Flexible interface for secure input of pin code

• US 7,996,861 B1
• Filed: 06/04/1999
• Issued: 08/09/2011
• Est. Priority Date: 06/04/1999
• Status: Expired due to Term

• Current Assignee: OpenTV, Inc. (Kudelski SA)
• Original Assignee: OpenTV, Inc. (Kudelski SA)
• Inventors: Delpuch, Alain
• Primary Examiner(s): Kelley, Christopher
• Assistant Examiner(s): BROWN, RUEBEN M
• Application Number:
  US09/980,271
• Time in Patent Office: 4,449 Days
• Field of Search: 725/30, 713183-184, 713/202
• US Class Current: 725/30
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: H04N 21/41407 embedded in a portable device, e.g. video client on a mobile phone, PDA, laptop constructional details of equipment or arrangements specially adapted for portable computer application G06F1/1626; arrangements specially adapted for mobile receivers in broadcast systems H04H20/57
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 5/445 for displaying additional information H04N5/50 takes precedence
• CPC Class Codes: H04N 7/163 by receiver means only

Abstract

The present invention concerns a system (10) and a process for authenticating a PIN code of a user in an interactive information system in order to run an application. It comprises input means (15) for PIN code entry, security manager means (13) for comparing the PIN code of the user upon a request for user authentication from the application, with a registered PIN code, and giving authorization to run said application if the PIN code of the user matches with the registered PIN code, and display means (17) for displaying any graphics including a PIN entry field. The request for user authentication is provided on the display means via the PIN entry field with the look and feel of said application. The system further comprises emitting means for entering crypted digits, the security manager means (13) being arranged to give authorisation to run the application after full entry of said crypted digits and if the PIN code of the user is identical to the registered PIN code.

Claims

1. A system for authenticating a PIN code of a user in an interactive information system in order to run an application, the system comprising:

an input device for entering a PIN code of a user;

a security manager configured to;

receive a request for user authentication from the application;

compare a received PIN code of the user with a registered PIN code, in response to said request;

supply information to the application about PIN code entering key-pressing operations by the user, wherein the entered PIN code is not supplied to the application; and

give authorization to run said application if the PIN code of the user matches the registered PIN code;

wherein the application is configured to present a PIN entry field, wherein crypted information corresponding to said information about PIN code entering key-pressing operations received from the security manager is displayed in the PIN entry field.

2. A system according to claim 1 wherein the application comprises a television program.

3. A system according to claim 1, wherein the application comprises a service provided on a mobile telephone.

4. A method for authenticating a PIN code of a user in an interactive information system, in order to run an application, the method comprising:

receiving a request from a user to run the application;

the application presenting a PIN entry field in response to said request;

a security manager comprising a processor;

receiving a request for user authentication from the application;

supplying information to the application about PIN code entering key-pressing operations by the user, wherein the entered PIN code is not supplied to the application;

comparing an entered PIN code of the user with a registered PIN code;

giving authorisation to run said application if the PIN code of the user matches the registered PIN code;

wherein the application is configured to present in the PIN entry field crypted information corresponding to the information about PIN code entering key-pressing operations received from the security manager.

5. A method according to claim 4, further comprising:

the application asking the security manager to enter a PIN entry mode;

checking if keys are pressed by the user;

responsive to keys being pressed, giving feedback in entering said crypted digits in said PIN entry field; and

if the user is authenticated by said security manager, giving said authorisation to run the application.

6. A method according to any of claims 4 and 5, wherein the method further comprises

the security manager initializing to empty a PIN repertory;

waiting for a key to be pressed by the user;

upon occurrence of pressing an ending key, checking if a release occurs;

checking the entered PIN against the user'"'"'s PIN; and

if the entered PIN matches the user'"'"'s PIN, authorising the application to run.

7. A method according to any of claims 4 to 5, wherein the application comprises a television program.

8. A method according to any of claims 4 to 5, wherein the application comprises a service provided on a mobile telephone.

9. A non-transitory computer readable storage medium comprising executable instructions for authenticating a PIN code of a user in order to run an application, wherein the program instructions are operable to:

receive a request for user authentication from the application;

supply information to the application about PIN code entering key-pressing operations by the user, wherein the entered PIN code is not supplied to the application; and

give authorization to run said application if the PIN code of the user matches the registered PIN code;

wherein the application is configured to present a PIN entry field, wherein crypted information corresponding to said information about PIN code entering key-pressing operations received from the security manager is displayed in the PIN entry field.

10. A non-transitory computer readable storage medium according to claim 9, wherein the application comprises a television program.

11. A non-transitory computer readable storage medium according to claim 9, wherein the application comprises a service provided on a mobile telephone.