Method and system for image-based user authentication

• US 8,392,975 B1
• Filed: 06/27/2008
• Issued: 03/05/2013
• Est. Priority Date: 05/29/2008
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Raghunath, Mandayam Thondanur
• Primary Examiner(s): KOSOWSKI, CAROLYN M
• Application Number:
  US12/163,696
• Time in Patent Office: 1,712 Days
• Field of Search: 726/7
• US Class Current: 726/7
• CPC Class Codes: G06F 16/58 Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually
• CPC Class Codes: G06F 21/36 by graphic or iconic representation

Abstract

Some embodiments provide a system that authenticates a user. During operation, the system obtains an identifier for the user from an identification card associated with the user and displays a set of images to the user. Next, the system receives an image sequence comprising a sequence of images selected by the user from the set of images. Finally, the system authenticates the user based on the identifier and the image sequence.

Claims

1. A method for authenticating a user, comprising in one or more computer systems:

during a user authentication operation, receiving a user identifier input that comprises an identifier for a user;

displaying a set of images to the user;

generating a mapping function that determines a correlation between each image of the set of images and at least one character, wherein the mapping function is generated according to the identifier for the user and is different from a mapping function generated according to a different identifier for another user;

receiving an image sequence comprising a sequence of images selected by the user from the set of images; and

authenticating the user based on the identifier and the image sequence.

2. The method of claim 1, wherein receiving a user identifier input further comprises:

capturing a visual representation of an identification card associated with the user, and

processing the visual representation to obtain the user identifier.

3. The method of claim 2, wherein the visual representation is processed using at least one of:

a barcode in the visual representation; and

optical character recognition (OCR) of the visual representation.

4. The method of claim 2, wherein the visual representation of the identification card is captured using a webcam.

5. The method of claim 2, wherein the identification card is associated with at least one of an organization, a financial institution, and a government.

6. A system for authenticating a user, comprising:

a computer system configured to perform the operations of;

a user identification module configured to, during a user authentication operation, receive a user identifier input that comprises an identifier for a user;

a password module configured to;

display a set of images to the user;

generate, a mapping function that determines a correlation between each image of the set of images and at least one character, wherein the map function is generated according to the identifier for the user and is different from a mapping function generated according to a different identifier for another user; and

receive an image sequence comprising a sequence of images selected by the user from the set of images; and

an authentication manager configured to authenticate the user based on the identifier and the image sequence.

7. The system of claim 6, wherein the user identification module is further configured to:

obtain a visual representation of an identification card associated with the user, and

process the visual representation to obtain the user identifier.

8. The system of claim 7, wherein the visual representation is processed using at least one of a barcode in the visual representation and optical character recognition (OCR) of the visual representation.

9. The system of claim 7, further comprising:

a webcam configured to capture the visual representation of the identification card.

10. The system of claim 7, wherein the identification card is associated with at least one of an organization, a financial institution, and a government.

11. A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for authenticating a user, the method comprising:

during a user authentication operation, receiving a user identifier input that comprises an identifier for a user;

displaying a set of images to the user;

generating a mapping function that determines a correlation between each image of the set of images and at least one character, wherein the mapping function is generated according to the identifier for the user and is different from a mapping function generated according to a different identifier for another user;

receiving an image sequence comprising a sequence of images selected by the user from the set of images; and

authenticating the user based on the identifier and the image sequence.

12. The computer-readable storage medium of claim 11, wherein receiving a user identifier input further comprises:

capturing a visual representation of an identification card associated with the user, and

processing the visual representation to obtain the user identifier.

13. The computer-readable storage medium of claim 12, wherein the visual representation is processed using at least one of a barcode in the visual representation and optical character recognition (OCR) of the visual representation.

14. The computer-readable storage medium of claim 12, wherein the visual representation of the identification card is captured using a webcam.

15. The computer-readable storage medium of claim 12, wherein the identification card is associated with at least one of an organization, a financial institution, and a government.