Graphical image authentication and security system

• US 8,732,477 B2
• Filed: 10/07/2008
• Issued: 05/20/2014
• Est. Priority Date: 05/24/2006
• Status: Active Grant

• Current Assignee: Defenders of the American Dream LLC
• Original Assignee: Confident Technologies, Inc.
• Inventors: Osborn, Steven L., Davis, Nicholas A., Sontag, James L., Norvell, Joel
• Primary Examiner(s): HOFFMAN, BRANDON S
• Application Number:
  US12/247,209
• Publication Number:
  US 20090077653A1
• Time in Patent Office: 2,051 Days
• Field of Search: None
• US Class Current: 713/182
• CPC Class Codes: G06F 21/36 by graphic or iconic representation

Abstract

A method and system for protection of and secure access to a computer system or computer network from a portable device. The method includes the steps of receiving a first login account identifier, such as a user name from a user in communication with the computer system or network. A determination is made if the user is recognized and enrolled from the first login account identifier. If the user is recognized, a series of randomly generated visual images is displayed including one visual image from an image category which has been pre-selected by the user upon enrollment. An image category identifier is randomly assigned to each visual image in the series. An image category identifier is entered and received. If the login account identifier and the image category are validated, access is permitted to the computer system or network from the portable device.

Claims

1. A method for authenticating identity to a computer system via a portable device, which method comprises:

receiving a first login account identifier from a user using a portable device in communication with said computer system;

determining if said user is recognized and enrolled from said first login account identifier;

generating and displaying a randomly generated series of images on the portable device based on categories;

wherein the images have a randomly assigned image identifier and at least one of the images is from a user-selected category of images, wherein the user-selected category of images is memorized by the user;

receiving the image identifier assigned to the image from the user-selected category; and

authenticating identity to said computer system upon validation of the received image identifier.

2. A method for authenticating identity to a computer system as set forth in claim 1 wherein said user-selected image categories are pre-selected by said user or assigned during an enrollment process.

3. A method for authenticating identity to a computer system as set forth in claim 1 wherein said first login account identifier is a username.

4. A method for authenticating identity to a computer system as set forth in claim 1 wherein said at least one image identifier is generated by the user according to one or more image categories pre-selected by said user during an enrollment process.

5. A method for authenticating identity to a computer system as set forth in claim 1 wherein said images include images of products or services sponsored by advertisers.

6. A method for authenticating identity to a computer system as set forth in claim 1 wherein said images embody advertising information and include a reference to additional information.

7. A method for authenticating identity to a computer system as set forth in claim 1 wherein at least one image from said image category is selected or generated.

8. A method for authenticating identity to a computer system as set forth in claim 1 wherein said image is randomly generated.

9. A method for authenticating identity to a computer system as set forth in claim 1 wherein the positions of said image categories within said series are randomly determined.

10. A method for authenticating identity to a computer system as set forth in claim 1 wherein the size of said series is variable.

11. A method for authenticating identity to a computer system as set forth in claim 1 wherein the images include animated images, videos, or other multimedia.

12. A method for authenticating identity to a computer system as set forth in claim 1 further comprising receiving a second account identifier from said portable device in communication with said computer system.

13. A method for authenticating identity to a computer system as set forth in claim 12 wherein said second account identifier is a password.

14. A method for authenticating identity to a computer system as set forth in claim 1 wherein said at least one image identifier requires multiple image identifiers.

15. A method for authenticating identity to a computer system as set forth in claim 1 wherein said portable device comprises a hand-held internet access device.

16. A method for authenticating identity to a computer system as set forth in claim 1 wherein the series of images scrolls on a display screen of the portable device.

17. A computerized system comprising:

a portable device comprising;

a graphical output device; and

a user input device capable of generating alphanumeric characters; and

a processor adapted to generate a series of randomly selected images for display on the graphical output device and to assign a different randomly selected unique image identifier to each of the randomly selected images for display with the image on the graphical output device, wherein the images are selected from a plurality of categories, wherein the plurality of categories comprises an authenticating category of images pre-selected and memorized by a user; and

wherein the processor is adapted to receive at least one alphanumeric character from the user input device corresponding to the unique image identifier to authenticate a user of the computerized system.

18. The system of claim 17 wherein the series of randomly selected images comprise at least one image from a pre-selected image category.

19. The system of claim 17 wherein the series of randomly selected images comprises at least one image of a product or service.

20. The system of claim 17 wherein at least one of the images may further comprise a reference to additional information.

21. The system of claim 17 wherein the randomly selected images may further comprise animation.

22. The system of claim 17 wherein the randomly selected images may further comprise video.

23. The system of claim 17 wherein the processor is further adapted to place at least one of the images on the series in accordance with a predefined occurrence parameter.

24. The system of claim 17 wherein the series of randomly selected images comprises at least four images.

25. The system of claim 17 wherein the randomly selected images are displayed on the graphical output device in the form of tiles.

26. The system of claim 17 wherein each unique image identifier is superimposed over at least a portion of the corresponding image.

27. The system of claim 17 wherein the portable device comprises a phone.

28. The system of claim 17 wherein the portable device comprises a handheld internet access device.

29. The system of claim 17 wherein the randomly selected images are scrolled on the graphical output device.

30. A method for authenticating identity to a computer system, the method comprising:

receiving an account identifier;

displaying a randomly generated series of randomly selected images, each image having at least one randomly generated unique image identifier associated therewith;

wherein at least one of the images is from a pre-selected category selected and memorized by a user and corresponding to the account identifier;

receiving at least one randomly generated unique image identifier associated with the image from the pre-selected image category; and

authenticating identity based upon the received unique image identifier associated with the randomly selected image from the pre-selected category.

31. The method of claim 30 further comprising receiving an authentication parameter corresponding to the account identifier.

32. The method of claim 31 wherein the authentication parameter comprises a password.

33. The method of claim 31 further comprising authenticating identity based upon the received unique image identifier and the authentication parameter.

34. The method of claim 30 wherein receiving at least one randomly generated unique image identifier further comprises receiving a plurality of unique image identifiers in a predetermined sequence.

35. The method of claim 30 further comprising placing at least one of the plurality of images on the series in accordance with a predefined occurrence parameter.

36. The method of claim 30 further comprising superimposing each unique image identifier over at least a portion of the corresponding image.

37. The method of claim 30 wherein at least one of the randomly selected images comprises an advertisement.

38. The method of claim 30 wherein the step of displaying a randomly generated series of randomly selected images comprises the step of scrolling the series of randomly selected images.

39. A computer implemented authentication protocol comprising:

pre-selecting at least one image category and an account identifier for authentication;

displaying a series of randomly selected images on a portable device, each image having a randomly selected unique image identifier associated therewith;

wherein at least one of the images displayed on the series corresponds to the at least one pre-selected image category, the pre-selected image category being memorized by a user seeking authentication;

receiving at least one unique image identifier associated with at least one of the images displayed on the series; and

verifying the received unique image identifier corresponds to the at least one pre-selected image category associated with the account identifier.

40. The computer implemented authentication protocol of claim 39 further comprising pre-selecting an authentication parameter corresponding to the account identifier.

41. The computer implemented authentication protocol of claim 40 further comprising receiving the authentication parameter and verifying the authentication parameter corresponds to the account identifier.

42. The computer implemented authentication protocol of claim 39 wherein the series of randomly selected images comprises at least four images.

43. The computer implemented authentication protocol of claim 39 wherein the at least one unique image identifier comprises at least one alphanumeric character.

44. The computer implemented authentication protocol of claim 39 wherein at least one of the randomly selected images comprises an advertisement.

45. The computer implemented authentication protocol of claim 39 wherein the step of displaying a randomly generated series of randomly selected images comprises the step of scrolling the series of randomly selected images.

46. A method for verifying a claimed identity of at least one user of a portable device, the method comprising:

verifying a received unique randomly assigned image identifier corresponding with a pre-selected image category, wherein the pre-selected image category and an account identifier are previously selected and memorized by the at least one user and stored in a computer system; and

permitting access to the computer system when there is a match between the received unique randomly assigned image identifier corresponding to the image from the pre-selected image category to the account identifier.

47. A method for verifying identity of a plurality of users of a computer system utilizing a plurality of portable devices, the method comprising:

each user pre-selecting an account identifier and at least one image category, wherein the at least one image category is memorized by each user;

generating a series of randomly selected images on at least one of the plurality of portable devices when a user attempts to access the computer system, wherein at least one of the randomly selected images is from the at least one pre-selected image category and wherein each image corresponds to a unique randomly assigned image identifier;

receiving an input comprising at least one of the unique randomly assigned image identifiers;

comparing the at least one image category associated with the received at least one unique randomly assigned image identifier with the account identifier of the user attempting to access the computer system; and

permitting the user to access the computer system when there is a match between the at least one image category associated with the at least one received unique randomly assigned image identifier and the at least one image category pre-selected by the user.

48. The method of claim 47 further comprising allowing at least one of the plurality of users to pre-select an authentication parameter corresponding to its account identifier, wherein the received input from the at least one of the plurality of users further comprises the authentication parameter, the method comprising:

permitting the user to access the computer system when there is a match between the at least one image category associated with the at least one received unique randomly assigned image identifier, the image category pre-selected by the user, and between the received authentication parameter and the authentication parameter pre-selected by the user.

49. The method of claim 47 wherein the authentication parameter comprises a password.

50. The method of claim 47 wherein a first user pre-selects a plurality of image categories in a predetermined sequence and wherein the received input comprises a plurality of unique randomly assigned image identifiers, the method further comprising:

permitting the first user to access the computer system when there is a match between the sequence of image categories associated with the sequence of received unique randomly assigned image identifiers and the sequence of image categories pre-selected by the user.

51. The method of claim 50 wherein a second user pre-selects an authentication parameter corresponding to its account identifier, wherein the received input from the second user further comprises the authentication parameter, the method comprising:

permitting the second user to access the computer system when there is a match between the at least one image category associated with the at least one received unique randomly assigned image identifier, the image category pre-selected by the second user, and between the received authentication parameter and the authentication parameter pre-selected by the second user.

52. The method of claim 50 wherein a second user may pre-select a plurality of image categories in a predetermined sequence and length different from the predetermined plurality of pre-selected image categories of the first user.

53. The method of claim 47 wherein at least one of the randomly selected images comprises an advertisement.

54. The method of claim 47 wherein the step of displaying a randomly generated series of randomly selected images on at least one of the plurality of portable devices comprises the step of scrolling the series of randomly selected images.

55. The method of claim 47 wherein the portable device comprises a hand-held internet access device.