Methods and systems for graphical image authentication

• US 8,117,458 B2
• Filed: 02/21/2008
• Issued: 02/14/2012
• Est. Priority Date: 05/24/2006
• Status: Active Grant

• Current Assignee: Defenders of the American Dream LLC
• Original Assignee: Vidoop LLC
• Inventors: Davis, Nicholas A., Sontag, James L., Norvell, Joel, Osborn, Steven L. III
• Primary Examiner(s): TRAN, ELLEN C
• Application Number:
  US12/035,377
• Publication Number:
  US 20080244700A1
• Time in Patent Office: 1,454 Days
• Field of Search: 726/2, 713/183, 713/184
• US Class Current: 713/183
• CPC Class Codes: G06F 21/36 by graphic or iconic representation

Abstract

Systems and methods for providing authentication using an arrangement of dynamic graphical images, which may display a popup element while a pointing device indicator is over a graphical image. The graphical images can be arranged as a grid or matrix for presentation on a device display for authentication of a user. The kinds of graphical images can be derived from a designated authentication category and non-authenticating categories. A series of password elements corresponding to the graphical images can be displayed with the graphical images. The user may enter the series of one or more password elements corresponding to graphical images from the authentication category which combine to form a password entry. An authentication server can compare the password entry to an authentication password corresponding to the particular arrangement of dynamic graphical images. The selection of graphical images, their arrangement and their corresponding password elements, may dynamically change in between authentication processes.

Claims

1. A method for authenticating a user comprising the following steps of:

generating a one-time password by generating an authenticating reference code that is displayed in a dynamic graphical arrangement of at least two images wherein each image has a corresponding access code that is displayed to the user,

wherein the dynamic graphical arrangement of images comprises;

at least one image selected from an authenticating category of graphical images, wherein the authenticating category of graphical images is preselected by the user from a plurality of different image categories and the specific image for each category is chosen randomly from a plurality of images for the specific category, and

at least one image selected from a non-authenticating category of graphical images;

presenting the dynamic graphical arrangement of images to a user;

receiving as input from the user one or more access codes corresponding to images from the authenticating category of graphical images; and

comparing the one or more access codes received from the user to the authenticating reference code to authenticate the user.

2. The method for authenticating a user as recited in claim 1 further comprising:

denying access to the user if the input is determined not to match the authentication reference code.

3. The method for authenticating a user as recited in claim 1, wherein the dynamic graphical arrangement is presented on a display corresponding to a computer device that provides user access to confidential information.

4. The method for authenticating a user as recited in claim 1, wherein the dynamic graphical arrangement of graphical images comprises images that are presented to the user for a purpose in addition to authenticating the user.

5. The method for authenticating a user as recited in claim 4, wherein the purpose in addition to authenticating the user is advertising.

6. The method for authenticating a user as recited in claim 1, wherein the dynamic graphical arrangement of images is presented to the user on a mobile device display.

7. The method for authenticating a user as recited in claim 1, wherein the images selected from an authenticating category of graphical images are randomly arranged within the dynamic graphical arrangement of images.

8. The method for authenticating a user as recited in claim 1, wherein the access codes for the images selected from the authenticating category are randomly selected.

9. The method for authenticating a user as recited in claim 1, wherein the images from the authenticating category are randomly selected from a database of images for that specific category.

10. The method for authenticating a user as recited in claim 1, wherein the one or more access codes are randomly selected and not known to the user beforehand.

11. The method for authenticating a user as recited in claim 1, wherein the dynamic graphical arrangement of images comprises two or more different authenticating categories of graphical images preselected by the user.

12. A method for authenticating a user comprising the following steps:

generating a one-time password that is associated with a dynamic graphical arrangement of at least two images wherein each image has a corresponding access code, wherein the dynamic graphical arrangement of images comprises;

at least one image selected from an authenticating category of graphical images, wherein the authenticating category of graphical images is preselected by the user from a plurality of different image categories and the specific image for each category is chosen randomly from a plurality of images for the specific category, and at least one image selected from a non-authenticating category of graphical images;

presenting the dynamic graphical arrangement of images for display on a device display;

receiving a password entry from a user comprising one or more access codes corresponding to the authenticating category images in the dynamic graphical arrangement of images; and

authenticating the user when the password entry matches the one-time password.

13. The method for authenticating a user as recited in claim 12, wherein the graphical images relate to sponsored messages or advertisements.

14. The method for authenticating a user as recited in claim 12, wherein the password elements are formed of one or more alphanumeric characters or symbols.

15. The method for authenticating a user as recited in claim 12, wherein the user is authenticated only when the password elements are entered by the user in a specific sequence.

16. The method for authenticating a user as recited in claim 12, wherein the user is authenticated regardless of the order in which the password elements are entered by the user.

17. The method for authenticating a user as recited in claim 12, wherein the device display is for a Web enabled computer or mobile device.

18. The method for authenticating a user as recited in claim 12, wherein a specific image is static and presented again during a subsequent authentication process.

19. A computer system having a computer readable medium, wherein the medium is not a signal, that stores a computer program with machine readable instructions for carrying out the method for authenticating a user as recited in claim 12.

20. A graphical interface for user authentication and advertising comprising:

a dynamic graphical image grid that includes an authenticating reference code and each image on the dynamic graphic image grid has a corresponding access code that is displayed to the user,

wherein the dynamic image grid comprises a plurality of advertisements, wherein the plurality of advertisements comprises at least one image selected from an authenticating category of graphical images, wherein the authenticating category of graphical images is preselected by the user from a plurality of different image categories and the specific image for each category is chosen randomly from a plurality of images for the specific category, and at least one image selected from a non-authenticating category of graphical images,

receiving as input from the user one or more access codes corresponding to images from the authenticating category of graphic images;

comparing the one or more access codes received from the user to the authenticating reference code to authenticate the user;

and

a popup element displayed while a pointing device indicator is over at least one of the advertisements.

21. The graphical interface as recited in claim 20, wherein the dynamic graphical image grid is configured as a three by three grid.

22. The graphical interface as recited in claim 20, wherein the authenticating category of graphical images is selected by a user during an enrollment process.

23. The graphical interface as recited in claim 20, wherein the plurality of advertisements are randomly arranged within the dynamic graphical image grid.

24. The graphical interface as recited in claim 20, wherein the plurality of advertisements are different during each rendering of the dynamic graphical image grid, and wherein password elements for each graphical image are different during each rendering of the dynamic graphical image grid.

25. The graphical interface as recited in claim 20, wherein the positioning of the plurality of advertisements within the dynamic graphical image grid are different during each rendering of the dynamic graphical image grid.