Token authentication for touch sensitive display devices

• US 9,548,865 B2
• Filed: 12/01/2014
• Issued: 01/17/2017
• Est. Priority Date: 12/01/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hewitt, Trudy L., Schembari, Francesco C.
• Primary Examiner(s): Siddiqi, Mohammad A
• Application Number:
  US14/556,697
• Publication Number:
  US 20160156472A1
• Time in Patent Office: 778 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 41/5067 Customer-centric QoS measurements
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display
• CPC Class Codes: H04L 69/18 Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A token-based method for authenticating a user includes placing a predetermined token (i.e., physical object) at a predetermined location on a touch sensitive device to generate an authentication authorization rather than a traditional text-based, smartcard or biometric method of user authentication. In various embodiments, a plurality of tokens is placed upon the touch sensitive device in a predetermined sequence at predetermined locations to generate an authentication authorization.

Claims

1. A system comprising:

a processor;

a data bus coupled to the processor; and

a non-transitory computer-usable medium embodying computer program code, the computer-usable medium being coupled to the data bus, the computer program code used for authenticating a user and comprising instructions executable by the processor and configured for;

presenting an indicia on a touch sensitive input device portion, the indicia indicating where an authentication token should be placed on the touch sensitive input device portion;

detecting whether a physical object is placed upon a portion of a touch sensitive input device portion of a data processing system in response to the request;

analyzing the physical object;

performing comparison operations to compare the physical object to an authentication physical object, the comparison operations comprising comparing at least one physical characteristic of the physical object with a similar characteristic of the authentication physical object, the at least one physical characteristic being selected from a group comprising a size of the physical object, dimensions of the physical object, an orientation of the physical object and a shape of the physical object; and

authenticating the user if the physical object placed upon the portion of the touch sensitive input device corresponds to the authentication physical object, the authenticating generating an authentication authorization to allow the user access to a device associated with the touch sensitive input device portion.

2. The system of claim 1, the computer program code further comprise instructions for:

generating a request for an authentication operation from a user, the request being displayed within a user interface.

3. The system of claim 1, wherein:

the comparison operations comprise comparing another characteristic of the physical object with a similar characteristic of the authentication physical object; and

,

the another characteristic is selected from a group of characteristics comprising a weight of the physical object, and another of the size of the physical object, the dimensions of the physical object, the orientation of the physical object and the shape of the physical object.

4. The system of claim 3, wherein:

the touch sensitive input device portion comprises sufficient sensing granularity to enable sensing of the at least one characteristic.

5. The system of claim 1, wherein the computer program code further comprise instructions for:

detecting whether a second physical object is placed upon the touch sensitive input device portion;

analyzing the second physical object;

performing comparison operations to compare the second physical object to a second authentication physical object; and

, authenticating the user if the second physical object corresponds to the second

authentication physical object.

6. The system of claim 5, wherein the computer program code further comprise instructions for:

analyzing an order of placement of the physical object and the second physical object; and

,

authenticating the user when the order of placement of the physical object and the second physical object corresponds to an authentication order of placement.

7. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

detecting whether a physical object is placed upon a portion of a touch sensitive input device portion of a data processing system in response to the request;

analyzing the physical object;

performing comparison operations to compare the physical object to an authentication physical object, the comparison operations comprising comparing at least one physical characteristic of the physical object with a similar characteristic of the authentication physical object, the at least one physical characteristic being selected from a group comprising a size of the physical object, dimensions of the physical object, an orientation of the physical object and a shape of the physical object; and

authenticating the user if the physical object placed upon the portion of the touch sensitive input device corresponds to the authentication physical object, the authenticating generating an authentication authorization to allow the user access to a device associated with the touch sensitive input device portion.

8. The non-transitory, computer-readable storage medium of claim 7, the computer program code further comprise instructions for

generating a request for an authentication operation from a user, the request being displayed within a user interface.

9. The non-transitory, computer-readable storage medium of claim 7, wherein:

the comparison operations comprise comparing another characteristic of the physical object with a similar characteristic of the authentication physical object; and

,

the another characteristic is selected from a group of characteristics comprising a weight of the physical object, and another of the size of the physical object, the dimensions of the physical object, the orientation of the physical object and the shape of the physical object.

10. The non-transitory, computer-readable storage medium of claim 9, wherein:

the touch sensitive input device portion comprises sufficient sensing granularity to enable sensing of the at least one characteristic.

11. The non-transitory, computer-readable storage medium of claim 9, wherein the computer program code further comprise instructions for:

detecting whether a second physical object is placed upon the touch sensitive input device portion;

analyzing the second physical object;

performing comparison operations to compare the second physical object to a second authentication physical object; and

,

authenticating the user if the second physical object corresponds to the second authentication physical object.

12. The non-transitory, computer-readable storage medium of claim 11, wherein the computer program code further comprise instructions for:

analyzing an order of placement of the physical object and the second physical object; and

,

authenticating the user when the order of placement of the physical object and the second physical object corresponds to an authentication order of placement.

13. The non-transitory, computer-readable storage medium of claim 7, wherein the computer executable instructions are deployable to a client system from a server system at a remote location.

14. The non-transitory, computer-readable storage medium of claim 7, wherein the computer executable instructions are provided by a service provider to a user on an on-demand basis.