Graphical image authentication and security system

• US 8,812,861 B2
• Filed: 01/14/2011
• Issued: 08/19/2014
• Est. Priority Date: 05/24/2006
• Status: Active Grant

• Current Assignee: Defenders of the American Dream LLC
• Original Assignee: Confident Technologies, Inc.
• Inventors: Osborn, Steven L., Davis, Nicholas A., Sontag, James L., Norvell, Joel
• Primary Examiner(s): HERZOG, MADHURI R
• Application Number:
  US13/007,277
• Publication Number:
  US 20120023574A1
• Time in Patent Office: 1,313 Days
• Field of Search: 726 1- 8, 726 16- 21, 726 26- 30, 713168-170, 713182-185, 340 51- 586
• US Class Current: 713/182
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A method and system for protection of and secure access to a computer system or computer network. The method includes the steps of receiving a first login account identifier, such as a user name from a user in communication with the computer system or network. A determination is made if the user is recognized and enrolled from the first login account from the first login account identifier. If the user is recognized, a grid of randomly generated visual images is displayed including one visual image from an image category which has been preselected by the user upon enrollment. An image category identifier is randomly assigned to each visual image in the grid. An image category identifier, second login account identifier, such as a password, is entered and received. If the login account identifier and the image category is validated, access is permitted to the computer system or network.

Claims

1. A method for authenticating identity to a computer system, which method comprises:

receiving a first login account identifier from a user in communication with said computer system;

determining if said user is recognized and enrolled from said first login account identifier;

generating and displaying a randomly generated grid of images, wherein at least one of said images include a link to products or services sponsored by advertisers;

wherein the grid of images comprises at least one image selected from an authenticating image category, wherein the authenticating image category comprises a plurality of unique images, wherein the authenticating image category is pre-selected by the user, wherein the pre-selection occurs during enrollment, wherein the pre-selection allows the user to memorize the authenticating image category;

receiving at least one image identifier from said user; and

authenticating identity to said computer system upon validation of said at least one image identifier.

2. A method for authenticating identity to a computer system as set forth in claim 1 wherein said first login account identifier is a username.

3. A method for authenticating identity to a computer system as set forth in claim 1 wherein said at least one image identifier is generated by the user according to one or more authenticating image categories pre-selected by said user during the enrollment process.

4. A method for authenticating identity to a computer system as set forth in claim 1 wherein said image is randomly generated.

5. A method for authenticating identity to a computer system as set forth in claim 1 wherein the positions of said authenticating image categories within said grid are randomly determined.

6. A method for authenticating identity to a computer system as set forth in claim 1 wherein the size of said grid is variable.

7. A method for authenticating identity to a computer system as set forth in claim 1 wherein the images include animated images, videos, or other multimedia.

8. A method for authenticating identity to a computer system as set forth in claim 1 further comprising receiving a second account identifier from said user in communication with said computer system.

9. A method for authenticating identity to a computer system as set forth in claim 8 wherein said second account identifier is a password.

10. A method for authenticating identity to a computer system as set forth in claim 1 wherein said at least one image identifier requires multiple image identifiers.

11. A computer implemented authentication method comprising:

pre-selecting at least one authenticating image category, the authenticating image category comprising a plurality of unique images;

pre-selecting an account identifier for authentication;

displaying a grid of randomly selected images, each image having a randomly selected unique image identifier associated therewith, wherein at least one of the randomly selected images comprises a link to an advertisement;

wherein at least one of the images displayed on the grid is selected from the at least one authenticating image category, wherein the authenticating image category is pre-selected by the user, wherein the pre-selection occurs during enrollment, wherein the pre-selection allows the user to memorize the authenticating image category;

receiving at least one unique image identifier associated with at least one of the images displayed on the grid; and

verifying the received unique image identifier corresponds to the at least one pre-selected authenticating image category associated with the account identifier.

12. The computer implemented authentication method of claim 11 further comprising pre-selecting an authentication parameter corresponding to the account identifier.

13. The computer implemented authentication method of claim 12 further comprising receiving the authentication parameter and verifying the authentication parameter corresponds to the account identifier.

14. The computer implemented authentication method of claim 11 wherein the grid of randomly selected images comprises at least four images.

15. The computer implemented authentication method of claim 11 wherein the at least one unique image identifier comprises at least one alphanumeric character.

23. The method of claim 11 wherein the authenticating image category is chosen from the group of animals and automobiles.

16. A method for verifying a claimed identity of at least one user of a computer system, the method comprising:

verifying a received unique image identifier corresponds with a pre-selected authenticating image category, wherein the pre-selected authenticating image category and an account identifier are previously selected by the at least one user and stored in the computer system and wherein the authenticating image category comprises a plurality of unique images;

wherein at least one of the unique images comprises a link to an advertisement, and permitting access to the computer system when there is a match between the received unique image identifier corresponding to the image from the pre-selected authenticating image category to the account identifier, wherein the authenticating image category is pre-selected by the user, wherein the pre-selection occurs during enrollment, wherein the pre-selection allows the user to memorize the authenticating image category.

17. A method for verifying identity of a plurality of users of a computer system, the method comprising:

each user pre-selecting an account identifier and at least one authenticating image category wherein the authenticating image category comprises a plurality of unique images, wherein at least one of the unique images comprises a link to an advertisement;

generating a grid of randomly selected images when a user attempts to access the computer system, wherein at least one of the randomly selected images is from the at least one pre-selected authenticating image category and wherein each image corresponds to a unique randomly assigned image identifier, wherein the authenticating image category is pre-selected by the user, wherein the pre-selection occurs during enrollment, wherein the pre-selection allows the user to memorize the authenticating image category;

receiving an input comprising at least one of the unique image identifiers, wherein the user input is selected from the group consisting of alphanumeric characters, clicks, touches, and gestures;

comparing the at least one image category associated with the received at least one unique image identifier with the account identifier of the user attempting to access the computer system; and

permitting the user to access the computer system when there is a match between the at least one image category associated with the at least one received unique image identifier and the at least one authenticating image category pre-selected by the user.

18. The method of claim 17 further comprising allowing at least one of the plurality of users to pre-select an authentication parameter corresponding to its account identifier, wherein the received input from the at least one of the plurality of users further comprises the authentication parameter, the method comprising:

permitting the user to access the computer system when there is a match between the at least one authenticating image category associated with the at least one received unique image identifier, the authenticating image category pre-selected by the user, and between the received authentication parameter and the authentication parameter pre-selected by the user.

19. The method of claim 18 wherein the authentication parameter comprises a password.

20. The method of claim 17 wherein a first user pre-selects a plurality of authenticating image categories in a predetermined sequence and wherein the received input comprises a plurality of unique image identifiers, the method further comprising:

permitting the first user to access the computer system when there is a match between the sequence of authenticating image categories associated with the sequence of received unique image identifiers and the sequence of authenticating image categories pre-selected by the user.

21. The method of claim 20 wherein a second user pre-selects an authentication parameter corresponding to its account identifier, wherein the received input from the second user further comprises the authentication parameter, the method comprising:

permitting the second user to access the computer system when there is a match between the at least one authenticating image category associated with the at least one received unique image identifier, the image category pre-selected by the second user, and between the received authentication parameter and the authentication parameter pre-selected by the second user.

22. The method of claim 20 wherein a second user pre-selects a plurality of authenticating image categories in a predetermined sequence and length different from the predetermined plurality of pre-selected authenticating image categories of the first user.