Authentication method and system

• US 9,552,465 B2
• Filed: 07/17/2013
• Issued: 01/24/2017
• Est. Priority Date: 07/20/2012
• Status: Active Grant

• Current Assignee: Licentia Group Limited, MYPINPAD Ltd.
• Original Assignee: Licentia Group Limited, MYPINPAD Ltd.
• Inventors: Pike, Justin
• Primary Examiner(s): Shepperd, Eric W
• Application Number:
  US14/416,054
• Publication Number:
  US 20150154414A1
• Time in Patent Office: 1,287 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G07F 7/1033 Details of the PIN pad
• CPC Class Codes: G07F 7/1041 PIN input keyboard gets new key allocation at each use
• CPC Class Codes: G07F 7/1075 PIN is checked remotely
• CPC Class Codes: G07F 7/1091 Use of an encrypted form of the PIN

Abstract

The invention provides a computer-implemented authentication method comprising the step of enabling a user to input an identifier (e.g. a PIN) into an electronic device having a screen and a keypad operable within a keypad zone of the screen; by operating at least one key of the keypad via an image of at least part of a scrambled keypad which is displayed at least partially within the keypad zone. The user'"'"'s operation of the keypad key via the image generates an encoded version of the user'"'"'s intended input. In one sense the invention can be perceived as superimposing a non-functional image of a scrambled keyboard over an underlying, functional keypad. The image may be any type of electronic image, and may include a video image. The invention is particularly suited for use with, but not limited to, mobile phones, tablet computer, PCs etc. It can be implemented in any system wherein a user'"'"'s identity must be verified before access is granted to a controlled resource.

Claims

1. A method comprising the steps of:

providing, by an electronic device and for display within a keypad zone of a screen associated with an electronic device, an operable keypad;

generating, by a remote server, a plurality of images scrambled keypads;

removing, by the remote server and from the plurality of images of scrambled keypads, any image that represents a scrambled keypad having at least one key in a same position as a respective key of the operable keypad to provide a remaining plurality of images;

selecting, by the remote server and from the remaining plurality of images, an image of a scrambled keypad;

sending, from the remote server and for delivery to the electronic device the image of the scrambled keypad;

outputting, by the electronic device and for display at least partially within the keypad zone, at least a portion of the image of the scrambled keypad; and

receiving, at the electronic device, by operation of at least one key of the operable keypad via the image of the scrambled keypad, an identifier.

2. A method according to claim 1 wherein operation of at least one key of the operable keypad key via the image of the scrambled keypad generates an encoded version of a user'"'"'s intended input within the electronic device.

3. A method according to claim 1 wherein the image of the scrambled keypad is electronically formed, including a graphical image, an optical image, a video or some other form of visual representation of a scrambled keypad.

4. A method according to claim 1 wherein the keypad zone is a defined area or portion of the screen which covers a portion of the screen of the screen'"'"'s entirety.

5. A method according to claim 1 wherein the image of the scrambled keypad is displayed within the keypad zone such that as a user touches, clicks on or otherwise selects a location within the image of the scrambled keypad, an operable keypad key of the operable keypad at that location within the keypad zone is activated to provide an encoded version of the user'"'"'s input.

6. A method according to claim 1 wherein the image of the scrambled keypad is displayed such that the image of the scrambled keypad occupies the keypad zone exactly, completely or partially.

7. A method according to claim 1 wherein the image of the scrambled keypad is displayed such that the image of the scrambled keypad appears to the user as an operable keypad with keys in a scrambled order or configuration with respect to the operable keypad of the electronic device.

8. A method according to claim 1 wherein the image of the scrambled keypad functions as a mask or cover superimposed over the operable keypad such that a user'"'"'s touching, clicking on or otherwise identifying a location within the image of the scrambled keypad operates the operable keypad key positioned at that location within the keypad zone.

9. A method according to claim 1 wherein the keypad zone is a portion of the screen which is designated, prior to input of the identifier, as a keypad display area.

10. A method according to claim 1 wherein the keypad zone and/or the image of the scrambled keypad remains in a fixed position on the screen during input of the identifier.

11. A method according to claim 1 wherein the identifier is a Personal Identification Code or Personal Identification Number.

12. A method according to claim 1 wherein the image of the scrambled keypad represents or depicts a scrambled keypad having at least one key which is positionally re-ordered or reconfigured relative to the layout of the keys in the operable keypad.

13. A method according to claim 1 wherein all of the keys depicted in the image of the scrambled keypad are repositioned or re-ordered relative to the keys in the operable keypad.

14. A method according to claim 1 wherein a user is enabled to input the identifier by interaction with the screen, such as by touching a portion of the screen and/or selecting an area of the screen using a pointing device such as a mouse or tracker ball.

15. A method according to claim 1 wherein the keypad zone comprises a plurality of sub-zones or ‘

hot spots’

, each sub-zone corresponding to a key of the operable keypad.

16. A method according to claim 15 wherein the image of the scrambled keypad is presented to the user such that a position of at least one key depicted in the image of the scrambled keypad corresponds to a position of a sub-zone, thus providing a mapping between the keys of the scrambled keypad depicted in the image and the plurality of sub-zones.

17. A method according to claim 1 wherein a configuration or an order of the keys in the operable keypad is altered after at least part of the identifier has been inputted.

18. A method according to claim 1 wherein an encoded version of a user'"'"'s identifier is constructed within the electronic device from a plurality of keystrokes activated on the operable keypad in response to a click, touch or other indication made by the user in respect of the image of the scrambled keypad.

19. A method according to claim 1 wherein the identifier inputted into the device is sent from the electronic device to a remote computer-based resource.

20. A method according to claim 19 wherein the remote computer-based resource receives the inputted identifier and processes the identifier.

21. A method according to claim 20 wherein the identifier is processed using a stored form or version of a configuration of the keys depicted in the image of the scrambled keypad.

22. A method according to claim 21 wherein the stored form or version of the configuration of the keys is a filename.

23. A method according to claim 22 wherein processing involves using the stored form or version of the configuration of the keys to provide a decoded version of the inputted identifier.

24. A method according to claim 21 wherein the processed identifier is compared with a stored version of the identifier, and the inputted identifier is deemed to be verified when the processed identifier matches the stored version of the identifier.

25. A method according to claim 1 wherein respective positions of all keys depicted in the image of the scrambled keypad remain unchanged relative to one another during input of the user'"'"'s identifier.

26. A method according to claim 1 wherein the symbol of at least one key in the image of the scrambled keypad is at least partially obscured or obfuscated but remains readable to the user.

27. A method according to claim 1 wherein the electronic device is a mobile telephone, a PC, a tablet computer, a laptop, a PDA, a card-reading terminal, or a mobile phone within a housing such that the mobile phone resembles a card-reading or electronic point of sale device, or some other electronic device having communications capabilities.

28. A method according to claim 1 wherein the image of the scrambled keypad is displayed via a web browser, or an application embedded within a browser, or a standalone software application, and/or an application providing a graphical user interface to allow a user to interact with the screen.

29. A method according to claim 1 wherein the position of the keypad zone on the screen, and/or the dimensions of the keypad zone, are specified by a procedure or method call.

30. A method according to claim 1 wherein the image of the scrambled keypad and/or the keypad comprises numeric digits, alphabetical characters, symbols or any other indicia, or a combination thereof.

31. A method according to claim 1, wherein the image of the scrambled keypad is erased from the electronic device following a user'"'"'s input, or following a specified period of time.

32. A method according to claim 1 wherein the inputted identifier is verified so as to control access to a resource such as a financial resource, a device, a building, an electronic resource, a medical resource, an information or data resource, or a computer-based resource.

33. A system comprising:

a remote computer-based resource being configured to;

generate a plurality of images of scrambled keypads;

remove, from the plurality of images of scrambled keypads, any image that represents a scrambled keypad having at least one key in a same position as a respective key of an operable keypad of an electronic device to provide a remaining plurality of images;

select, from the remaining plurality of images, an image of a scrambled keypad; and

send, for delivery to an electronic device, the image of the scrambled keypad; and

the electronic device having a screen, a processor and associated memory, the electronic device being configured to;

display an operable keypad within a keypad zone of the screen;

output for display, at least partially within the keypad zone of the screen, at least a portion of the image of the scrambled keypad; and

receive, store and/or process an identifier inputted into the electronic device by operation of at least one key of the operable keypad via the image of the scrambled keypad.