Establishing a secure channel with a human user

• US 8,220,036 B2
• Filed: 12/12/2006
• Issued: 07/10/2012
• Est. Priority Date: 04/25/2002
• Status: Expired due to Fees

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Pinkas, Binyamin, Haber, Stuart A., Tarjan, Robert E., Sander, Tomas
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US11/609,822
• Publication Number:
  US 20080046986A1
• Time in Patent Office: 2,037 Days
• Field of Search: None
• US Class Current: 726/7
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07C 9/33 by means of a password
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A method of establishing a secure channel between a human user and a computer application is described. A secret unique identifier (“PIN”) is shared between a user and an application. When the user makes a request that involves utilizing the PIN for authentication purposes, the application renders a randomly selected identifier. The randomly selected identifier is in a format that is recognizable to a human but is not readily recognizable by an automated agent. The randomly selected identifier is then presented to the human user. The user identifies the relationship between the randomly selected identifier and the PIN. If the user'"'"'s input reflects the fact that the user knows the PIN, then the user is authenticated.

Claims

1. A method performed by a computer system including a processor and a memory communicatively coupled to the processor, the memory storing instructions that, when executed by the processor, cause the computer system to perform the method, the method comprising:

rendering a first identifier to a user, the first identifier comprising a plurality of characters, wherein an offset between at least one character of the first identifier and a corresponding character of a secret identifier is negative;

receiving an input from the user, the input indicating a plurality of offsets between the characters of the first identifier and corresponding characters of the secret identifier;

determining, based on the input and the first identifier, whether the user demonstrates knowledge of the secret identifier; and

authenticating or not authenticating the user based upon the outcome of said determining step.

2. The method of claim 1, wherein the first identifier is rendered as an image generated by a Reverse Turing Test.

3. The method of claim 1, wherein the first identifier is rendered as an image.

4. The method of claim 1, wherein the secret identifier is a personal identification number.

5. A method performed by a computer system including a processor and a memory communicatively coupled to the processor, the memory storing instructions that, when executed by the processor, cause the computer system to perform the method, the method comprising:

displaying a first identifier to a user, the first identifier comprising a plurality of characters, wherein an offset between at least one character of the first identifier and a corresponding character of a secret identifier is negative;

receiving an input from the user, the input indicating a plurality of offsets between the characters of the first identifier and corresponding characters of the second identifier; and

determining whether the input and the first identifier are related to the second identifier in a predefined manner.

6. A system comprising;

a display;

a memory for storing information concerning a secret identifier; and

a processor configured for executing instructions stored in the memory, the instructions, when executed by the processor, being configured to cause the processor to;

display a first identifier to a user, the first identifier comprising a plurality of characters, wherein an offset between at least one character of the first identifier and a corresponding character of a secret identifier is negative,

receive an input from the user, the input indicating a plurality of offsets between the characters of the first identifier and corresponding characters of the secret identifier,

make a first determination, based on the input, whether the user demonstrates knowledge of the secret identifier, and

determine whether to authenticate the user based upon the first determination.

7. The system of claim 6, wherein the input represents a relationship between the first identifier and the secret identifier.

8. A non-transitory computer-readable storage medium comprising program code, the program code being operable, when executed by a computer system comprising a processor, to cause the system to perform steps comprising:

rendering a first identifier to a user, the first identifier comprising a plurality of characters, wherein an offset between at least one character of the first identifier and a corresponding character of a secret identifier is negative;

receiving an input from the user, the input indicating a plurality of offsets between the characters of the first identifier and corresponding characters of the secret identifier;

determining, based on the input and the first identifier, whether the user demonstrates knowledge of the secret identifier; and

authenticating or not authenticating the user based upon the outcome of said determining step.

9. The computer readable medium of claim 8, wherein the first identifier is rendered as an image generated by a Reverse Turing Test.

10. The computer readable medium of claim 8, wherein the first identifier is rendered as an image.

11. The computer readable medium of claim 8, wherein the secret identifier is a personal identification number.

12. A non-transitory computer-readable storage medium comprising program code, the program code being operable, when executed by a computer system comprising a processor, to cause the system to perform steps comprising:

displaying a first identifier to a user, the first identifier comprising a plurality of characters, wherein an offset between at least one character of the first identifier and a corresponding character of a secret identifier is negative;

receiving an input from the user, the input indicating a plurality of offsets between the characters of the first identifier and corresponding characters of the second identifier; and

determining whether the input and the first identifier are related to the second identifier in a predefined manner.