Method of using text and picture formatting options as part of credentials for user authentication, as a part of electronic signature and as a part of challenge for user verification

• US 9,536,069 B1
• Filed: 08/28/2015
• Issued: 01/03/2017
• Est. Priority Date: 08/28/2015
• Status: Active Grant

• Current Assignee: Dhavalkumar Shah
• Original Assignee: Dhavalkumar Shah
• Inventors: Shah, Dhavalkumar, Mehta, Nehal
• Primary Examiner(s): Turchen, James
• Application Number:
  US14/839,162
• Time in Patent Office: 494 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 40/103 Formatting, i.e. changing of presentation of documents automatic justification G06F40/189; automatic line break hyphenation G06F40/191
• CPC Class Codes: G06V 40/30 Writer recognition; Reading and verifying signatures
• CPC Class Codes: G06V 40/33 based only on signature image, e.g. static signature recognition
• CPC Class Codes: G06V 40/37 based only on signature signals such as velocity or pressure, e.g. dynamic signature recognition
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

We propose a method that uses formatting options of Font, Font Size, Font Color, Shading, Font Style, Font Effects, Font Underline, Character Effects, Picture coloring, as a part of user passwords, credentials, electronic signature, challenge for user authentication and captcha verification. User personalizes user name and or password or text by choosing combination of proposed factors for each character or word in password. Method includes optional time range where user would have different password and factor combinations for each time range. We also propose a method to use these factors for multi-factor authentication where user is required to format given text as per remotely sent instructions. We propose variation of proposed method that would send text and the instruction to format it using different factors through separate communication channels.

For user verification, our method asks user to format the given text or given picture as instructed using different formatting options.

Claims

1. A computer-implemented process of authenticating a user requesting access to protected resource using credentials that are personalized using formatting options, the process comprising:

using a computing device to perform the steps of;

capturing credentials from the user which are formatted using formatting options, wherein the credentials comprise one or more of formatted user name, formatted password or formatted numerical PIN, and wherein the formatting options comprise Font, Font Size, Font Color, Shading, Font Style, Font Effects, Font Underline, and character effects;

comparing the captured formatted credentials against formatted credentials stored on a server that are designated by the user as valid credentials prior to requesting access;

flagging the captured credentials as valid and allowing the user to have access when the comparison indicates that a match occurs;

flagging the captured credentials as invalid and rejecting the request for access when the comparison indicates that a match does not occur;

alerting the user via alert communication methods chosen by the user including email, text message, voice message, voice call, SMS, audible alarm, or visual clues; and

logging the user request and the steps performed by the computing device.

2. The process of claim 1, wherein the protected resource is a software application, software service, website, web service, data, hardware device, mobile app, smartphone app, physical area, physical item, bank account, trading account, credit limit, monetary balance, reward points, computer device, or communication device.

3. The process of claim 1, where in wherein the valid credentials are set for each time range and time range is of duration of minutes, a day, days, week, weeks, month, years, day of week or time period of the day.

5. The process of claim 1, wherein the protected resource is a software application, software service, website, web service, data, hardware device, mobile app, smartphone app, physical area, physical item, bank account, trading account, credit limit, monetary balance, reward points, computer device, or communication device.

6. The process of claim 1, where in wherein the valid credentials are set for each time range and time range is of duration of minutes, a day, days, week, weeks, month, years, day of week or time period of the day.

8. The process of claim 1, wherein the protected resource is a software application, software service, website, web service, data, hardware device, mobile app, smartphone app, physical area, physical item, bank account, trading account, credit limit, monetary balance, reward points, computer device, or communication device.

13. The process of claim 1, wherein the protected resource is a software application, software service, website, web service, data, hardware device, mobile app, smartphone app, physical area, physical item, bank account, trading account, credit limit, monetary balance, reward points, computer device, or communication device.

4. A computer-implemented process of authenticating a user requesting access to protected resource using credentials that are personalized using formatting options, the process comprising:

using a computing device to perform the steps of;

capturing credentials from the user which are formatted using formatting options, wherein the credentials comprise a formatted picture selected out of many and formatted by the user, and wherein the formatting options comprise applying picture effects, tinting, filtering, folding, cropping, coloring, cutting, zooming, styling, picture bordering, and framing;

comparing the captured formatted credentials against formatted credentials stored on a server that are designated by the user as valid credentials prior to requesting access;

flagging the captured credentials as valid and allowing the user to have access when the comparison indicates that a match occurs;

flagging the captured credentials as invalid and rejecting the request for access when the comparison indicates that a match does not occur;

alerting the user via alert communication methods chosen by the user including email, text message, voice message, voice call, SMS, audible alarm, or visual clues; and

logging the user request and the steps performed by the computing device.

7. A computer-implemented user authentication process that is independently invokable for authenticating a user request to access a protected resource or to supplement authenticating a user requesting access to the protected resource, the process comprising:

using a computing device to perform the steps of;

delivering formatting instructions, which instruct the user how to format a given text using formatting options comprising of Font, Font Size, Font Color, Shading, Font Style, Font Effects, Font Underline, and character effects, to the user over an alternate channel including Email, SMS, voice message, picture message, video message, or hardware device given to user to receive instructions remotely;

providing the text to the user to format;

capturing the text on which the user has applied formatting using the formatting instructions;

comparing the captured formatted text against a stored text on a server that is formatted using same instructions sent to the user using the alternate channel;

flagging the captured text as correctly formatted and alternate authentication process as success when the comparison indicates that a match occurs;

flagging the captured text as incorrectly formatted and alternate authentication process as failure when the comparison indicates that a match does not occur;

alerting user via alert communication methods of user including email, text message, voice message, voice call, SMS, audible alarm, or visual clues; and

logging the steps performed by the computing device.

9. The process of claim 7, wherein the text provided to user to format is delivered using the alternate channel including Email, SMS, text message, voice message, picture message, or video message.

10. The process of claim 7, wherein formatting instructions delivered are encoded and decodable by the user having a decode key.

11. The process of claim 7, wherein formatting instructions delivered are in the form of format instruction hints that the user has setup while configuring a set of formatting instructions for the process to choose randomly when the user makes access request.

14. The process of claim 7, wherein the picture provided to user to format is delivered using a different alternate channel including Email, SMS, text message, voice message, picture message, or video message.

15. The process of claim 7, wherein formatting instructions delivered are encoded and decodable by the user having a decode key.

16. The process of claim 7, wherein formatting instructions delivered are in the form of format instruction hints that the user has setup while configuring a set of formatting instructions for the process to choose randomly when the user makes access request.

12. A computer-implemented user authentication process that is independently invokable for authenticating a user request to access a protected resource or to supplement authenticating a user requesting access to the protected resource, the process comprising:

using a computing device to perform the steps of;

delivering formatting instructions, which instruct the user how to format a given picture using formatting options comprising of applying picture effects, tinting, filtering, folding, cropping, coloring, cutting, zooming, styling, picture bordering, and framing, to the user over an alternate channel including Email, SMS, voice message, picture message, video message, or hardware device given to user to receive instructions remotely;

providing the picture to the user to format;

capturing the picture on which the user has applied formatting using the formatting instructions;

comparing the captured formatted text against a stored picture on a server that is formatted using same instructions sent to the user using the alternate channel;

flagging the captured image as correctly formatted and alternate authentication process as success when the comparison indicates that a match occurs;

flagging the captured image as incorrectly formatted and alternate authentication process as failure when the comparison indicates that a match does not occur;

alerting user via alert communication methods of user including email, text message, voice message, voice call, SMS, audible alarm, or visual clues; and

logging the steps performed by the computing device.