Coordinate Based Computer Authentication System and Methods

• US 20080184363A1
• Filed: 05/11/2006
• Published: 07/31/2008
• Est. Priority Date: 05/13/2005
• Status: Active Grant

• Current Assignee: Tivaro Incorporated
• Original Assignee: Tivaro Incorporated
• Inventors: Narasimhan, Sarangan
• Granted Patent: US 8,448,226 B2
• Time in Patent Office: Days
• US Class Current: 726/18
• CPC Class Codes: G06F 21/36 by graphic or iconic representation

Abstract

A coordinate-based computer authentication system (1) and methods have been disclosed. A method comprises providing instructions to present a graphical interface (1, 121) on a display, wherein the graphical interface includes a plurality of graphical images. Selection information is received that corresponds to the selection of one or more of the plurality of graphical images. The selection information is authenticated (1, 110).

Claims

1. A method, comprising:

providing instructions to present a graphical interface on a display, wherein the graphical interface includes a plurality of graphical images;

receiving selection information corresponding to the selection of one or more of the plurality of graphical images; and

authenticating the selection information.

2. The method of claim 1, wherein the selection information includes code names, code numbers, code sequences, and display coordinates corresponding to the selection of one or more of the plurality of graphical images.

3. The method of claim 1, wherein the selection information includes encrypted selection information.

4. The method of claim 3, further comprising decrypting the selection information.

5. The method of claim 1, wherein the plurality of graphical images include graphical representations of alphanumeric characters, images, logos, states of a country and pictures.

6. The method of claim 1, wherein authenticating the selection information further comprises decoding the selection information to determine actual authentication data.

7. The method of claim 1, wherein authenticating the selection information further comprises comparing the actual authentication data with database data.

8. The method of claim 7, wherein authenticating the selection information further comprises:

providing the actual authentication data to a server for authentication;

receiving a response from the server; and

providing the response to a client.

9. The method of claim 6, wherein decoding the selection information comprises using a map that maps the plurality of graphical images with coded data, the coded data including one or more of code names, code numbers, code sequences, and display coordinates.

10. The method of claim 9, wherein new maps are generated each time a new request is received to authenticate a user.

11. The method of claim 1, wherein the graphical interface includes interface characteristics, the characteristics including screen location, size, shape, orientation, curvature, aspect ratio, layout, background pattern, and color.

12. The method of claim 1, wherein the graphical images include image characteristics, the characteristics including screen location, size, shape, orientation, curvature, aspect ratio, layout, background pattern, and color.

13. The method of claim 12, wherein new image characteristics of the graphical images are generated each time a new request is received to authenticate a user.

14. The method of claim 2, wherein the display coordinates are determined by a pointer controlled by a pointing device, the pointing device including one or more of a mouse, a track ball, a track pad, keys on a keyboard, keys on a keypad and a finger on a touch screen display.

15. The method of claim 1, wherein the selection information includes a sequence of selections of one or more of the plurality of graphical images.

16. A method, comprising:

presenting a web page with content from a first server;

presenting a login window with content from an authentication server that is not the first server, wherein the login window is a graphical interface, the graphical interface including a plurality of graphical images;

receiving authentication information corresponding to the selection of one or more of the plurality of graphical images via the login window;

generating encrypted authentication information by encrypting the authentication information;

generating encoded and encrypted authentication information by encoding the encrypted authentication information; and

authenticating the encoded and encrypted authentication information at the first server.

17. A method, comprising:

presenting a web page with content from a first server;

presenting a login window with content from an authentication server that is not the first server, wherein the login window is a graphical interface, the graphical interface including a plurality of graphical images;

receiving authentication information corresponding to the selection of one or more of the plurality of graphical images via the login window;

authenticating the authentication information at the authentication server; and

providing the first server with an access key if the authentication information is authenticated, wherein the access key is specific to the authentication information.

18. A method, comprising:

presenting a login window with content from an authentication server, wherein the login window is a graphical interface, the graphical interface including a plurality of graphical images;

receiving authentication information corresponding to the selection of one or more of the plurality of graphical images via the login window; and

authenticating the authentication information at the authentication server.

19. The method of claim 18, further comprising providing automatically a plurality of servers with login information specific to each server of the plurality of servers if the authentication information is authenticated.

20. The method of claim 18, further comprising providing access to information stored in a database if the authentication information is authenticated, wherein the data in the database is coded according to a mapping key that maps data to a code.

25. The method of claim 18, wherein the graphical interface changes over time and authentication is dependent on selection information at a particular time.

26. The method of claim 18, wherein the graphical interface includes a plurality of rotating selector areas.

27. The method of claim 18, wherein the graphical interface includes a plurality of non-circular selector areas.

28. The method of claim 18, wherein the graphical interface includes a background pattern that is preselected, such that a user can detect spoofing.

21. A method, comprising:

presenting a window with content from a server, wherein the window is a graphical interface, the graphical interface including a plurality of graphical images;

allowing data to be entered in the window by selecting one or more of the plurality of the graphical images;

storing the data on the server; and

generating a link to the data on the server.

22. The method of claim 21, wherein only a client having the link may access the data.

23. The method of claim 21, wherein the link has one or more attributes, the attributes including a limited access time, a limited number of uses, and a limit to which clients are permitted access to the data.

24. The method of claim 21, wherein the link is transmitted via a transmission process, the transmission process including one or more of:

transmitting the link via e-mail, and transmitting a second link to the server that maintains the link.