System, device, and method of visual login and stochastic cryptography
AssigneeBiocatch Ltd.
InventorsAvi Turgeman, Uri Rivner
Life of this patent
Estimating the term…
Abstract
Devices, systems, and methods of detecting user identity, differentiating between users of a computerized service, and detecting a possible attacker. A log-in process or a user-authentication process, is augmented or enriched by one or more incidental tasks, which force the user to perform additional on-screen interactions or input-unit interactions, which in turn enrich and augment the pool of user interactions from which the system extracts one or more user-specific features. The extracted user-specific features are used as part of the user authentication process, and are further used to differentiate among users.
Claims20
A method comprising:
- (a) generating an interactions-enriched log-in process for authenticating a user of an electronic device, by generating a log-in process that requires the user:
- (i) to enter at least a password, and (ii) to perform an on-screen incidental task that enriches an ability of a user-interactions tracker to extract a user-specific feature from user interactions while performing said on-screen incidental task;
- (b) tracking the user interactions while the user performs said on-screen incidental task of said interactions-enriched log-in process, and extracting from said user interactions a user-specific feature;
- (c) determining that said user is authenticated, based on a combination of both:
- (I) whether the password entered by the user matches a pre-defined reference password,
- and also
- (II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from other interactions of said user.
A system comprising at least a hardware processor which is configured to perform:
- (a) generating an interactions-enriched log-in process for authenticating a user of an electronic device, by generating a log-in process that requires the user:
- (i) to enter at least a password, and (ii) to perform an on-screen incidental task that enriches an ability of a user-interactions tracker to extract a user-specific feature from user interactions while performing said on-screen incidental task;
- (b) tracking the user interactions while the user performs said on-screen incidental task of said interactions-enriched log-in process, and extracting from said user interactions a user-specific feature;
- (c) determining that said user is authenticated, based on a combination of both:
- (I) whether the password entered by the user matches a pre-defined reference password,
- and also
- (II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from other interactions of said user.
Dependencies are inferred from the claim text.