System and method for providing last log-in screen shots for security confirmation

• US 7,478,436 B1
• Filed: 01/17/2008
• Issued: 01/13/2009
• Est. Priority Date: 01/17/2008
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: McBrearty, Gerald Francis, Mullen, Shawn P., Shieh, Johnny M., Murillo, Jessica Carol, Keohane, Susann
• Primary Examiner(s): Vu; KimYen
• Assistant Examiner(s): Zee; Edward
• Application Number:
  US12/015,665
• Time in Patent Office: 362 Days
• Field of Search: 726/26, 726/27, 726/28, 726/29, 713/185, 707/9, 707/10, 715/764, 715/867
• US Class Current: 726/28
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A system for providing additional network security of a user for a web-based system. Two methods of the same basic idea for additional network security for online accounts: (1) Passive screensaver check: a method to take a snapshot of your desktop and save it, and (2) Active screensaver check: a method to take a snapshot of your desktop and compare it to a baseline snapshot of your desktop.

Claims

1. A method to provide log-in screenshots for security confirmation for a user, said method comprising:

a security module controlling an access of said user to a file, web site, service, object, information, data, database, code, executable, or transaction;

said user logging into an account using one or more of the following;

a first password, smart card, biometrics, encryption key, radio-frequency identification tag, identification card, or magnetic card;

said security module verifying said logging procedure for said user to said account;

iconifying all files and objects on display in windows for said user'"'"'s computer or monitor;

taking one screen shot from said display;

storing said one screen shot from said display in a first storage;

comparing said one screen shot from said display to one or more prior screen shots, obtained during prior log-in sessions for said user, stored in said first storage;

if said user applies a second password, then allowing said user to access or view said one or more prior screen shots, stored in said first storage;

if the difference between said one screen shot from said display and said one or more prior screen shots is above a threshold, then said security module locking said account, and said security module asking a private security question from said user to further verify the identity of said user; and

if the difference between said one screen shot from said display and said one or more prior screen shots is below said threshold, then said security module allowing said user accessing said account.