AUTOMATED PASSWORD AUTHENTICATION

• US 20180225443A1
• Filed: 03/27/2018
• Published: 08/09/2018
• Est. Priority Date: 08/29/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Dick, Adrian David, Taylor, James Stuart
• Granted Patent: US 10,395,023 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system connected to an existing computer includes a unit for monitoring the screen and provides input, a storage unit that stores data that pairs screen buffer regions with authentication details, wherein the system learns new pairs via user training and presents stored authentication details when the screen buffer regions match a related stored region which is paired with a region of the screen, and a unit that determines which of stored passwords need to be presented to the system by a pattern matching of regions of screen pixels.

Claims

1. A computer-implemented method comprising:

monitoring an authentication request displayed on a screen and a defined area selected by a user which highlights the authentication request and provides input, wherein the defined area uniquely identifies a login area;

prompting the user to highlight the defined area that identifies the login area prior to entering information into the login area;

storing data that pairs screen buffer regions with authentication details;

learning new pairs based on the defined area on the screen; and

presenting stored authentication details when the screen buffer regions match a related stored region which is paired with a region of the screen.

2. The method of claim 1, wherein the authentication details comprise a user name and a password.

3. The method of claim 2, further comprising comparing one of the screen buffer regions, as displayed to the user, with a set of stored regions.

4. The method of claim 3, further comprising presenting appropriate authentication details to simulate a manual user input after comparing the screen buffer regions with the set of the stored regions.

5. The method of claim 4, further comprising storing a region for which the user provides login details.

6. The method of claim 1, wherein the defined area is a rectangle.

7. The method of claim 6, wherein the defined area is stored for later pattern matching.

8. The method of claim 7, wherein a plurality of defined areas which are rectangles are provided, and regions of the screen bound by the rectangles are stored in a repository of previously captured regions.

9. The method of claim 8, wherein the regions of the screen bound by the rectangles are recognized during the pattern matching.

10. The method of claim 9, further comprising automatically entering a previously recorded username and password into the regions of the screen bound by the rectangles based on determining which of a plurality of stored passwords need to be presented to the user.

11. The method of claim 10, further comprising automatically submitting a username and password from a password repository upon recognition of the pattern matching of the regions of the screen, wherein the password repository includes bit map regions for the username and password.

12. The method of claim 9, wherein the pattern matching of regions of screen pixels comprises:

matching regions of screen pixels against the repository of previously captured regions of screen pixels, wherein the repository includes bit map regions from previous training by the user; and

submitting a username and password for authentication based on the regions of screen pixels matching the previously captured regions of screen pixels.

13. The method of claim 10, further comprising generating a new password for a login area on behalf of the user in response to the user notifying that a previous one of the plurality of passwords has expired.

14. The method of claim 13, further comprising prompting the user that the previous one of the plurality of passwords has expired.