Personal identification pairs

• US 8,601,552 B1
• Filed: 03/29/2010
• Issued: 12/03/2013
• Est. Priority Date: 03/29/2010
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Bowers, Kevin D., Juels, Ari
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US12/748,690
• Time in Patent Office: 1,345 Days
• Field of Search: 726/5, 726/7, 713/182
• US Class Current: 726/5
• CPC Class Codes: G06F 21/36 by graphic or iconic representation

Abstract

A method by which a computer system authenticates a user is provided. The method includes (a) displaying a plurality of unique elements to a user on a display device, (b) receiving a set of points corresponding to a sweeping motion performed by the user with respect to the display device, (c) determining a pair of unique elements of the plurality of unique elements defined by endpoints of the sweeping motion, and (d) authenticating the user only if the pair of unique elements is associated for authentication purposes with the user. An apparatus and computer program product for performing the method are also provided.

Claims

1. A method by which a computer system authenticates a user, the method comprising:

displaying a plurality of unique elements to a user on a touch-sensitive display device at an authentication time, including, for each unique element, displaying a unique color of that unique element on a distinct portion of the display device;

receiving, at the authentication time, a first set of points corresponding to a first sweeping motion performed by the user with respect to the display device, including;

receiving, at the authentication time, a first point defined by an initial location touched by a first touching implement of the user on the touch-sensitive display screen; and

receiving all subsequent points defined by all subsequent locations touched by the first touching implement of the user on the touch-sensitive display screen until the first touching implement of the user loses contact with the touch-sensitive display screen, the first point and the subsequent points defining the first sweeping motion;

determining a first pair of unique elements of the plurality of unique elements defined by endpoints of the first sweeping motion;

receiving a second set of points corresponding to a second simultaneous sweeping motion performed by the user with respect to the touch-sensitive display screen using a second touching implement distinct from the first touching implement;

determining a second pair of unique elements of the plurality of unique elements defined by endpoints of the second sweeping motion, the second pair of unique elements being distinct from the first pair of unique elements; and

authenticating the user only if both the first pair of unique elements and the second pair of unique elements are associated for authentication purposes with the user;

wherein the first touching implement is selected from a group consisting of a finger and a stylus and the second touching implement is selected from another group consisting of a finger and a stylus.

2. A method as in claim 1 wherein:

for each unique element, displaying the unique color of that unique element on the distinct portion of the display device, includes assigning the location of the particular distinct portion of the display device for each unique element at random at display time.

3. A method as in claim 2 wherein the method further comprises:

receiving a shuffle signal from the user;

re-displaying the plurality of unique elements to the user on the display device, wherein re-displaying the plurality of unique elements includes assigning the location of the particular distinct portion of the display device for each unique element at random at display time, the location of the plurality of unique elements varying after re-displaying the plurality of unique elements.

4. A method as in claim 1 wherein:

the plurality of unique elements includes exactly 16 unique elements, corresponding to 16 unique colors; and

the distinct portions of the display device for each unique element are arranged in a 4×

4 grid.

5. A method as in claim 1 wherein:

each unique element also includes a unique pattern, each unique pattern corresponding to the particular unique color of that unique element; and

displaying the plurality of unique elements to the user on the display device includes, for each unique element, displaying the unique pattern of that unique element on the distinct portion of the display device which displays the unique color of that unique element.

6. A method as in claim 1 wherein:

each unique element of the plurality of unique elements includes a unique pattern; and

displaying the plurality of unique elements to the user on the display device includes, for each unique element, displaying the unique pattern of that unique element on a distinct portion of the display device.

7. A method as in claim 1 wherein:

receiving the first set of points corresponding to the sweeping motion performed by the user with respect to the display device includes determining that the first set of points are substantially co-linear; and

determining the first pair of unique elements of the plurality of unique elements defined by endpoints of the first sweeping motion includes;

determining a first unique element of the plurality of unique elements which is displayed on a region of the screen containing a first endpoint of the first sweeping motion; and

determining a second unique element of the plurality element of unique elements which is displayed on a region of the screen containing a second endpoint of the first sweeping motion.

8. A method as in claim 1 wherein:

the computer system, in which the method is performed, is a single client-side device; and

displaying the plurality of unique elements to the user on the display device includes displaying the plurality of unique elements on a display screen local to the client-side device.

9. A method as in claim 1 wherein:

the computer system, in which the method is performed, includes a client-side device and a server device, the client-side device and the server device being distinct entities at remote locations connected over a network connection;

displaying the plurality of unique elements to the user on the display device includes displaying the plurality of unique elements on a display screen local to the client-side device;

receiving the first set of points corresponding to the first sweeping motion is performed by the client-side device; and

authenticating the user only if both the first pair of unique elements and the second pair of unique elements are associated with the user is performed by the server device.

10. A method as in claim 9 wherein

determining the first pair of unique elements is performed by the client-side device;

and

the method further comprises transmitting an identification of the first pair of unique elements from the client-side device to the server device across the network connection over a secure channel.

11. A method as in claim 9 wherein

the method further comprises transmitting an identification of the first set of points corresponding to the first sweeping motion from the client-side device to the server device across the network connection over a secure channel;

and

determining the first pair of unique elements is performed by the server device.

12. A method as in claim 1 wherein:

the computer system, in which the method is performed, is a single server device; and

displaying the plurality of unique elements to the user on the display device includes displaying the plurality of unique elements on a remote display screen across a network connection.

17. A method as in claim 1, wherein:

each unique element of the plurality of unique elements includes a visually unique aspect; and

displaying the plurality of unique elements to the user on the display device includes, for each unique element, displaying the visually unique aspect of that unique element on a distinct portion of the display device.

13. An apparatus comprising:

a display interface connected to a touch-sensitive display device;

a user interface connected to the touch-sensitive display device;

memory, storing a set of associations between a set of users and a set of pairs of unique elements; and

a controller, the controller configured to;

direct the display device, via the display interface, to display a plurality of unique elements to a user on the touch-sensitive display device at an authentication time by, for each unique element, displaying a unique color of that unique element on a distinct portion of the display device;

receive, from the user interface at the authentication time, a first set of points corresponding to a first sweeping motion performed by the user with respect to the display device by;

receiving, at the authentication time, a first point defined by an initial location touched by a first touching implement of the user on the touch-sensitive display screen; and

receiving all subsequent points defined by all subsequent locations touched by the first touching implement of the user on the touch-sensitive display screen until the first touching implement of the user loses contact with the touch-sensitive display screen, the first point and the subsequent points defining the first sweeping motion;

determine a first pair of unique elements of the plurality of unique elements defined by endpoints of the first sweeping motion;

receive, by the user interface, a second set of points corresponding to a second simultaneous sweeping motion performed by the user with respect to the touch-sensitive display screen using a second touching implement distinct from the first touching implement;

determine a second pair of unique elements of the plurality of unique elements defined by endpoints of the second sweeping motion, the second pair of unique elements being distinct from the first pair of unique elements; and

authenticate the user only if both the first pair of unique elements and the second pair of unique elements are associated with the user by one of the set of associations stored in memory;

wherein the first touching implement is selected from a group consisting of a finger and a stylus and the second touching implement is selected from another group consisting of a finger and a stylus.

14. An apparatus as in claim 13 wherein the touch-sensitive display device is a local device connected to the display interface and the user interface by a local connection.

15. An apparatus as in claim 13 wherein

the touch-sensitive display device is a remote device connected to the display interface and the user interface via a secure network connection.

16. A computer program product comprising a non-transitory computer-readable medium, the computer-readable medium storing instructions, which, when performed by a computerized device, cause the computerized device to:

display a plurality of unique elements to a user on a touch-sensitive display device at an authentication time, including, for each unique element, displaying a unique color of that unique element on a distinct portion of the display device;

receive, at the authentication time, a first set of points corresponding to a first sweeping motion performed by the user with respect to the display device, by;

receiving, at the authentication time, a first point defined by an initial location touched by a first touching implement of the user on the touch-sensitive display screen; and

receiving all subsequent points defined by all subsequent locations touched by the first touching implement of the user on the touch-sensitive display screen until the first touching implement of the user loses contact with the touch-sensitive display screen, the first point and the subsequent points defining the first sweeping motion;

determine a first pair of unique elements of the plurality of unique elements defined by endpoints of the first sweeping motion;

receive a second set of points corresponding to a second simultaneous sweeping motion performed by the user with respect to the touch-sensitive display screen using a second touching implement distinct from the first touching implement;

determine a second pair of unique elements of the plurality of unique elements defined by endpoints of the second sweeping motion, the second pair of unique elements being distinct from the first pair of unique elements; and

authenticate the user only if both the first pair of unique elements and the second pair of unique elements are associated with the user;

wherein the first touching implement is selected from a group consisting of a finger and a stylus and the second touching implement is selected from another group consisting of a finger and a stylus.