Kill switch security method and system

• US 9,189,603 B2
• Filed: 05/04/2012
• Issued: 11/17/2015
• Est. Priority Date: 05/24/2006
• Status: Expired due to Fees

• Current Assignee: Defenders of the American Dream LLC
• Original Assignee: Confident Technologies, Inc.
• Inventors: Yudkin, Roman O., Staker, Joshua T., Goldbach, William M., Staker, Curtis H.
• Primary Examiner(s): HERZOG, MADHURI R
• Application Number:
  US13/464,734
• Publication Number:
  US 20130117813A1
• Time in Patent Office: 1,292 Days
• Field of Search: 726 1- 21, 726 26- 30, 713168-175, 713182-186, 3 1- 21, 3 26- 30
• US Class Current: 1/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

The present invention provides, in at least one embodiment, a system and method to bolster website and mobile authentication providing an additional security layer for access to password protected information. An authorized user is asked to select a kill switch, including one or more image categories or alphanumeric characters that the authorized user would never select while inputting their password. If the kill switch is entered once or too many times, as defined and specified ahead of time by a set of rules and conditions, during password entry, the kill switch kills the password entry operation. User input can be evaluated at the time of entry according to these rules by a rule processing decision engine. Killing the operation can include taking one or more actions, such as locking out the user, sending a notification of breach, and cataloging information about the source of the breach.

Claims

1. A method for preventing access to a computer system, the method comprising the steps of:

selecting, by an authorized user of the computer system, a kill switch image category comprising an image category that an authorized user of a computer system would not input during an image based authentication session on the computer system;

displaying, by the computer system, during the image based authentication session, a plurality of images including an image corresponding to the kill switch image category;

receiving, by the computer system, during the image based authentication session, an input corresponding to an image from the plurality of displayed images from a non-authorized user;

determining, by the computer system, that the input is associated with the image corresponding to the kill switch image category; and

locking out the non-authorized user from the computer system.

2. The method of claim 1, wherein the input comprises an alphanumeric character associated with the image corresponding to kill switch image category.

3. The method of claim 1, further comprising the step of sending a discrete notification of breach to the authorized user or a security professional.

4. The method of claim 1, wherein the image based authentication session is implemented on a computer or smartphone.

7. The method of claim 1, wherein the kill switch image category is selected to prevent brute force attacks and dictionary attacks.

5. A method for preventing access to a computer system, the method comprising the steps of:

pre-selecting, by an authorized user of the computer system, an image category to prevent unauthorized access to the computer system;

storing, at a computer, the pre-selected image category that an authorized user of a computer system would not input during an image based authentication session;

displaying, by the computer system, during the image based authentication session, a plurality of images including an image corresponding to the pre-selected image category;

receiving, at the computer system, a selection of an image from the plurality of images;

receiving, at the computer system, an indication that a non-authorized user attempting authentication to the computer system has selected an image corresponding to the pre-selected image category during the image based authentication session; and

locking out the non-authorized user from the computer system.

6. The method of claim 5, wherein the indication is received from a computer or smartphone.

8. The method of claim 5, wherein the pre-selected image category to prevents brute force attacks and dictionary attacks.

9. A method for preventing access to a computer system, the method comprising the steps of:

selecting, by a human user of the computer system, a kill switch image category comprising an image category that a human user of the computer system would not enter during a CAPTCHA test;

displaying, at the computer system during a CAPTCHA test, a plurality of images including an image corresponding to the kill switch image category;

receiving, by the computer system, during the CAPTCHA test, an input corresponding to an image from the plurality of displayed images;

receiving, by the computer system, during the CAPTCHA test, an indication that the image corresponding to the kill switch image category has been selected; and

locking the computer system.