Method for authentication using an electronic device

• US 10,454,684 B2
• Filed: 09/29/2015
• Issued: 10/22/2019
• Est. Priority Date: 09/30/2014
• Status: Active Grant

• Current Assignee: Surfboard Payments AB
• Original Assignee: Tokon Security AB
• Inventors: Hindocha, Neal, Lindfeldt, Christopher
• Primary Examiner(s): Pich, Ponnoreay
• Application Number:
  US15/515,932
• Publication Number:
  US 20180234242A1
• Time in Patent Office: 1,484 Days
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

Method for authenticating a user to a central server (130) and using an electronic device (120,122) with a screen display (121,123). The method comprises the following steps: a) associating each of the devices or users, with a unique set of codes (132), and each code with a piece of information; b) providing a software function, accessible from the selected electronic device; c) providing, on the screen display, a user interface activatable in several different ways, corresponding to different codes; d) specifying pieces of information and determining the corresponding codes; e) calculating a one-way function; f) communicating the calculated value to the central server; g) calculating a comparison output value; and h) authenticating the user if the values are equal. The invention also relates to a system (100) and a computer software product arranged to cooperate with such a system.

Claims

1. A method for authenticating a user to a central server and using a selected one of several electronic devices, wherein the electronic devices each comprise a screen display and are arranged to communicate with the central server, the method comprising:

a) associating, in the central server, each of the several electronic devices and/or each of a set of registered users, with a respective set of different digitally stored codes, wherein the digitally stored codes are known to both the electronic device in question and to the central server, and wherein each respective set of different digitally stored codes is unique for each electronic device and/or for each user of the set of users, and associating each code of each respective set of digitally stored codes with a piece of information in a predetermined set of information pieces;

b) providing a software function, accessible from the selected electronic device, wherein the software function is provided access to unambiguous information regarding the identity of the selected electronic device in connection to the provided access;

c) providing, by the software function, and on the screen display of the selected electronic device, a graphical user interface comprising a user control, wherein the user control is activatable in a plurality of ways, and wherein each of the plurality of ways is associated with a different respective code selected from the respective set of different digitally stored codes associated with the selected electronic device and/or the user;

d) receiving, as a result of a particular activation of the user control in one of the plurality of ways, a certain piece of information in the predetermined set of information pieces, and determining a corresponding code, the corresponding code associated in step a) with the certain piece of information;

e) calculating an output value of a predetermined one-way function, to which the determined corresponding code is used as an input value;

f) communicating the calculated output value from the selected electronic device to the central server;

g) calculating, by the central server, comparison output value of the one-way function, wherein, in calculating the comparison output value, the one-way function uses as an input value the corresponding code associated, in step a), with the certain piece of information received as a result of the activation of the user control in one of the plurality of ways of activation in step d); and

h) authenticating the user if the calculated comparison output value equals the calculated output value, wherein the central server identifies each individual electronic device using a respective individualized local presence of the software function on the electronic device in question or using a hardware serial number of the electronic device.

2. The method according to claim 1, wherein the user control comprises several fields on the screen display of the selected electronic device, and wherein the user control can be activated in different ways by the user selecting different ones of said several fields.

3. The method according to claim 2, wherein the screen display is a touchscreen.

4. The method according to claim 2, wherein the software function is arranged to display image material, on the screen display, wherein the image material covers a plurality of the several fields, and wherein the image material represents the certain piece of information.

5. The method according to claim 3, wherein the graphical user interface is caused to allow the user to a swipe pattern of a finger across the screen display in such a way so that several of said fields are touched, and that the certain piece of information correspond to the touched fields.

6. The method according to claim 4, wherein the image material comprises image features corresponding to the swipe pattern of the finger.

7. The method according to claim 4, wherein the software function provides an interface via which the user can modify the contents of the image material.

8. The method according to claim 4, wherein the software function displays the image material as a two-dimensional image on the screen display.

9. The method according to claim 4, wherein the software function displays the image material as a two-dimensional surface in a three-dimensional structure, a projection of which is shown on the screen display.

10. The method according to claim 9, wherein the software function provides an interactive, graphical user interface on the screen display, allowing the user to manipulate the three-dimensional structure to modify the position on the screen display of the image material before selecting at least one field of the several fields, so that the positions of the fields change as a result of the manipulation.

11. The method according to claim 4, wherein the software function automatically changes the image material over time or provides an interactive graphical user interface on the screen display allowing the user to set the value of a progress parameter to a specific value before specifying at least one field of the several fields, and wherein the user control is activated in different ways of the plurality of ways by selecting a particular field for different current time or progress parameter values.

12. The method according to claim 1, wherein each code is a randomized alphanumerical sequence which is generated upon initiation of the software function on the electronic device in question and shared between the software function and the central server.

13. The method according to claim 1, wherein the software function reads a selected screen display coordinate and translates the screen display coordinate into a corresponding selected field using a digitally stored mapping between screen coordinates and fields that is only available to the software function.

14. The method according to claim 1, wherein the central server identifies each individual electronic device using a respective individualized local presence of the software function on the electronic device in question or using a hardware serial number of the electronic device.

15. The method according to claim 1, wherein, in step a), a respective one-way function is selected among a set of possible one-way functions and individually associated with each electronic device.

16. A system for authenticating a user, comprising:

a central server;

a selected one of several electronic devices, wherein each of the several electronic devices comprise a screen display and are arranged to communicate with the central server; and

a software function, accessible from the selected electronic device;

wherein the central server is configured to;

associate each of the several electronic devices and/or each of a set of registered users, with a respective set of different digitally stored codes, wherein the digitally stored codes are known to both the electronic device in question and to the central server, and wherein each respective set of different digitally stored codes is unique for each electronic device and/or for each user of the set of users;

associate each code of each respective set of digitally stored codes with a piece of information in a predetermined set of information pieces;

wherein the software function is configured to;

provide, on the screen display of the selected electronic device, a graphical user interface comprising a user control, wherein the user control is activated in a plurality of ways, and wherein each of the plurality of ways of activation are associated with a different respective code selected from the respective set of different digitally stored codes associated with the selected electronic device and/or the user;

receive, as a result of activation of the user control in one of the plurality of ways of activation, a certain piece of information in the predetermined set of information pieces;

determine a corresponding code, the corresponding code associated by the server with the certain piece of information;

calculate an output value of a predetermined one-way function, to which the determined corresponding code is used as an input value; and

communicate the calculated output value from the selected electronic device to the central server; and

wherein the central server is further configured to;

calculate a comparison output value of the one-way function, wherein, in calculating the comparison output value, the one-way function uses as an input value the corresponding code associated by the server with the certain piece of information received as a result of the activation of the user control in one of the plurality of ways of activation;

authenticate the user if the calculated comparison output value equals the calculated output value, wherein the central server identifies each individual electronic device using a respective individualized local presence of the software function on the electronic device in question or using a hardware serial number of the electronic device.

17. A non-transitory computer-readable storage medium comprising instructions stored thereon, the instructions, when executed by an authentication system comprising a central server and a selected one of several electronic devices, arranged to communicate with the central server, cause the authentication system to perform the steps comprising:

a) associating, in the central server, each of the several electronic devices and/or each of a set of registered users, with a respective set of different digitally stored codes, wherein the digitally stored codes are known to both the electronic device in question and to the central server, and wherein each respective set of different digitally stored codes is unique for each electronic device and/or for each user of the set of users, and associating each code of each respective set of digitally stored codes with a piece of information in a predetermined set of information pieces;

b) providing a software function, accessible from the selected electronic device, wherein the software function is provided access to unambiguous information regarding the identity of the selected electronic device in connection to the provided access;

c) providing, by the software function, and on a screen display of the selected electronic device, a graphical user interface comprising a user control, wherein the user control is activated in a plurality of ways, and wherein each of the plurality of ways of activation are associated with a different respective code selected from the respective set of different digitally stored codes associated with the selected electronic device and/or the user;

d) receiving, as a result of activation of the user control in one of the plurality of ways of activation, a certain piece of information in the predetermined set of information pieces, and determining a corresponding code, the corresponding code associated in step a) with the certain piece of information;

e) calculating an output value of a predetermined one-way function, to which the determined corresponding code is used as an input value;

f) communicating the calculated output value from the selected electronic device to the central server;

g) calculating, by the central server, a comparison output value of the one-way function, wherein, in calculating the comparison output value, the one-way function uses as an input value the corresponding code associated, in step a), with the certain piece of information received as a result of the activation of the user control in one of the plurality of ways of activation in step d); and

h) authenticating the user if the calculated comparison output value equals the calculated output value, wherein the central server identifies each individual electronic device using a respective individualized local presence of the software function on the electronic device in question or using a hardware serial number of the electronic device.