Computer implemented system and method for providing challenge-response solutions to authenticate a user

• US 8,650,627 B2
• Filed: 03/01/2012
• Issued: 02/11/2014
• Est. Priority Date: 12/28/2011
• Status: Active Grant

• Current Assignee: TATA Consultancy Services Limited (Tata Sons Pvt Ltd.)
• Original Assignee: TATA Consultancy Services Limited (Tata Sons Pvt Ltd.)
• Inventors: Bidare, Prasanna
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): RUPRECHT, CHRISTOPHER S
• Application Number:
  US13/409,986
• Publication Number:
  US 20130174240A1
• Time in Patent Office: 712 Days
• Field of Search: None
• US Class Current: 726/7
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system and method for providing challenge-response solutions to authenticate a user have been provided. The system includes web server comprising interlinking means adapted to interlink a plurality of images with unique index values such that each of the images has a unique index value. The web server includes registration means adapted to enable users to select at least two interlinked images for the purpose of registration. The web server includes challenge generation means adapted to generate, transmit an authentication challenge of the form of one-time equation. The web server, prior to transmitting the one-time equation, computes the value of the equation based on at least the sequence specified by the user. The web server compares the value calculated by the user with the value calculated prior to transmission and authenticates the user only in the event that said value calculated by the user is equivalent to the stored value.

Claims

1. A computer implemented system for providing challenge-response solutions to authenticate a user, said system comprising:

a web server configured to;

interlink a plurality of images with unique index values such that each of said images has a corresponding unique index value;

enable said user to select at least two interlinked images for the purpose of registration;

generate at least two image matrices having interlinked images, wherein each of said image matrices include at least one interlinked image selected by said user, arrange the unique index values corresponding to said interlinked images in the form of matrices and generate index-value matrices, and transmit said image matrices and index-value matrices; and

enable said user to specify the sequence in which said image matrices and said index-value matrices are to be traversed, said sequence selected from the group of sequences consisting of clockwise sequence, anti-clockwise sequence, clockwise Z sequence, and anti-clockwise Z sequence;

generate and transmit an authentication challenge in the form of a one-time equation;

compute the value of said one-time equation based on the sequence specified by said user, the interlinked images selected by the user during registration, and the corresponding unique index-values;

store the value of said one-time equation in a memory;

prompt said user to calculate a value of said one-time equation by using said image matrices, said index-value matrices, and said sequence;

receive the value calculated by said user;

compare the value stored in said memory with the value calculated by said user; and

authenticate said user in the event that the value calculated by said user is equivalent to the value stored in said memory.

2. The system as claimed in claim 1, wherein said web server cooperates with a client device, said client device configured to:

receive and display at least one of said one-time equation, said image matrices, and said index value matrices, at least temporarily; and

transmit to said web server the value calculated by said user.

3. The system as claimed in claim 1, wherein said web server is further configured to:

store in a repository at least one of profile information corresponding to said users, a set of alphanumeric characters, a set of images derived out of dot matrix combinations, a plurality of numbers, and questions to which said numbers serve as answers, wherein the plurality of images and the unique index values correspond to said images.

4. The system as claimed in claim 3, wherein said web server is further configured to:

enable said user to select for the purpose of registration at least one of a plurality of alphanumeric characters from said set of alphanumeric characters and a plurality of images from said set of images derived out of dot matrix combinations, wherein said set of alphanumeric characters and said set of images are arranged in the form of respective 5×

7 dot matrices;

track the order in which at least one of said plurality of alphanumeric characters and said plurality of images are selected by said user; and

store the order in which said user selects at least one of said plurality of alphanumeric characters and said plurality of images in said repository.

5. The system as claimed in claim 4, wherein said web server is further configured to:

generate and transmit an authentication challenge in the form of a secondary matrix only in the event that said user selects at least one of said set of alphanumeric characters and said set of images derived out of dot matrix combinations for the purpose of registration, wherein said secondary matrix includes entries selected from the group of entries consisting of numerals, alphabets, and said set of images derived out of dot matrix combinations; and

instruct said user to select the entries of said secondary matrix in the same order as that in which at least one of said plurality of alphanumeric characters and said plurality of images were selected from said 5×

7 dot matrices during registration.

6. The system as claimed in claim 5, wherein said web server is further configured to compare the order in which said user selects the entries from said secondary matrix with the order in which at least one of said plurality of alphanumeric characters and said plurality of images were selected from said 5×

7 dot matrices during registration.

7. The system as claimed in claim 6, wherein said web server is further configured to authenticate said user only in the event that the order in which said user selects the entries from said secondary matrix is the same as the order in which at least one of said plurality of alphanumeric characters and said plurality of images were selected from said 5×

7 dot matrices during registration.

8. The system as claimed in claim 1, wherein said web server is further configured to:

present said user with a plurality of questions;

enable said user to input a plurality of personal details in the form of numbers as answers to said questions; and

store said numbers along with the corresponding questions in a repository.

9. The system as claimed in claim 8, wherein said web server is further configured to:

generate a second one-time equation and select at least one number and the corresponding question from said repository;

compute the value of said second one-time equation based on said number;

store the computed value in said memory;

present said second one-time equation and said selected question to said user;

prompt said user to calculate the value of said second one-time equation by using the number which serves as the answer to the question;

receive the value calculated by said user;

compare the value stored in said memory with the value calculated by said user; and

authenticate said user in the event that the stored value is equivalent to the value calculated by said user.

10. A computer implemented method for providing challenge-response solutions to authenticate a user, said method including the following steps:

interlinking a plurality of images with unique index values such that each of said images has a corresponding unique index value;

enabling said user to select at least two interlinked images for the purpose of registration;

generating at least two image matrices having interlinked images, wherein each of said image matrices include at least one interlinked image selected by said user;

arranging said unique index values corresponding to said interlinked images in the form of matrices and generating index-value matrices;

enabling said user to specify a sequence in which said image matrices and said index-value matrices are to be traversed;

generating and transmitting an authentication challenge in the form of a one-time equation;

computing at a web server the value of said one-time equation based on at least said interlinked images selected by said user during registration, said corresponding index values, and said sequence specified by said user, and storing the computed value at said web server;

displaying said one-time equation, said image matrices, and said index value matrices, at least temporarily, on a client device;

prompting said user to calculate the value of said one-time equation by using said image matrices, said index-value matrices, and said sequence;

receiving at said web server the value calculated by said user; and

comparing the value stored at said web server with the value calculated by said user; and

authenticating said user only in the event that the value calculated by said user is equivalent to the value stored at said web server.

11. The computer implemented method as claimed in claim 10, wherein the method further includes the following steps:

arranging a set of alphanumeric characters and a set of images derived out of dot matrix combinations in the form of 5×

7 dot matrices, respectively;

enabling said user to select at least one of said set of alphanumeric characters and said set of images derived out of dot matrix combinations for the purpose of registration;

prompting said user to select for the purpose of registration at least one of a plurality of alphanumeric characters from said set of alphanumeric characters and a plurality of images from said set of images derived out of dot matrix combinations;

tracking the order in which at least one of said plurality of alphanumeric characters from said set of alphanumeric characters and said plurality of images from said set of images derived out of dot matrix combinations are selected by said user during registration;

storing the order in which said user selects at least one of said plurality of alphanumeric characters from said set of alphanumeric characters and said plurality of images from said set of images derived out of dot matrix combinations;

generating and transmitting an authentication challenge in the form of a secondary matrix having entries selected from the group of entries consisting of numerals, alphabets, and said set of images derived out of dot matrix combinations;

instructing said user to select the entries of said secondary matrix in the same order as that in which at least one of said plurality of alphanumeric characters and said plurality of images were selected during registration;

comparing the order in which said user selects the entries in the secondary matrix with the order in which at least one of said plurality of alphanumeric characters and said plurality of images were selected during registration; and

authenticating said user if the order in which said user selects the entries from said secondary matrix is same as the order in which at least one of said plurality of alphanumeric characters and said plurality of images were selected from said 5×

7 dot matrices during registration.

12. The computer implemented method as claimed in claim 10, wherein the method further includes the following steps:

presenting said user with a plurality of questions;

enabling said user to input a plurality of personal details in the form of numbers as answers to said questions;

storing said numbers along with the corresponding questions in a repository;

generating a second one-time equation and selecting at least one number and the corresponding question from said repository;

computing at said web server the value of said second one-time equation based on said number;

storing the computed value at said web server;

presenting said second one-time equation and said selected question to said user;

prompting said user to calculate the value of said second one-time equation by using the number which serves as the answer to the question;

receiving at said web server the value calculated by said user;

comparing the value stored at said web server with the value calculated by said user; and

authenticating said user in the event that the stored value is equivalent to the value calculated by said user.

13. A non-transitory computer-readable medium including a computer program for instructing a computer to perform the method of providing challenge-response solutions to authenticate a user, said computer program configured to:

interlink a plurality of images with unique index values such that each of said plurality of images has a corresponding unique index value;

enable said user to select at least two interlinked images for the purpose of registration;

generate at least two image matrices having interlinked images, wherein each of said image matrices include at least one interlinked image selected by said user;

arrange said unique index values corresponding to said interlinked images in the form of matrices and generating index-value matrices;

enable said user to specify a sequence in which said image matrices and said index-value matrices are to be traversed;

generate and transmit an authentication challenge in the form of a one-time equation;

compute the value of said one-time equation based on at least said interlinked images selected by said user during registration, said corresponding index values, and said sequence specified by said user, and store the computed value at said web server;

display said one-time equation, said image matrices, and said index value matrices, at least temporarily, on a client device;

prompt said user to calculate the value of said one-time equation by using said image matrices, said index-value matrices, and said sequence;

receive at said web server the value calculated by said user; and

compare the value stored at said web server with the value calculated by said user; and

authenticate said user only in the event that the value calculated by said user is equivalent to the value stored at said web server.

14. The non-transitory computer-readable medium including a computer program as claimed in claim 13, wherein said computer program is further configured to:

arrange a set of alphanumeric characters and a set of images derived out of dot matrix combinations in the form of 5×

7 dot matrices, respectively;

enable said user to select at least one of said set of alphanumeric characters and said set of images derived out of dot matrix combinations for the purpose of registration;

prompt said user to select for the purpose of registration at least one of a plurality of alphanumeric characters from said set of alphanumeric characters and a plurality of images from said set of images derived out of dot matrix combinations;

track the order in which at least one of said plurality of alphanumeric characters from said set of alphanumeric characters and said plurality of images from said set of images derived out of dot matrix combinations are selected by said user during registration;

store the order in which said user selects at least one of said plurality of alphanumeric characters from said set of alphanumeric characters and said plurality of images from said set of images derived out of dot matrix combinations;

generate and transmit an authentication challenge in the form of a secondary matrix having entries selected from the group of entries consisting of numerals, alphabets, and said set of images derived out of dot matrix combinations;

instruct said user to select the entries of said secondary matrix in the same order as that in which at least one of said plurality of alphanumeric characters and said plurality of images were selected during registration;

compare the order in which said user selects the entries in the secondary matrix with the order in which at least one of said plurality of alphanumeric characters and said plurality of images were selected during registration; and

authenticate said user if the order in which said user selects the entries from said secondary matrix is same as the order in which at least one of said plurality of alphanumeric characters and said plurality of images were selected from said 5×

7 dot matrices during registration.

15. The non-transitory computer-readable medium including a computer program as claimed in claim 13, wherein said computer program is further configured to:

present said user with a plurality of questions;

enable said user to input a plurality of personal details in the form of numbers as answers to said questions;

store said numbers along with the corresponding questions in a repository;

generate a second one-time equation and select at least one number and the corresponding question from said repository;

compute at said web server the value of said second one-time equation based on said number;

store the computed value at said web server;

present said second one-time equation and said selected question to said user;

prompt said user to calculate the value of said second one-time equation by using the number which serves as the answer to the question;

receive at said web server the value calculated by said user;

compare the value stored at said web server with the value calculated by said user; and

authenticate said user in the event that the stored value is equivalent to the value calculated by said user.