User credentials

• US 9,027,099 B1
• Filed: 06/10/2013
• Issued: 05/05/2015
• Est. Priority Date: 07/11/2012
• Status: Active Grant

• Current Assignee: Microstrategy Incorporated
• Original Assignee: Microstrategy Incorporated
• Inventors: Saylor, Michael J., Chen, Gang, Vazquez, Hector
• Primary Examiner(s): Yalew, Fikremariam A
• Application Number:
  US13/914,353
• Time in Patent Office: 694 Days
• Field of Search: None
• US Class Current: 726/6
• CPC Class Codes: G06F 16/58 Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually
• CPC Class Codes: G06F 16/5854 using shape and object relationship
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06K 7/10544 by scanning of the records by radiation in the optical part of the electromagnetic spectrum
• CPC Class Codes: G10L 17/00 Speaker identification or verification techniques
• CPC Class Codes: G10L 17/24 the user being prompted to utter a password or a predefined phrase
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

Obtaining and/or validating user credentials at client devices is described.

Claims

1. A non-transitory computer-readable medium storing instructions executable by one or more computers which, upon such execution, cause the one or more computers to perform operations comprising:

obtaining, at a client device, a first credential identifier associated with a user;

obtaining, at the client device, a time derived from a timing device of the client device;

determining a first at least one index value based on the first credential identifier and the time derived from the timing device of the client device;

based on the first at least one index value, obtaining a first current animated graphical representation for a first credential associated with the user;

outputting, to a display of the client device, the first current animated graphical representation in a manner that enables a credential authority to validate the first credential by visual inspection of the first current animated graphical representation for the credential;

obtaining, at the client device, a second credential identifier associated with the user;

determining a second at least one index value based on the second credential identifier and the time;

based on the second at least one index value, obtaining a second current animated graphical representation for a second credential associated with the user; and

outputting, to the display of the client device, the second current animated graphical representation in a manner that enables the credential authority to validate the second credential by visual inspection of the second current animated graphical representation for the second credential.

2. The computer-readable medium of claim 1, wherein obtaining the first current animated graphical representation comprises obtaining an HTML animation, a GIF file, an MPEG file, or a Flash file;

and

wherein outputting the first current animated graphical representation to the display of the client device in a manner that enables a credential authority to validate the credential by visual inspection of the first current animated graphical representation for the first and second credential comprises outputting the HTML animation, the GIF file, the MPEG file, or the Flash file to the display of the client device in a manner that enables a credential authority to validate the first credential by visual inspection of the HTML animation, the GIF file, the MPEG file, or the Flash file.

3. The computer-readable medium of claim 1,

wherein the at least one index value comprises one index value;

wherein based on the one index value, obtaining a first current animated graphical representation for a first credential associated with the user comprises selecting an animated graphical representation at the index value in a set of animated graphical representations for a credential, wherein the operations further comprise;

initializing a timer at the client device;

monitoring the timer during display of the first current animated graphical representation for the first credential; and

upon expiration of the timer, obtaining a next animated graphical representation for the first credential from the set of animated graphical representations for the first credential based on a predetermined progression; and

outputting the next animated graphical representation to the display of the client device in a manner that enables the credential authority to validate the first credential by visual inspection of the next animated graphical representation for the credential.

4. The computer-readable medium of claim 3 wherein the operations further comprise outputting, to the display of the client device, a graphical representation of the timer during display of the first current animated graphical representation for the first credential.

5. The computer-readable medium of claim 3, wherein the operations further comprise outputting, to the display of the client device, a previous animated graphical representation for the first credential during display of the first current animated graphical representation for the first credential.

6. The computer-readable medium of claim 3, wherein the operations further comprise outputting, to the display of the client device, a future animated graphical representation for the first credential during display of the first current animated graphical representation for the first credential.

7. The computer-readable medium of claim 1, wherein the operations further comprise:

obtaining an image of the user; and

outputting, to the display of the client device, the image of the user during display of the first current animated graphical representation for the first credential such that the credential authority can authenticate the user.

8. The computer-readable medium of claim 7, wherein obtaining the image of the user comprises retrieving, from a memory of the client device, the image of the user.

9. The computer-readable medium of claim 7, wherein obtaining the image of the user comprises:

querying a server via a network connection; and

receiving, from the server over the network connection, the image of the user.

10. The computer-readable medium of claim 1, wherein obtaining, at the client device, the first credential identifier associated with the user comprises:

establishing a secure connection with a server;

sending, to the server, an identifier associated with the user; and

receiving, from the server, the first credential identifier.

11. The computer-readable medium of claim 1, wherein outputting, to the display of the client device, the second current animated graphical representation for the second credential associated with the user in a manner that enables the credential authority to validate the second credential by visual inspection of the second current animated graphical representation for the second credential comprises:

concurrently outputting, to the display of the client device, the second current animated graphical representation for the second credential associated with the user in a manner that enables the credential authority to validate the second credential by visual inspection of the second current animated graphical representation for the second credential while outputting, to the display of the client device, the current animated graphical representation for the first credential associated with the user in a manner that enables the credential authority to validate the first credential by visual inspection of the current animated graphical representation for the first credential.

12. The computer-readable medium of claim 1, wherein obtaining a first current graphical representation of a first credential associated with the user comprises retrieving the first current graphical representation from a memory of the client device.

13. The computer-readable medium of claim 1, wherein obtaining a first current animated graphical representation for a first credential associated with the user comprises:

querying a server via a network connection; and

receiving, from the server over the network connection, the first current animated graphical representation for the first credential associated with the user.

14. The computer-readable medium of claim 1, wherein the operations further comprise:

initializing a timer at the client device;

monitoring the timer during display of the first current animated graphical representation for the first credential; and

upon expiration of the timer, obtaining, at the client device, a second time measured by the timing device;

updating the at least one index value based on the first credential identifier and the second time;

based on the updated at least one index value, obtaining a second animated graphical representation for the first credential associated with the user; and

outputting the second animated graphical representation for the first credential to the display of the client device in a manner that enables the credential authority to validate the first credential by visual inspection of the second animated graphical representation for the first credential.

15. A mobile device application that is stored in a non-transitory computer-readable storage medium and that includes executable instructions that, when executed by a processing device, cause the processing device to perform operations comprising:

obtaining, at a client device, a first credential identifier associated with a user;

obtaining, at the client device, a time derived from a timing device of the client device;

determining a first at least one index value based on the first credential identifier and the time derived from the timing device of the client device;

based on the first at least one index value, obtaining a first current animated graphical representation for a first credential associated with the user;

outputting, to a display of the client device, the first current animated graphical representation in a manner that enables a credential authority to validate the first credential by visual inspection of the first current animated graphical representation for the credential;

obtaining, at the client device, a second credential identifier associated with the user;

determining a second at least one index value based on the second credential identifier and the time;

based on the second at least one index value, obtaining a second current animated graphical representation for a second credential associated with the user; and

outputting, to the display of the client device, the second current animated graphical representation in a manner that enables the credential authority to validate the second credential by visual inspection of the second current animated graphical representation for the second credential.

16. A computer-implemented method of generating a user credential for validation comprising:

obtaining, at a client device, a first credential identifier associated with a user;

obtaining, at the client device, a time derived from a timing device of the client device;

determining a first at least one index value based on the first credential identifier and the time derived from the timing device of the client device;

based on the first at least one index value, obtaining a first current animated graphical representation for a first credential associated with the user;

outputting, to a display of the client device, the first current animated graphical representation in a manner that enables a credential authority to validate the first credential by visual inspection of the first current animated graphical representation for the credential;

obtaining, at the client device, a second credential identifier associated with the user;

determining a second at least one index value based on the second credential identifier and the time;

based on the second at least one index value, obtaining a second current animated graphical representation for a second credential associated with the user; and

outputting, to the display of the client device, the second current animated graphical representation in a manner that enables the credential authority to validate the second credential by visual inspection of the second current animated graphical representation for the second credential.

17. The method of claim 16,

wherein the at least one index value comprises one index value;

wherein based on the one index value, obtaining a first current animated graphical representation for a first credential associated with the user comprises selecting an animated graphical representation at the index value in a set of animated graphical representations for the first credential, wherein the operations further comprise;

initializing a timer at the client device;

monitoring the timer during display of the first current animated graphical representation for the credential; and

upon expiration of the timer, obtaining a next animated graphical representation for the first credential from the set of animated graphical representations for the first credential based on a predetermined progression; and

outputting the next animated graphical representation to the display of the client device in a manner that enables the credential authority to validate the first credential by visual inspection of the next animated graphical representation for the first credential.

18. The method of claim 16, further comprising:

synchronizing the timing device of the client device with a clock of at least one server;

synchronizing a timing device of a processing system with the clock of the at least one server, the processing system being associated with the credential authority;

obtaining, at the processing system, the first credential identifier associated with the user;

obtaining, at the processing system, a time derived from the timing device of the processing system;

determining, at the processing system, a second at least one index value based on the first credential identifier and the time derived from the timing device of the processing system;

based on the second at least one index value, obtaining, at the processing system, a second current animated graphical representation for the first credential associated with the user; and

outputting the second current animated graphical representation for the first credential to a display operatively coupled to the processing system, such that the second current animated graphical representation for the first credential associated with the user on the display operatively coupled to the processing system matches the first current animated graphical representation for the credential associated with the user on the display of the client device.

19. The method of claim 18,

wherein the user is a first user;

wherein the client device is a first client device; and

wherein the first credential identifier also is associated with a second user, the method further comprising;

synchronizing a timing device of a second client device with the clock of the at least one server, the second client device being associated with the second user;

obtaining, at the second client device, a credential identifier associated with the second user;

obtaining, at the second client device, a time derived from the timing device of the second client device;

determining, at the second client device, a third at least one index value based on the credential identifier associated with the second user and the time derived from the timing device of the second client device;

based on the third at least one index value, obtaining, at the second client device, a third current animated graphical representation for the credential associated with the second user; and

outputting the third current animated graphical representation to a display of the second client device, such that the third current animated graphical representation for the credential associated with the second user on the display of the second client device matches the second current animated graphical representation for the credential associated with the user on the display operatively coupled to the processing system.