Methods and systems for graphical image authentication

• US 8,850,519 B2
• Filed: 12/23/2010
• Issued: 09/30/2014
• Est. Priority Date: 05/24/2006
• Status: Active Grant

• Current Assignee: Confident Technologies, Inc.
• Sponsoring Entity: Confident Technologies, Inc.
• Inventors: Osborn, Steven L., Davis, Nicholas A., Sontag, James L., Norvell, Joel
• Primary Examiner(s): HERZOG, MADHURI R
• APPLICATION: US 20120011564A1
• Time in USPTO: 1377 Days
• Field of Search: 726 1- 8, 726 16- 21, 726 26- 30, 713168-170, 713182-185, 340 51- 586
• US Class Current: 726/2
• CPC Class Codes: G06F 21/36 : by graphic or iconic representation
• CPC Class Codes: H04L 9/3226 : using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

Systems and methods for providing authentication using an arrangement of dynamic graphical images. The graphical images can be arranged as a grid or matrix for presentation on a device display for authentication of a user. The kinds of graphical images can be derived from a designated authentication category and non-authenticating categories. A series of password elements corresponding to the graphical images can be displayed with the graphical images. The user may enter the series of one or more password elements corresponding to graphical images from the authentication category which combine to form a password entry. An authentication server can compare the password entry to an authentication password corresponding to the particular arrangement of dynamic graphical images. The selection of graphical images, their arrangement and their corresponding password elements, may dynamically change in between authentication processes.

Claims

1. A computerized system comprising:

a graphical output device;

a user input device capable of generating alphanumeric characters; and

a processor adapted to generate a grid of randomly selected images for display on the graphical output device and to assign a different randomly selected unique image identifier to each of the randomly selected images for display with the image on the graphical output device,

wherein the images are selected from a plurality of authenticating image categories, wherein the authenticating image categories are based on a common attribute, feature, theme, or characteristic of an object;

wherein at least one of the images further comprise a reference to a product or service sponsored by an advertiser,

wherein the processor is further adapted to receive a username and a password in conjunction with the images selected from the plurality of authenticating image categories,

wherein the grid of randomly selected images comprise at least one image from a pre-selected authenticating image category, wherein the pre-selected authenticating image category is initially pre-selected by the user, wherein the pre-selection occurs during enrollment, wherein the pre-selection allows the user to memorize the pre-selected authenticating image category;

wherein the authenticating image categories comprise a plurality of unique images; and

wherein the processor is adapted to receive at least one user input from the user input device corresponding to the unique image identifier to authenticate a user of the computerized system.

2. The system of claim 1 wherein the randomly selected images further comprise animation.

3. The system of claim 1 wherein the randomly selected images further comprise video.

4. A method for authenticating identity to a computer system, the method comprising:

receiving an account identifier;

displaying a randomly generated grid of randomly selected images, each image having at least one randomly generated unique image identifier associated therewith;

wherein at least one of the images is from a pre-selected authenticating image category corresponding to the account identifier, wherein the authenticating image category comprises a plurality of unique images, wherein the authenticating image category is based on a common attribute, feature, theme, or characteristic of an object, wherein at least one of the images further comprise a reference to a product or service sponsored by an advertiser;

wherein the authenticating image category is initially pre-selected by the user, wherein the pre-selection occurs during enrollment, wherein the pre-selection allows the user to memorize the authenticating image category;

receiving at least one randomly generated unique image identifier associated with the image from the pre-selected authenticating image category; and

authenticating identity based upon the received unique image identifier associated with the randomly selected image from the pre-selected authenticating image category.

5. The method of claim 4 further comprising receiving an authentication parameter corresponding to the account identifier.

6. The method of claim 5 wherein the authentication parameter comprises a password.

7. The method of claim 5 further comprising authenticating identity based upon the received unique image identifier and the authentication parameter.

8. The method of claim 4 wherein receiving at least one randomly generated unique image identifier further comprises receiving a plurality of unique image identifiers in a predetermined sequence.

9. The method of claim 4 further comprising superimposing each unique image identifier over at least a portion of the corresponding image.

10. The method of claim 4 wherein at least one of the randomly selected images comprises an advertisement.

11. A method for verifying identity of a plurality of users of a computer system, the method comprising:

each user pre-selecting an account identifier and at least one authenticating image category wherein the authenticating image category comprises a plurality of unique images;

wherein the authenticating image category is pre-selected by the user, wherein the pre-selection occurs during enrollment, wherein the pre-selection allows the user to memorize the authenticating image category, wherein the authenticating image category is based on a common attribute, feature, theme, or characteristic of an object, wherein at least one of the images further comprise a reference to a product or service sponsored by an advertiser;

generating a grid of randomly selected images when a user attempts to access the computer system, wherein at least one of the randomly selected images is from the at least one pre-selected authenticating image category and wherein each image corresponds to a unique randomly assigned image identifier;

receiving an input comprising at least one of the unique image identifiers;

comparing the at least one image category associated with the received at least one unique image identifier with the at least one authenticating image category initially pre-selected by the user; and

permitting the user to access the computer system when there is a match between the at least one image category associated with the at least one received unique image identifier and the at least one authenticating image category pre-selected by the user.

12. The method of claim 11 further comprising allowing at least one of the plurality of users to pre-select an authentication parameter corresponding to its account identifier, wherein the received input from the at least one of the plurality of users further comprises the authentication parameter, the method comprising:

permitting the user to access the computer system when there is a match between the at least one authenticating image category associated with the at least one received unique image identifier, the authenticating image category pre-selected by the user, and between the received authentication parameter and the authentication parameter pre-selected by the user.

13. The method of claim 12 wherein the authentication parameter comprises a password.

14. The method of claim 11 wherein a first user pre-selects a plurality of authenticating image categories in a predetermined sequence and wherein the received input comprises a plurality of unique image identifiers, the method further comprising:

permitting the first user to access the computer system when there is a match between the sequence of authenticating image categories associated with the sequence of received unique image identifiers and the sequence of authenticating image categories pre-selected by the user.

15. The method of claim 14 wherein a second user pre-selects an authentication parameter corresponding to its account identifier, wherein the received input from the second user further comprises the authentication parameter, the method comprising:

permitting the second user to access the computer system when there is a match between the at least one authenticating image category associated with the at least one received unique image identifier, the image category pre-selected by the second user, and between the received authentication parameter and the authentication parameter pre-selected by the second user.

16. The method of claim 14 wherein a second user pre-selects a plurality of authenticating image categories in a predetermined sequence and length different from the predetermined plurality of pre-selected authenticating image categories of the first user.

17. The method of claim 11 wherein at least one of the randomly selected images comprises an advertisement.