Obscuring visual login

• US 8,650,624 B2
• Filed: 12/16/2010
• Issued: 02/11/2014
• Est. Priority Date: 12/16/2010
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Griffin, Jason Tyler, Fyke, Steven Henry, Riddiford, Martin Philip, Fullalove, Guy James
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Ambaye, Samuel
• Application Number:
  US12/969,797
• Publication Number:
  US 20120159582A1
• Time in Patent Office: 1,153 Days
• Field of Search: 726/5, 726/7, 726/19, 715/741
• US Class Current: 726/5
• CPC Class Codes: G06F 21/36 by graphic or iconic representation

Abstract

A method of authenticating a user of a computing device is proposed, together with computing device on which the method is implemented. In the method a modified base image is overlaid with a modified overlay image on a display and either the modified base image or modified overlay image is moved by the user. A security level requirement is assigned and positive authentication is indicated in response to the base image reference point on the modified base image being aligned with the overlay image reference point on the modified overlay image after the moving in a manner that meets the security level requirement.

Claims

1. One or more non-transitory computer readable media having computer readable instructions stored-thereon for authenticating a user of a computing device, the computing device having a memory storing a base image and an overlay image, the base image having a particular base image reference point, and the overlay image having a particular overlay image reference point, the instructions comprising instructions for:

generating a modified base image, the modified base image including a plurality of base image reference points and the particular base image reference point;

generating a modified overlay image, the modified overlay image including a plurality of overlay image reference points and the particular overlay image reference point;

displaying, on a display, the modified base image overlaid by the modified overlay image;

receiving an input for moving one of the modified base image or the modified overlay image;

moving the one of the modified base image or the modified overlay image in response to the input;

assigning a security level requirement for authenticating the user; and

in response to alignment of the particular base image reference point on the modified base image with the particular overlay image reference point on the modified overlay image after the moving and meeting the security level requirement, indicating positive authentication.

2. The one or more computer readable media of claim 1, wherein assigning the security level requirement comprises assigning a tolerance for aligning the particular overlay image reference point and the particular base image reference point.

3. The one or more computer readable media of claim 1, wherein assigning the security level requirement comprises varying the security level requirement after a failed authentication attempt.

4. The one or more computer readable media of claim 1, wherein the security level requirement comprises receiving a typed input from the user confirming authentication is requested.

5. The one or more computer readable media of claim 1, further comprising instructions for determining that a prior authentication attempt failed and generating at least one of a new modified base image and a new modified overlay image.

6. The one or more computer readable media of claim 1, wherein assigning the security level requirement comprises assigning a minimum distance one of the modified base image and modified overlay image must be moved before aligning the particular base image reference point and the particular overlay image reference point.

7. The one or more computer readable media of claim 1, wherein the security level requirement is a number of reference point pairs that must be aligned in sequence.

8. The one or more computer readable media of claim 1, wherein the security level requirement is assigned based on a user identifier.

9. The one or more computer readable media of claim 1, wherein the security level requirement is assigned based on an application to which access is requested.

10. A method of authenticating a user of a computing device, the computing device having a memory storing a base image and an overlay image, the base image having a particular base image reference point, and the overlay image having a particular overlay image reference point, the method comprising:

generating a modified base image, the modified base image including a plurality of base image reference points and the particular base image reference point;

generating a modified overlay image, the modified overlay image including a plurality of overlay image reference points and the particular overlay image reference point;

displaying, on a display, the modified base image overlaid by the modified overlay image;

receiving an input for moving one of the modified base image or the modified overlay image;

moving the one of the modified base image or the modified overlay image in response to the input;

assigning a security level requirement for authenticating the user; and

in response to alignment of the particular base image reference point on the modified base image with the particular overlay image reference point on the modified overlay image after the moving and meeting the security level requirement, indicating positive authentication.

11. The method of claim 10, further comprising determining if a failed authentication attempt occurred immediately preceding a present authentication attempt and assigning the security level requirement based on the failed authentication attempt.

12. The method of claim 10, wherein the security level requirement is assigned based on a number of failed authentication attempts.

13. The method of claim 10, wherein assigning the security level requirement comprises assigning a tolerance for aligning the overlay image reference point and the base image reference point.

14. The method of claim 10, wherein assigning the security level requirement comprises determining that a prior authentication attempt failed and generating at least one of a new modified base image and a new modified overlay image.

15. A computing device comprising:

a processor;

a display; and

one or more computer readable media having computer readable instructions stored thereon that when executed by the processor implement instructions for authenticating a user of the computing device, the computing device having a memory storing a base image and an overlay image, the base image having a particular base image reference point, and the overlay image having a particular overlay image reference point, the instructions including instructions for;

generating a modified base image, the modified base image including a plurality of base image reference points and the particular base image reference point;

generating a modified overlay image, the modified overlay image including a plurality of overlay image reference points and the particular overlay image reference point;

displaying, on the display, the modified base image overlaid by the modified overlay image;

receiving an input for moving one of the modified base image or the modified overlay image;

moving the one of the modified base image or the modified overlay image in response to the input;

assigning a security level requirement for authenticating the user; and

in response to alignment of the particular base image reference point on the modified base image with the particular overlay image reference point on the modified overlay image after the moving and meeting the security level requirement, indicating positive authentication.

16. The computing device of claim 15, further comprising the memory.

17. The computing device of claim 15, wherein the computer readable media comprises a flash memory.

18. The computing device of claim 15, wherein the display comprises a touch screen and the input is received via the touch screen.

19. The computing device of claim 15, comprising a mobile electronic device.