A method of authenticating a user, the method comprising:

establishing a communication key;

dividing the communication key into one or more units;

integrating at least one of the one or more units into a fractal equation, wherein the fractal equation corresponds to a validating fractal image;

providing the fractal equation and an image rendering tool to a client during an authentication attempt by a user;

receiving fractal image selection data from the client; and

determining whether to authenticate the user based at least in part on the received fractal image selection data.