Hardening security images

• US 9,792,423 B2
• Filed: 08/13/2015
• Issued: 10/17/2017
• Est. Priority Date: 03/23/2012
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Inventors: Leddy, William Joseph
• Primary Examiner(s): TUCKER, WESLEY J
• Application Number:
  US14/825,221
• Publication Number:
  US 20150347869A1
• Time in Patent Office: 796 Days
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06V 10/754 involving a deformation of the sample pattern or of the reference pattern; Elastic matching

Abstract

Methods and systems are provided for electronic authentication. A modified electronic image is generated by altering at least a pixel of an electronic image. The electronic image is an image that has been previously viewed by a user during a setup process. In response to receiving an authentication request from the user, the modified electronic image is displayed to the user via an electronic display along with one or more other electronic images. A determination is made as to whether the user is able to recognize the modified electronic image. In response to determination that the user is able to recognize the modified electronic image, the authenticating request is granted.

Claims

1. A method of performing electronic authentication, comprising:

generating a modified electronic image by altering at least a pixel of an electronic image, the electronic image being an image that has been previously viewed by a user during a setup process;

in response to receiving an authentication request from the user, causing the modified electronic image to be displayed to the user via an electronic display along with one or more other electronic images;

determining whether the user is able to recognize the modified electronic image; and

in response to determining that the user is able to recognize the modified electronic image, granting the authenticating request.

2. The method of claim 1, further comprising:

requesting a characterization of at least one of the modified electronic image and the one or more other electronic images by the user.

3. The method of claim 2, wherein the determining comprises comparing the characterization of the at least one of the modified electronic image and the one or more other electronic images with a stored characterization of the electronic image by the user.

4. The method of claim 3, wherein the determining further comprises determining the characterization of the at least one of the modified electronic image and the one or more other electronic images matches the stored characterization of the electronic image by the user.

5. The method of claim 3, wherein the stored characterization of the electronic image comprises a name of the electronic image or a feeling or emotion the user associates with the electronic image.

6. The method of claim 1, wherein the generating of the modified electronic image comprises at least one of the following:

changing a color of at least a portion of the electronic image;

showing the electronic image in silhouette;

moving the electronic image;

changing a resolution of the electronic image;

cropping the electronic image;

changing an object of the electronic image;

mirroring the electronic image;

changing a border of the electronic image;

or

warping the electronic image.

7. The method of claim 1, wherein the generating of the modified electronic image is performed in response to the receiving of the authentication request.

8. The method of claim 1, further comprising:

comparing a first sum of all bytes of the electronic image before the electronic image is modified with a second sum of all bytes of the electronic image after the electronic image has been modified; and

further modifying the electronic image when the first sum is equal to the second sum.

21. The method of claim 1, further comprising:

before the generating of the modified electronic image, displaying the electronic image to the user during the setup process.

22. The method of claim 1, wherein the generating the modified electronic image is performed such that a checksum of the electronic image is different from the modified electronic image.

9. A system for performing electronic authentication, the system comprising:

a non-transitory memory; and

one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the system to perform operations comprising;

generating a modified electronic image by altering at least a pixel of an electronic image, the electronic image being an image that has been previously viewed by a user during a setup process;

in response to receiving an authentication request from the user, causing the modified electronic image to be displayed to the user via an electronic display along with one or more other electronic images;

determining whether the user is able to recognize the modified electronic image; and

in response to determining that the user is able to recognize the modified electronic image, granting the authenticating request.

10. The system of claim 9, wherein the operations further comprise:

requesting a characterization of at least one of the modified electronic image and the one or more other electronic images by the user.

11. The system of claim 10, wherein the determining comprises comparing the characterization of the at least one of the modified electronic image and the one or more other electronic images with a stored characterization of the electronic image by the user.

12. The system of claim 11, wherein the determining further comprises determining the characterization of the at least one of the modified electronic image and the one or more other electronic images matches the stored characterization of the electronic image by the user.

13. The system of claim 11, wherein the stored characterization of the electronic image comprises a name of the electronic image or a feeling or emotion the user associates with the electronic image.

14. The system of claim 9, wherein the generating of the modified electronic image comprises at least one of the following:

changing a color of at least a portion of the electronic image;

showing the electronic image in silhouette;

moving the electronic image;

changing a resolution of the electronic image;

cropping the electronic image;

changing an object of the electronic image;

mirroring the electronic image;

changing a border of the electronic image;

or

warping the electronic image.

15. The system of claim 9, wherein the generating of the modified electronic mage is performed in response to the receiving of the authentication request.

16. The system of claim 9, wherein the operations further comprise:

comparing a first sum of all bytes of the electronic image before the electronic image is modified with a second sum of all bytes of the electronic image after the electronic image has been modified; and

further modifying the electronic image when the first sum is equal to the second sum.

17. A non-transitory computer-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:

generating a modified electronic image, the electronic image being an image that has been previously viewed by a user during a setup process, wherein the generating comprises;

modifying the electronic image by altering at least a pixel of the electronic image;

comparing a first sum of all bytes of the electronic image before the electronic image is modified with a second sum of all bytes of the electronic image after the electronic image has been modified; and

altering additional pixels of the modified electronic image in response to the first sum being equal to the second sum;

in response to receiving an authentication request from the user, causing the modified electronic image to be displayed to the user via an electronic display along with one or more other electronic images;

determining whether the user is able to recognize the modified electronic image; and

in response to determining that the user is able to recognize the modified electronic image, granting the authenticating request.

18. The non-transitory computer-readable medium of claim 17, wherein the operations further comprise:

requesting a characterization of at least one of the modified electronic image and the one or more other electronic images by the user;

wherein;

the determining comprises comparing the characterization of the at least one of the modified electronic image and the one or more other electronic images with a stored characterization of the electronic image by the user.

19. The non-transitory computer-readable medium of claim 18, wherein the stored characterization of the electronic image comprises a name of the electronic image or a feeling or emotion the user associates with the electronic image.

20. The non-transitory computer-readable medium of claim 18, wherein the generating of the modified electronic image is performed in response to the receiving of the authentication request.