Graphical image password authentication method

• US 8,959,619 B2
• Filed: 12/21/2011
• Issued: 02/17/2015
• Est. Priority Date: 12/21/2011
• Status: Active Grant

• Current Assignee: Fleet One LLC
• Original Assignee: Fleet One LLC
• Inventors: Overland, John, Roberts, Andy, Sanft, Ted
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US13/333,327
• Publication Number:
  US 20130167225A1
• Time in Patent Office: 1,154 Days
• Field of Search: 726/18
• US Class Current: 726/18
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A method for secure authentication is provided which includes having a user who wishes to gain access to a computer or computer network select from among a plurality of randomly displayed images, having different background colors, the correct image and background color which correspond to the user'"'"'s computer account. In one advantageous form, in addition to selecting the correct image, the user must first enter a username and password. In an alternative form, if a user is seeking access to a computer network by using a preapproved access point or computer having an approved IP address, a user is allowed to gain access to the computer network without being prompted to select a correct image.

Claims

1. A method for secure authentication, said method comprising:

creating a user account for a user using a computer processor, the user account comprising account information including a username, an image selected from a plurality of images, and a background color selected from a plurality of colors for the background color of the image;

allowing a user to access a computer via a computer user interface; and

a) presenting a plurality of random images having random background colors in random order using a computer processor on the user interface, at least two of the plurality of random images are the same image with a respective different background color, one of the plurality of random images is the image with background color associated with the user account;

b) receiving a selection from the user of one of the images presented on the computer user interface; and

c) authenticating the user as an authorized user using a computer processor if the user selected the image with background color corresponding to the user account;

d) determining an IP address for the user interface and authenticating the user without presenting the plurality of images and receiving a selection from the user of an image, if the IP address is an approved IP address.

2. The method of claim 1, wherein the creating a user account comprises:

presenting the user with a plurality of image categories;

receiving a selection from the user of one of the plurality of image categories;

presenting the user with a plurality of images corresponding to selected image category;

receiving a selection from the user of one of the plurality of images;

presenting the user with a plurality of background colors; and

receiving a selection from the user of one of the plurality of background colors.

3. The method of claim 1, wherein presenting the plurality of random images comprises presenting at least two images which are the same image with a respective different background color.

4. The method of claim 3, wherein presenting the plurality of random images in a random order comprises presenting the images in a random location on the user interface.

5. The method of claim 1, wherein receiving a selection from the user comprises receiving a selection from a user in the form of a mouse click or touchscreen selection of a location on the user interface corresponding to the image selected by the user.

6. The method of claim 1, further comprising receiving a username and password from the user via the computer user interface prior to presenting the user with the plurality of images, and wherein the account information includes the user password.

7. The method of claim 1, further comprising comparing the IP address of the user interface with a database of IP addresses and identifying the user interface as an authorized IP address if the IP address is in the database of IP addresses.

8. The method of claim 1, wherein authenticating the user allows the user to have access to a server via a computer network accessible via the user interface.

9. A method for secure authentication, said method comprising:

(a) creating a user account for a user using a computer processor, the user account comprising account information including a username, an image selected from a plurality of images, and a background color selected from a plurality of colors for the background color of the image;

(b) allowing a user to access a computer via a computer user interface;

(c) determining an IP address for the computer user interface using a computer processor;

(d) comparing the IP address with IP addresses in an IP address database using a computer processor;

wherein,

if the IP address is in the database of IP addresses,

(e) identifying the user interface as an authorized IP address and authenticating the user as an authorized user; and

if the IP address is not in the database of IP addresses the method further comprises;

(f) presenting a plurality of random images having random background colors in random order on the user interface, one of the plurality of random images is the image with the background color associated with the user account;

(g) receiving a selection from the user of one of the images presented on the user interface; and

(h) authenticating the user as an authorized user if the user selected the image with background color corresponding to the user account.

10. The method of claim 9, wherein the creating a user account comprises:

presenting the user with a plurality of image categories;

receiving a selection from the user of one of the plurality of image categories;

presenting the user with a plurality of images corresponding to selected image category;

receiving a selection from the user of one of the plurality of images;

presenting the user with a plurality of background colors; and

receiving a selection from the user of one of the plurality of background.

11. The method of claim 9, wherein presenting the plurality of random images comprises presenting at least two images which are the same image with a respective different background color.

12. The method of claim 11, wherein presenting the plurality of random images in a random order comprises presenting the images in a random location on the user interface.

13. The method of claim 9, wherein receiving a selection from the user comprises receiving a selection from a user in the form of a mouse click or touchscreen selection of a location on the user interface corresponding to the image selected by the user.

14. The method of claim 9, further comprising receiving a username and password from the user via the computer user interface prior to presenting the user with the plurality of images, and wherein the account information includes the user password.

15. A system having secure authentication, said system comprising:

a computer user interface;

computer memory; and

a computer processor adapted for executing computer instruction, said instruction comprising;

determining an IP address for the computer user interface using the computer processor;

comparing the IP address with IP addresses in an IP address database using a computer processor;

wherein,

if the IP address is in the database of IP addresses,

identifying the user interface as an authorized IP address and authenticating the user as an authorized user; and

if the IP address is not in the database of IP addresses the method further comprises;

presenting a plurality of random images having random background colors in random order on the user interface, one of the plurality of random images is the image with the background color associated with the user account;

receiving a selection from the user of one of the images presented on the user interface; and

authenticating the user as an authorized user if the user selected the image with background color corresponding to the user account.