Using multi-touch gestures to protect sensitive content using a completely automated public turing test to tell computers and humans apart (CAPTCHA)

• US 8,214,891 B2
• Filed: 03/26/2008
• Issued: 07/03/2012
• Est. Priority Date: 03/26/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Seacat, Lisa Anne
• Primary Examiner(s): McNally, Michael S
• Application Number:
  US12/055,923
• Publication Number:
  US 20090249476A1
• Time in Patent Office: 1,560 Days
• Field of Search: 726/17
• US Class Current: 726/17
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha

Abstract

The invention described herein uses a multi-touch manager for authorizing multi-touch devices by first providing a multi-touch test to a multi-touch device. In turn, the multi-touch manager receives a multi-touch response from the multi-touch device. The multi-touch manager then compares the multi-touch response with a multi-touch answer and authorizes the device based upon the comparison.

Claims

1. A machine-implemented method comprising:

receiving a page request from a multi-touch device;

providing a multi-touch test to the multi-touch device in response to receiving the page request, wherein the multi-touch test includes an image and one or more instructions that specify an action to perform on the image requiring a user to simultaneously contact a display at a plurality of locations corresponding to the image;

receiving a multi-touch response from the multi-touch device, the multi-touch response corresponding to the multi-touch test;

comparing the multi-touch response with a multi-touch answer for the multi-touch test; and

authorizing the device based upon the comparison.

2. The method of claim 1 wherein the multi-touch test is based upon a Completely Automated Public Turing test to tell Computers and Humans Apart (CAPTCHA).

3. The method of claim 1 further comprising:

retrieving multi-touch answer parameters, wherein the multi-touch answer parameters dictate an acceptable range of the multi-touch test answer;

comparing the multi-touch response with the multi-touch answer parameters; and

authorizing the device in response to the multi-touch response falling within the multi-touch answer parameters.

4. The method of claim 1 further comprising:

in response to not authorizing the multi-touch device, determining whether a maximum number of multi-touch tests have been sent to the multi-touch device;

in response to determining that a maximum number of multi-touch tests have not been sent to the multi-touch device, sending a subsequent multi-touch test to the multi-touch device.

5. The method of claim 4 further comprising:

in response to determining that a maximum number of multi-touch tests have not been sent to the multi-touch device, selecting a second multi-touch test;

identifying that the second multi-touch test has already been sent to the multi-touch device;

in response to identifying that the second multi-touch test has already been sent to the multi-touch device, selecting the subsequent multi-touch test;

identifying that the subsequent multi-touch test has not been sent to the multi-touch device; and

sending the subsequent multi-touch test to the multi-touch device in response to identifying that the subsequent multi-touch test has not been sent to the multi-touch device.

6. The method of claim 1 wherein the multi-touch response is selected from the group consisting of zooming in on an object and rotating an object.

7. A peripheral device comprising:

one or more processors;

a memory accessible by at least one of the processors;

a nonvolatile storage area accessible by at least one of the processors;

a set of instructions stored in the memory and executed by at least one of the processors in order to perform actions of;

receiving a page request from a multi-touch device;

providing a multi-touch test to the multi-touch device in response to receiving the page request, wherein the multi-touch test includes an image and one or more instructions that specify an action to perform on the image requiring a user to simultaneously contact a display at a plurality of locations corresponding to the image;

receiving a multi-touch response from the multi-touch device, the multi-touch response corresponding to the multi-touch test;

comparing the multi-touch response with a multi-touch answer for the multi-touch test; and

authorizing the device based upon the comparison.

8. The peripheral device of claim 7 wherein the set of instructions performs actions of:

retrieving multi-touch answer parameters, wherein the multi-touch answer parameters dictate an acceptable range of the multi-touch test answer;

comparing the multi-touch response with the multi-touch answer parameters; and

authorizing the device in response to the multi-touch response falling within the multi-touch answer parameters.

9. The peripheral device of claim 7 wherein the set of instructions performs actions of:

in response to not authorizing the multi-touch device, determining whether a maximum number of multi-touch tests have been sent to the multi-touch device;

in response to determining that a maximum number of multi-touch tests have not been sent to the multi-touch device, sending a subsequent multi-touch test to the multi-touch device.

10. The peripheral device of claim 9 wherein the set of instructions performs actions of:

in response to determining that a maximum number of multi-touch tests have not been sent to the multi-touch device, selecting a second multi-touch test;

identifying that the second multi-touch test has already been sent to the multi-touch device;

in response to identifying that the second multi-touch test has already been sent to the multi-touch device, selecting the subsequent multi-touch test;

identifying that the subsequent multi-touch test has not been sent to the multi-touch device; and

sending the subsequent multi-touch test to the multi-touch device in response to identifying that the subsequent multi-touch test has not been sent to the multi-touch device.

11. A computer program product stored in a non-transitory computer readable storage medium, comprising functional descriptive material that, when executed by an information handling system, causes the information handling system to perform actions that include:

receiving a page request from a multi-touch device;

providing a multi-touch test to the multi-touch device in response to receiving the page request, wherein the multi-touch test includes an image and one or more instructions that specify an action to perform on the image requiring a user to simultaneously contact a display at a plurality of locations corresponding to the image;

receiving a multi-touch response from the multi-touch device, the multi-touch response corresponding to the multi-touch test;

comparing the multi-touch response with a multi-touch answer for the multi-touch test; and

authorizing the device based upon the comparison.

12. The computer program product of claim 11 wherein the information handling system further performs actions that include:

retrieving multi-touch answer parameters, wherein the multi-touch answer parameters dictate an acceptable range of the multi-touch test answer;

comparing the multi-touch response with the multi-touch answer parameters; and

authorizing the device in response to the multi-touch response falling within the multi-touch answer parameters.

13. The computer program product of claim 11 wherein the information handling system further performs actions that include:

in response to not authorizing the multi-touch device, determining whether a maximum number of multi-touch tests have been sent to the multi-touch device;

in response to determining that a maximum number of multi-touch tests have not been sent to the multi-touch device, sending a subsequent multi-touch test to the multi-touch device.

14. The computer program product of claim 13 wherein the information handling system further performs actions that include:

in response to determining that a maximum number of multi-touch tests have not been sent to the multi-touch device, selecting a second multi-touch test;

identifying that the second multi-touch test has already been sent to the multi-touch device;

in response to identifying that the second multi-touch test has already been sent to the multi-touch device, selecting the subsequent multi-touch test;

identifying that the subsequent multi-touch test has not been sent to the multi-touch device; and

sending the subsequent multi-touch test to the multi-touch device in response to identifying that the subsequent multi-touch test has not been sent to the multi-touch device.