System and method for generating passwords using key inputs and contextual inputs

• US 9,521,142 B2
• Filed: 12/19/2014
• Issued: 12/13/2016
• Est. Priority Date: 02/03/2009
• Status: Active Grant

• Current Assignee: inBay Technologies, Inc.
• Original Assignee: inBay Technologies, Inc.
• Inventors: Xavier, Stanislus K., Steklasa, Robert, Bettenburg, Nicolas, Kuang, Randy
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US14/577,661
• Publication Number:
  US 20150128234A1
• Time in Patent Office: 725 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method and system for automatically generating a new password from user selected characters via key press which are different from the user selected characters. Each key of a keypad can be entered within one or more contexts, manually selected by the user or automatically selected by the described system, such that the same key press within one context provides a unique code different than the same key press within another context. The code corresponding to the proper combination of a key press, the contexts of the selected key press, and the sequence of entry must match the previously stored code set by the user. Context selection is not based on any of the possible key presses selectable on the keypad. Therefore if the password characters are discovered without the context for each character, then it becomes difficult to access the content. The newly generated password can be the same length as the originally entered password, or can be longer or shorter in length than the originally entered password.

Claims

1. A system for generating password data from user input on a computing device, comprising:

a memory device for storing computer executable instructions;

a processor in communication with the memory device;

an interface configurable to operate in one or more of a plurality of different contexts for providing code data corresponding to each entry of a user entered password, the interface including a keypad input interface responsive to key press entries and a sensor for sensing biometric input entries, where a sequence comprising at least one key press entry and at least one biometric input entry corresponds to the user entered password, the interface configured to associate a first context to the at least one key press entry and to automatically associate a second context to the at least one biometric input entry, where the first and second contexts are different; and

,

a password generator receiving the code data and context data corresponding to the contexts during which the code data was entered including the first and second contexts, for converting using the processor the code data and the corresponding context data into a new password.

2. The system of claim 1, wherein the interface includes a feedback generator for providing an indicator in response to selection of either of the one or more contexts.

3. The system of claim 1, wherein the interface includes a context input interface for selecting the one or more contexts.

4. The system of claim 3, wherein the context input interface includes a physical button of the computing device for selecting one or more contexts when depressed.

5. The system of claim 3, wherein the context input interface includes a graphical interface of the computing device for selecting one or more contexts when touched.

6. The system of claim 3, wherein the context input interface includes a sensor of the computing device for selecting one or more contexts when different orientations of the computing device is detected.

7. The system of claim 3, wherein the context input interface includes a biometric sensor for selecting one or more contexts in response to a match between a sensed biometric parameter and a reference parameter.

8. The system of claim 3, wherein the keypad input interface is configurable to operate in one or more contexts, each same key of the keypad interface providing different code data when operating in a different context.

9. The system of claim 8, wherein the password generator includes context mapping tables each selectable by the context input interface for converting received code data corresponding to each entry of a user entered password into new code data different than the received code data.

10. The system of claim 9, wherein a character length of the new password is the same as the user entered password.

11. The system of claim 3, wherein the keypad input interface provides the code data corresponding to each entry of a user entered password, and the context input interface is configured to provide context data corresponding to the selected context for each entry.

12. The system of claim 11, wherein the password generator includes a hash function generator for converting the code data and corresponding context data of the user entered password entries into the new password.

13. The system of claim 12, wherein a character length of the new password is greater than the user entered password.

14. The system of claim 1, wherein the feedback generator includes a graphical display for providing a visual indication in response to selection of either of the one or more contexts.

15. The system of claim 1, wherein the feedback generator includes a haptic feedback system for providing a physical indication in response to the selection of either of one or more contexts.

16. The system of claim 15, wherein the physical indication includes at least one of audible sounds and vibration of the computing device.

17. The system of claim 3, wherein the context input interface includes a context detector for sensing a parameter of an external context, and for automatically setting one or more contexts when an external context is detected.

18. The system of claim 17, wherein the external context can include any one of geographic position, time of day, date, network presence and a biometric.

19. The system of claim 1, wherein different biometric input entries generate different key code data.