Picture/gesture password protection

• US 10,169,557 B2
• Filed: 09/23/2015
• Issued: 01/01/2019
• Est. Priority Date: 09/23/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Chan, Yuk L., Lagares-Greenblatt, Heidi, Naphade, Deepti
• Primary Examiner(s): Thiaw, Catherine B
• Application Number:
  US14/862,338
• Publication Number:
  US 20170083691A1
• Time in Patent Office: 1,196 Days
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 3/04883 for inputting data by handwriting, e.g. gesture or text
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system and a computer program product are provided for identifying a strength of an input picture password formed by performing a sequence of gestures relative to a picture. The system includes a memory device for storing a crowdsource history of picture passwords formed by tracking a plurality of picture passwords used to authenticate a plurality of users. Each of the plurality of users has a respective user profile. The system further includes a processor-based demography-based pattern usage assessment generator for generating a demography-based pattern usage assessment by analyzing the crowd source history and the user profile of the plurality of users. The system also includes a user-perceptible indication device for providing an indication of the strength of the input picture password in accordance with the demography-based pattern usage assessment.

Claims

1. A computer program product for identifying a strength of an input picture password formed from a selected picture and performing a sequence of gestures relative to the picture, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising:

storing, in a memory device, a crowd source history of picture passwords formed by tracking a plurality of picture passwords used to authenticate a plurality of users, each of the plurality of users having a respective user profile including at least one non-language demographic and each of the plurality of picture passwords including a picture selected by a user of the plurality of users and a sequence of gestures performed relative to the picture by the user;

generating, by a processor-based demography-based pattern usage assessment generator, a demography-based pattern usage assessment corresponding to the at least one non-language demographic by analyzing the crowd source history and the user profiles of the plurality of users to develop rules from the crowd source history according to common gestures for the at least one non-language demographic, wherein the rules are indicative of a strength of each gesture in the sequence of gestures according to how the sequence of gestures is performed relative to the picture; and

providing, by a user-perceptible indication device, an indication of the strength of the input picture password in accordance with the demography-based pattern usage assessment corresponding to the at least one non-language demographic.

2. A system for identifying a strength of an input picture password formed from a selected picture and performing a sequence of gestures relative to the picture, the system comprising:

a memory device for storing a crowd source history of picture passwords formed by tracking a plurality of picture passwords used to authenticate a plurality of users, each of the plurality of users having a respective user profile including at least one non-language demographic and each of the plurality of picture passwords including a picture selected by a user of the plurality of users and a sequence of gestures performed relative to the picture by the user;

a processor-based demography-based pattern usage assessment generator for generating a demography-based pattern usage assessment corresponding to the at least one non-language demographic by analyzing the crowd source history and the user profiles of the plurality of users to develop rules from the crowd source history according to common gestures for the at least one non-language demographic, wherein the rules are indicative of a strength of each gesture in the sequence of gestures according to how the sequence of gestures is performed relative to the picture; and

a user-perceptible indication device for providing an indication of the strength of the input picture password in accordance with the demography-based pattern usage assessment corresponding to the at least one non-language demographic.

3. The system of claim 2, wherein the demography-based pattern usage assessment is further determined from a demographic that includes a language style.

4. The system of claim 3, wherein e language style includes a direction of reading and writing.

5. The system of claim 2, wherein the demography-based pattern usage assessment is determined from a pattern usage that includes an image main point of interest reference.

6. The system of claim 2, further comprising a rule generator for generating a set of rules for judging password strength based on at least one of the crowd source history and the demography-based pattern usage assessment.

7. The system of claim 6, wherein the set of rules are generated further based on user inputs to applications that involve users making one or more gestures.

8. The system of claim 6, wherein the set of rules are dynamically updated over time.

9. The system of claim 2, wherein the demography-based pattern usage assessment is determined from a demographic that includes an age group.

10. The system of claim 2, wherein the demography-based pattern usage assessment corresponding to the at least one non-language demographic is determined from a country specified in the user profiles.

11. The system of claim 2, wherein the demography-based pattern usage assessment corresponding to the at least one non-language demographic is determined from an experience level specified in the user profiles.

12. The system of claim 2, wherein the demography-based pattern usage assessment corresponding to the at least one non-language demographic is determined from a gender specified in the user profiles.

13. The system of claim 2, wherein the demography-based pattern usage assessment corresponding to the at least one non-language demographic is determined from a culture specified in the user profiles.

14. The system of claim 2, wherein the demography-based pattern usage assessment corresponding to the at least one non-language demographic is determined from a pattern usage that includes a contour.

15. The system of claim 2, wherein the demography-based pattern usage assessment corresponding to the at least one non-language demographic is determined from a pattern usage that includes a predictable pattern.

16. The system of claim 2, wherein the demography-based pattern usage assessment corresponding to the at least one non-language demographic is determined from a pattern usage that includes a circular pattern.

17. The system of claim 2, wherein the processor-based demography-based pattern usage assessment generator is further configured to analyze compilations of old input picture passwords.

18. The system of claim 2, wherein the at least one non-language demographic comprises a gender of the user, and wherein the demography-based pattern usage assess n corresponding to the at least one non-language demographic evaluates the gender of the user with respect to a family picture.

19. The system of claim 2, wherein the demography-based pattern usage assessment corresponding to the at least one non-language demographic evaluates the at least one non-language demographic with respect to a type of figure used within a picture.