Token authentication for touch sensitive display devices

• US 9,596,087 B2
• Filed: 08/10/2015
• Issued: 03/14/2017
• Est. Priority Date: 12/01/2014
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hewitt, Trudy L., Schembari, Francesco C.
• Primary Examiner(s): Siddiqi, Mohammad A
• Application Number:
  US14/821,913
• Publication Number:
  US 20160156473A1
• Time in Patent Office: 582 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 41/5067 Customer-centric QoS measurements
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display
• CPC Class Codes: H04L 69/18 Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A token-based method for authenticating a user includes placing a predetermined token (i.e., physical object) at a predetermined location on a touch sensitive device to generate an authentication authorization rather than a traditional text-based, smartcard or biometric method of user authentication. In various embodiments, a plurality of tokens is placed upon the touch sensitive device in a predetermined sequence at predetermined locations to generate an authentication authorization.

Claims

1. A computer-implementable method for authenticating a user, comprising:

presenting an indicia on a touch sensitive input device portion, the indicia indicating where an authentication token should be placed on the touch sensitive input device portion;

detecting whether a physical object is placed upon a touch sensitive input device portion of a data processing system in response to the request;

analyzing the physical object;

performing comparison operations to compare the physical object to an authentication physical object, the comparison operations comprising comparing at least one physical characteristic of the physical object with a similar characteristic of the authentication physical object, the at least one physical characteristic being selected from a group comprising a size of the physical object, dimensions of the physical object, an orientation of the physical object and a shape of the physical object; and

authenticating the user if the physical object placed upon the portion of the touch sensitive input device corresponds to the authentication physical object, the authenticating generating an authentication authorization to allow the user access to a device associated with the touch sensitive input device portion.

2. The method of claim 1, further comprising:

generating a request for an authentication operation from a user, the request being displayed within a user interface.

3. The method of claim 1, wherein:

the comparison operations comprise comparing another characteristic of the physical object with a similar characteristic of the authentication physical object; and

,

the another characteristic is selected from a group of characteristics comprising a weight of the physical object, and another of the size of the physical object, the dimensions of the physical object, the orientation of the physical object and the shape of the physical object.

4. The method of claim 3, wherein:

the touch sensitive input device portion comprises sufficient sensing granularity to enable sensing of the at least one characteristic.

5. The method of claim 1, further comprising:

detecting whether a second physical object is placed upon the touch sensitive input device portion;

analyzing the second physical object;

performing comparison operations to compare the second physical object to a second authentication physical object; and

,

authenticating the user if the second physical object corresponds to the second authentication physical object.

6. The method of claim 5, further comprising:

analyzing an order of placement of the physical object and the second physical object; and

,

authenticating the user when the order of placement of the physical object and the second physical object corresponds to an authentication order of placement.