Secure passcode entry

• US 9,030,293 B1
• Filed: 05/04/2012
• Issued: 05/12/2015
• Est. Priority Date: 05/04/2012
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Carter, Kenneth Russell, Tabak, Joshua Abraham
• Primary Examiner(s): HOLLOWAY III, EDWIN C
• Application Number:
  US13/463,867
• Time in Patent Office: 1,103 Days
• Field of Search: 340/5.54, 340/5.85, 340/5.27
• US Class Current: 340/5.54
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/31 User authentication

Abstract

Methods and devices for presenting a secure passcode system to a user are disclosed. The methods and devices may include a security prompt displayed to a user, wherein the prompt comprises a sequence of passcode elements. The passcode elements may comprise both response-eligible and response-ineligible passcode elements. The security prompt may receive an input from a user and determine whether the response is correct. A correct response may include each of the response-eligible passcode elements and none of the response-ineligible passcode elements. If a correct response is received, the security prompt may permit further access to a function.

Claims

1. A method, comprising:

by an electronic device, presenting a security prompt to a user, wherein the security prompt comprises a sequence of passcode elements, wherein the sequence comprises at least one response-ineligible passcode element and at least one response-eligible passcode element, wherein;

at least one of the response-eligible passcode elements comprises a first haptic emission;

at least one of the response-ineligible passcode elements comprises a second haptic emission that differs from the first haptic emission in length, frequency, or both length and frequency; and

presenting the security prompt to the user comprises causing the electronic device to emit the first and second haptic emissions;

receiving, via an interface of the electronic device, a response to the security prompt;

determining, by the electronic device, whether the response is a correct response by determining whether the response includes each of the response-eligible passcode elements and omits each of the response-ineligible passcode elements based on the length, frequency, or both length and frequency of inputs received via a touch-sensitive screen of the electronic device, and wherein the correct response consists of the sequence of passcode elements with a proxy element replacing each of the response-ineligible passcode elements; and

in response to receiving the correct response, permitting the user to access a function of the electronic device.

2. The method of claim 1, further comprising, by the electronic device:

before the presenting, generating the security prompt, wherein the generating comprises using a randomization function to generate the security prompt.

3. The method of claim 1, further comprising:

before the presenting, generating the security prompt, wherein generating comprises ensuring that the security prompt does not match an immediately-prior security prompt.

4. The method of claim 1, further comprising, before the presenting:

via the interface, receiving from the user a selection of the at least one response-eligible passcode element; and

storing the selection of the at least one response-eligible passcode element in a memory of the electronic device.

6. The method of claim 1, wherein the function comprises at least one of the following:

an application, a website, a device hardware component, an electronic lock, and a remote mechanical component.

16. The method of claim 1, wherein receiving the response to the security prompt comprises receiving a response via a touch-sensitive screen after each emission, wherein the response is correct if the response comprises:

a first number, length or frequency of inputs in response to the first haptic emission; and

a different number, length or frequency in response to the second haptic emission.

5. A method, comprising:

by an electronic device, presenting a security prompt to a user, wherein the security prompt comprises a sequence of passcode elements, wherein the sequence comprises at least one response-ineligible passcode element and at least one response-eligible passcode element, wherein;

at least one of the response-eligible passcode elements comprises a first haptic emission;

at least one of the response-ineligible passcode elements comprises a second haptic emission that differs from the first haptic emission in length, frequency, or both length and frequency; and

presenting the security prompt to the user comprises causing the electronic device to emit the first and second haptic emissions;

receiving, via an interface of the electronic device, a response to the security prompt;

determining, by the electronic device, whether the response is a correct response by determining whether the response includes each of the response-eligible passcode elements and omits each of the response-ineligible passcode elements based on the length, frequency, or both length and frequency of inputs received via a touch-sensitive screen of the electronic device, and wherein the correct response comprises at least one of the following;

the sequence of passcode elements minus the response-ineligible passcode elements not defined by a corresponding proxy element; and

the sequence of passcode elements with a proxy element replacing each of the response-ineligible passcode elements that are defined by a corresponding proxy element; and

in response to receiving the correct response, permitting the user to access a function of the electronic device.

18. The method of claim 5, wherein receiving the response to the security prompt comprises receiving a response via a touch-sensitive screen after each emission, wherein the response is correct if the response comprises:

a first number, length or frequency of inputs in response to the first haptic emission; and

a different number, length or frequency in response to the second haptic emission.

19. The method of claim 5, further comprising, by the electronic device:

before the presenting, generating the security prompt, wherein the generating comprises using a randomization function to generate the security prompt.

20. The method of claim 5, further comprising:

before the presenting, generating the security prompt, wherein generating comprises ensuring that the security prompt does not match an immediately-prior security prompt.

21. The method of claim 5, further comprising, before the presenting:

via the interface, receiving from the user a selection of the at least one response-eligible passcode element; and

storing the selection of the at least one response-eligible passcode element in a memory of the electronic device.

22. The method of claim 5, wherein the function comprises at least one of the following:

an application, a website, a device hardware component, an electronic lock, and a remote mechanical component.

24. The device of claim 22, wherein the security function also comprises:

before the presenting, using a randomization function to generate the security prompt.

25. The device of claim 22, wherein the security function also comprises:

before the presenting, ensuring that the security prompt does not match an immediately-prior security prompt.

26. The device of claim 22, wherein the security function also comprises:

before the presenting, via the interface, receiving from the user a selection of the at least one response-eligible passcode element; and

storing the selection of the at least one response-eligible passcode element in a memory of the electronic device.

27. The device of claim 22, wherein the device function comprises at least one of the following:

an application, a website, a device hardware component, an electronic lock, and a remote mechanical component.

28. The device of claim 22, wherein the instructions that cause the processor to determine whether the response is correct comprise instructions to determine whether the response received via a touch-sensitive screen comprises:

a first number, length or frequency of inputs in response to the first haptic emission; and

a different number, length or frequency in response to the second haptic emission.

7. An electronic device, comprising:

a processor,

a user interface,

a memory containing programming instructions that, when implemented by the processor, cause the processor to implement a security function comprising;

presenting a security prompt to a user, wherein the security prompt comprises a sequence of passcode elements, wherein the sequence comprises at least one response-ineligible passcode element and at least one response-eligible passcode element wherein;

at least one of the response-eligible passcode elements comprises a first haptic emission;

at least one of the response-ineligible passcode elements comprises a second haptic emission that differs from the first haptic emission in length, frequency, or both length and frequency; and

presenting the security prompt to the user comprises causing the electronic device to emit the first and second haptic emissions;

detecting that the user interface has received a response to the security prompt;

determining whether the response is a correct response by determining whether the response includes each of the response-eligible passcode elements and omits each of the response-ineligible passcode elements based on the length, frequency or both length and frequency of inputs received via a touch-sensitive screen of the electronic device, and wherein the correct response consists of the sequence of passcode elements with a proxy element replacing each of the response-ineligible passcode elements; and

in response to receiving the correct response, permitting the user to access a device function of the electronic device.

8. The device of claim 7, wherein the security function also comprises:

before the presenting, using a randomization function to generate the security prompt.

9. The device of claim 7, wherein the security function also comprises:

before the presenting, ensuring that the security prompt does not match an immediately-prior security prompt.

10. The device of claim 7, wherein the security function also comprises:

before the presenting, via the interface, receiving from the user a selection of the at least one response-eligible passcode element; and

storing the selection of the at least one response-eligible passcode element in a memory of the electronic device.

11. The device of claim 7, wherein the device function comprises at least one of the following:

an application, a website, a device hardware component, an electronic lock, and a remote mechanical component.

17. The device of claim 7, wherein the instructions that cause the processor to determine whether the response is correct comprise instructions to determine whether the response received via a touch-sensitive screen comprises:

a first number, length or frequency of inputs in response to the first haptic emission; and

a different number, length or frequency in response to the second haptic emission.

12. A security module for an electronic device, comprising a non-transitory computer-readable device containing program instructions that cause the electronic device to:

present a security prompt to a user, wherein the security prompt comprises a sequence of passcode elements, wherein the sequence comprises at least one response-ineligible passcode element comprising a first vibrating signal and at least one response-eligible passcode element comprising a second vibrating signal that differs from the first vibrating signal;

receive, via an interface of the electronic device, a response to the security prompt;

determine, by the electronic device, whether the response is a correct response by determining whether the response includes each of the response-eligible passcode elements and omits each of the response-ineligible passcode elements based on the length, frequency or both length and frequency of inputs received via a touch-sensitive screen of the electronic device, and wherein the correct response consists of the sequence of passcode elements with a proxy element replacing each of the response-ineligible passcode elements; and

in response to receiving the correct response, permit the user to access a function of the electronic device.

13. The security module of claim 12, wherein the device function comprises at least one of the following:

an application, a website, a device hardware component, an electronic lock, and a remote mechanical component.

14. The security module of claim 12, wherein the instructions further comprise:

before the presenting, via the interface, receive from the user a selection of the at least one response-eligible passcode element; and

store the selection of the at least one response-eligible passcode element in a memory of the electronic device.

15. A security module for an electronic device, comprising a non-transitory computer-readable device containing program instructions that cause the electronic device to:

present a security prompt to a user, wherein the security prompt comprises a sequence of passcode elements, wherein the sequence comprises at least one response-ineligible passcode element comprising a first vibrating signal and at least one response-eligible passcode element comprising a second vibrating signal that differs from the first vibrating signal;

receive, via an interface of the electronic device, a response to the security prompt;

determine, by the electronic device, whether the response is a correct response by determining whether the response includes each of the response-eligible passcode elements and omits each of the response-ineligible passcode elements based on the length, frequency or both length and frequency of inputs received via a touch-sensitive screen of the electronic device, wherein the correct response comprises at least one of the following;

the sequence of passcode elements minus the response-ineligible passcode elements not defined by a corresponding proxy element; and

the sequence of passcode elements with a proxy element replacing each of the response-ineligible passcode elements that are defined by a corresponding proxy element; and

in response to receiving the correct response, permit the user to access a function of the electronic device.

29. The security module of claim 15, wherein the device function comprises at least one of the following:

an application, a website, a device hardware component, an electronic lock, and a remote mechanical component.

30. The security module of claim 15, wherein the instructions further comprise:

before the presenting, via the interface, receive from the user a selection of the at least one response-eligible passcode element; and

store the selection of the at least one response-eligible passcode element in a memory of the electronic device.

23. An electronic device, comprising:

a processor,

a user interface,

a memory containing programming instructions that, when implemented by the processor, cause the processor to implement a security function comprising;

presenting a security prompt to a user, wherein the security prompt comprises a sequence of passcode elements, wherein the sequence comprises at least one response-ineligible passcode element and at least one response-eligible passcode element wherein;

at least one of the response-eligible passcode elements comprises a first haptic emission;

at least one of the response-ineligible passcode elements comprises a second haptic emission that differs from the first haptic emission in length, frequency, or both length and frequency; and

presenting the security prompt to the user comprises causing the electronic device to emit the first and second haptic emissions;

detecting that the user interface has received a response to the security prompt;

determining whether the response is a correct response by determining whether the response includes each of the response-eligible passcode elements and omits each of the response-ineligible passcode elements based on the length, frequency or both length and frequency of inputs received via a touch-sensitive screen of the electronic device, and wherein the correct response comprises at least one of the following;

the sequence of passcode elements minus the response-ineligible passcode elements not defined by a corresponding proxy element; and

the sequence of passcode elements with a proxy element replacing each of the response-ineligible passcode elements that are defined by a corresponding proxy element; and

in response to receiving the correct response, permitting the user to access a device function of the electronic device.