Encryption and authentication systems and methods

• US 7,954,148 B2
• Filed: 12/21/2009
• Issued: 05/31/2011
• Est. Priority Date: 03/05/2001
• Status: Active Grant

• Current Assignee: Kioba Processing, LLC (IP Investments Group LLC)
• Original Assignee: Bolique Applications Ltd LLC (Intellectual Ventures LLC)
• Inventors: Suominen, Edwin A.
• Primary Examiner(s): Dinh; Minh
• Application Number:
  US12/643,940
• Publication Number:
  US 20100100727A1
• Time in Patent Office: 526 Days
• Field of Search: None
• US Class Current: 726/19
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Methods, apparatus, and systems are disclosed for, among other things, passphrase input using secure delay, passphrase input with characteristic shape display, user authentication with non-repeated selection of elements with a displayed set of elements, document authentication with embedding of a digital signature stamp within a graphical representation of the electronic document wherein the stamp comprises digits of a digital signature, and sub-hash computation using secure delay.

Claims

1. A computer-implemented method configured for execution on a suitably configured computing device having one or more processors, the method comprising:

receiving, from a user, a plurality of selected passphrase digits;

automatically determining a shape for display on the computing device, wherein the shape is associated with the selected passphrase digits and is different than the selected passphrase digits; and

outputting the determined shape.

2. The method of claim 1, wherein the selected passphrase digits comprise a plurality of distinct consonant-vowel pairs.

3. The method of claim 1, wherein the shape comprises a plurality of line segments arranged in a pattern indicative of positions of the selected passphrase digits on the display.

4. The method of claim 1, further comprising:

receiving multiple pluralities of selected passphrase digits; and

outputting information indicative of a plurality of shapes that are associated with respective pluralities of the multiple pluralities of selected passphrase digits.

5. The method of claim 4, wherein the multiple pluralities of selected passphrase digits form sequences of passphrase digits, and the plurality of shapes are each associated with a respective one of the sequences.

6. A tangible computer readable storage medium having computer-executable instructions stored thereon, the computer-executable instructions readable by a computing system comprising one or more computing devices, wherein the computer-executable instructions are executable on the computing system in order to cause the computing system to perform operations comprising:

displaying a plurality of passphrase digits on a display of a display device;

receiving user selections of at least a subset of the plurality of passphrase digits; and

automatically determining a passphrase shape for display on the display device, wherein the passphrase shape corresponds to relative positions of the selected passphrase digits on the display and is different than the selected passphrase digits.

7. The computer readable medium of claim 6, wherein the passphrase shape is displayed coincident to the selected passphrase digits.

8. The computer readable medium of claim 7, wherein the shape comprises line segments that connect the selected passphrase digits.

9. The computer readable medium of claim 7, wherein the line segments connect passphrase digits according to a sequence of the user selections of the selected passphrase digits.

10. The computer readable medium of claim 9, wherein the plurality of passphrase digits are presented on the display in a non-linear arrangement.

11. The computer readable medium of claim 10, wherein the non-linear arrangement comprises a plurality of columns.

12. A computing system comprising:

an input device configured to receive input from a user;

a display device configured to generate a user-viewable display; and

a processor configured to

initiate display on the display device of a plurality of passphrase groups, wherein each passphrase group includes one or more selectable passphrase indicia;

receive selections of one or more selectable passphrase indicia from the input device; and

initiate display on the display device of a shape indicative of the location of the selected one or more passphrase indicia on the display device, wherein the shape is different than the selected passphrase indicia.

13. The computer system of claim 12, wherein the shape comprises one or more line segments that are displayed coincident to the plurality of passphrase groups.

14. The computer system of claim 13, wherein only one selection is received from a respective passphrase group.

15. The computer system of claim 13, wherein each passphrase group is arranged in a column on the display.

16. The computer system of claim 13, wherein each line segment is straight.

17. A computer-implemented method configured for execution on a suitably configured computing device having one or more processors, the method comprising:

receiving indications of a plurality of selected passphrase digits from a user;

storing the indications in a computer readable medium; and

outputting information indicative of a shape that is associated with the plurality of selected passphrase digits to the user, wherein the shape is different than the plurality of selected passphrase digits.

18. The method of claim 17, further comprising:

receiving indications of multiple pluralities of selected passphrase digits; and

outputting information indicative of multiple shapes each characteristic of a respective plurality of selected passphrase digits.

19. The method of claim 17, wherein the plurality of selected passphrase digits forms a sequence, and wherein the shape is characteristic of the sequence.

20. A passphrase input method comprising:

displaying a plurality of passphrase digits on a display device;

receiving a plurality of user inputs of selected passphrase digits from an input device; and

displaying a shape that is associated with the passphrase digits and is different than the selected passphrase digits.

21. The method of claim 20, wherein the passphrase digits are arranged in a plurality of columns when displayed on the display device.

22. The method of claim 21, wherein the shape is characteristic of positions of the selected passphrase digits on the display device.

23. The method of claim 22, wherein the shape comprises a plurality of line segments arranged in a pattern indicative of positions of the selected passphrase digits on the display device.