Security using physical objects

• US 8,001,613 B2
• Filed: 06/23/2006
• Issued: 08/16/2011
• Est. Priority Date: 06/23/2006
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Duncan
• Primary Examiner(s): Dinh; Minh
• Assistant Examiner(s): Gregory; Shaun
• Application Number:
  US11/426,101
• Publication Number:
  US 20070300307A1
• Time in Patent Office: 1,880 Days
• Field of Search: 345173-178, 463/30, 463/31, 715/702, 715733-743, 715750-759, 726/16, 726/17, 726/20, 726/27, 726/28, 726/30, 455/41.1, 455/73, 717/105, 717/109
• US Class Current: 726/28
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation

Abstract

A password-type security system may be employed using the placement of physical objects as a security pattern that is to be matched before access to secured content is granted. The system may be implemented on a computing system that uses a display that can detect, e.g., via optical circuitry, the visual characteristics of the display surface. The system can visually detect the placement of objects, their orientations, locations, color, printed patterns, etc. The user may define a security pattern as comprising one or more objects placed at locations on the screen, or at a predetermined rotation angle. The outline shape of an object may be treated as a required pattern, such that access to secured content is permitted only if the object having that outline shape is detected on the display surface. Similarly, printed patterns on objects may also be detected and used as part of security patterns.

Claims

1. A method for controlling access to restricted content in a computing system, comprising the steps of:

registering a security pattern on the computing system, wherein registering the security pattern includes;

detecting a security object proximal the display of the computer system,

detecting physical attributes of the security object including a physical shape of the security object, a physical pattern on the security object, a position of the security object in relation to the display, and an angular orientation of the security object in relation to the display,

generating a list of the physical attributes of the security object in relation to the display,

upon selection, displaying an attribute menu on the display, wherein the attribute menu displays selectable options that comprise the generated list of physical attributes for the security object that is proximal to the display of the computer system, wherein the selectable options are used to determine attributes of the security object to include in the security pattern;

receiving a user selection of one or more of the selectable options from the displayed attribute menu—

wherein receiving user selection of the position of the security object includes receiving user specification of a position-based percentage margin of error and receiving user selection of the angular orientation of the security object includes receiving user specification of an angle-based percentage margin of error,

generating the security pattern for granting access to the secured content based on the user selection from the attribute menu, and

registering and storing the security pattern in association with security credentials for a user;

after registering and storing the security-pattern in association with security credentials for the user;

generating a prompt that requests security credentials,

detecting an object proximal the display of the computing system,

detecting physical attributes of the detected object in relation to the display,

determining whether any of the detected physical attributes of the detected object matches the security pattern of the security object,

when the detected physical attributes of the detected object matches the stored security pattern of the security object, providing the security credentials and causing the computer system to provide access to the restricted content, and

when the detected physical attributes of the detected object do not match the stored security pattern of the security object, maintaining the restriction to the restricted content of the computer system.

2. The method of claim 1, further comprising a matching threshold, wherein determining whether any of the detected physical attributes of the detected object matches the stored security pattern of the security object includes matching according to the threshold.

3. The method of claim 1, further comprising, indicating that the detected object is the security object when any of the detected physical attributes of the detected object matches the stored security pattern of the security object.

4. The method of claim 1, further comprising, indicating that the detected object is not the security object when any of the detected physical attributes of the detected do not match the stored security pattern of the security object.

5. The method of claim 1, wherein at least one physical attribute of the physical attributes of the security object is a position of the security object in relation to the display, wherein the security object is different than the detected object.

6. A memory having computer executable instructions for controlling access to restricted content in a computing system, the instructions comprising:

registering a security pattern, wherein registering the security pattern includes;

detecting a security object proximal the display,

detecting physical attributes of the security object including a physical shape of the security object, a physical pattern on the security object, a position of the security object in relation to the display, and an angular orientation of the security object in relation to the display,

generating a list of the attributes of the security object in relation to the display,

displaying an attribute menu on the display, wherein the attribute menu displays selectable options that comprise the generated list of attributes of the security object that is proximal to the display of the computer system, wherein the selectable options are used to determine attributes to include in the security pattern;

receiving a user selection of one or more of the selectable options from the displayed attribute menu;

generating the security pattern for granting access to the secured content based on the user selection from the attribute menu, and

registering and storing the security pattern in association with security credentials for a user;

detecting an object proximal the display;

detecting attributes of the detected object in relation to the display;

determining whether any of the detected attributes of the detected object matches the stored security pattern of the security object;

when the detected attributes of the detected object matches the stored security pattern of the security object, providing security credentials for a user to access to the restricted content; and

when the detected attributes of the detected object does not match the stored security pattern of the security object, maintaining the restriction to the restricted content.

7. The memory of claim 6, further comprising a matching threshold, wherein determining whether any of the detected attributes of the detected object matches the stored security pattern of the security object includes matching according to the threshold.

8. The memory of claim 6, further comprising, indicating that the detected object is the security object when any of the detected attributes of the detected object matches the stored security pattern of the security object.

9. The memory of claim 6, further comprising, indicating that the detected object is not the security object when any of the detected attributes of the detected object do not match the stored security pattern of the security object.

10. The memory of claim 6, wherein at least one attribute of the plurality of attributes of the security object is a position of the security object in relation to the display, wherein the security object is different than the detected object.

11. A system for controlling access to secured content in a computing system, the instructions comprising:

a processor; and

a computer readable storage medium having computer executable instructions stored thereon, wherein the computer executable instructions are executed by the process and perform actions, comprising;

registering a security pattern, wherein registering the security pattern includes;

detecting a security object proximal the display,

detecting physical attributes of the security object including a physical shape of the security object, a physical pattern on the security object, a position of the security object in relation to the display, and an angular orientation of the security object in relation to the display,

generating a list of the attributes of the security object in relation to the display,

displaying an attribute menu on the display, wherein the attribute menu displays selectable options that comprise the generated list of physical attributes for the security object that is proximal to the display, wherein the selectable options are used to determine attributes to include in the security pattern;

receiving a user selection of one or more of the selectable options from the displayed attribute menu,

generating the security pattern for granting access to the secured content based on the user selection from the attribute menu, and

registering and storing the security pattern in association with security credentials for a user;

detecting an object proximal the display;

detecting attributes of the detected object in relation to the display;

determining whether any of the detected attributes of the detected object matches the stored security pattern of the security object;

when the detected attributes of the detected object matches the stored security pattern of the security object, providing security credentials for a user to access to the restricted content; and

when the detected attributes of the detected object does not match the stored security pattern of the security object, maintaining the restriction to the restricted content.

12. The system of claim 11, further comprising a matching threshold, wherein determining whether any of the detected attributes of the detected object matches the stored security pattern of the security object includes matching according to the threshold.

13. The system of claim 11, further comprising, indicating that the detected object is the security object when any of the detected attributes of the detected object matches the stored security pattern of the security object.

14. The system of claim 11, further comprising, indicating that the detected object is not the security object when any of the detected attributes of the detected object do not match the stored security pattern of the security object.