# US 10,872,135 B2 · User authentication method and authentication system using match with junk data

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,872,135 B2
- Document ID: US10872135B2
- Status: Granted
- Kind: B2
- Application number: 16/077,737
- Filed: 2017-02-13
- Published: 2019-03-14
- Granted: 2020-12-22
- Earliest claimed: 2016-02-16
- Applicants: Myeong Ho Lee
- Inventors: Myeong Ho Lee
- Web page: https://patentgrep.com/patent/US10872135B2

## CPC

- G06F 21/31: User authentication
- G06F 16/90344: {by using string matching techniques}
- G06F 21/46: by designing passwords or checking the strength of passwords
- G06Q 20/308: {using the Internet of Things}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04W 12/06: Authentication
- G06F 2221/2133: Verifying human interaction, e.g., Captcha
- H04L 2463/082: applying multi-factor authentication
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

The present invention relates to a technique of authenticating a user by using junk data randomly generated when a password is inputted. According to the present invention, a password is received from a user and is stored, and it is determined whether a password matches with an original password stored in a memory among junk data and a password inputted together in a user authentication step. At this time, if a password including the junk data matches, by at least a certain length or more, a password including junk data inputted in a previous authentication step, user authentication fails even if the separately extracted passwords match each other, such that security can be further enhanced.

## Claims

### Claim 1

A user authentication method using a user authentication system, the method comprising:
(a) receiving a password comprising junk data from a user where the junk data are comprised before, after, or before and after the password;
(b) extracting the password excluding the junk data from the received password comprising the junk data; and
(c) processing user authentication as a failure even though the extracted password matches a previously stored password when the password comprising the junk data matches, by a critical length, the previously stored password comprising junk data inputted in the past.

### Claim 2 (depends on 1)

The user authentication method of claim 1, wherein in the processing of the user authentication, when the length of the password comprising the junk data inputted from a user is equal to or greater than the critical length, it is determined whether or not the password comprising the junk data matches the previously stored password comprising junk data inputted in the past,
wherein when the length of the password comprising the junk data inputted from a user is less than the critical length, the determination of whether or not the password comprising the junk data matches the previously stored password comprising junk data inputted in the past is omitted, and when the extracted password matches the previously stored password in a storage unit, the user authentication is processed as a success.

### Claim 3 (depends on 1)

The user authentication method of claim 1, wherein in the processing of the user authentication, the critical length is nine or more digits, and
it is determined whether or not the password comprising the junk data matches the previously stored password comprising junk data inputted in the past, wherein when the password comprising the junk data continuously or discontinuously matches, by the critical length, the previously stored password comprising the junk data inputted in the past,
the user authentication is processed as a failure even though the password matches the previously stored password in a storage unit.

### Claim 4 (depends on 1)

The user authentication method of claim 1, wherein a pattern of junk data comprising the password comprises any one of:
a pattern comprising junk data formed of a plurality of digits and a password formed of four or more digits;
a pattern comprising first junk data formed of a plurality of digits, a password formed of four or more digits, and second junk data formed of a plurality of digits; and
a pattern comprising a first password formed of three or more digits, junk data formed of a plurality of digits, and a second password formed of three or more digits.

### Claim 5 (depends on 1)

The user authentication method of claim 1, wherein in the extracting of the password excluding the junk data, one of a string search algorithm, a pattern matching algorithm and a pattern recognition algorithm is used.

### Claim 6 (depends on 1)

The user authentication method of claim 1, after the processing of the user authentication, further comprising:
(d) displaying a message instructing to input only the password excluding junk data; and
(e) determining whether or not the password matches the previously stored password in the storage unit when a password is re-inputted from a user, and when the passwords match each other, the user authentication is processed as a success.

### Claim 7 (depends on 6)

The user authentication method of claim 6, wherein in the determining of whether or not the password matches the previously stored password, when the password re-inputted from a user does not match the previously stored password in the storage unit, a hacking risk warning process is performed.

### Claim 8

A user authentication system using junk data matching, the system comprising:
an input unit receiving a password and junk data from a user;
a storage unit storing instructions to be executed by a processor; and
the processor sequentially executing the instructions loaded on the storage unit,
wherein the processor, if receiving a password comprising junk data from a user where the junk data are comprised before, after, or before and after the password, extracts the password excluding the junk data from the received password comprising the junk data, and processes user authentication as a failure even though the extracted password matches a previously stored password in the storage unit when the password comprising the junk data matches, by a critical length, the previously stored password comprising junk data inputted in the past.

### Claim 9 (depends on 8)

The user authentication system of claim 8, wherein when the length of the password comprising the junk data inputted from a user is equal to or greater than the critical length, the processor determines whether or not the password comprising the junk data matches the previously stored password comprising junk data inputted in the past,
wherein when the length of the password comprising the junk data inputted from a user is less than the critical length, the processor omits the determination of whether or not the password comprising the junk data matches the previously stored password comprising junk data inputted in the past, and
when the extracted password matches the previously stored password in the storage unit, the processor processes the user authentication as a success.

### Claim 10

A user authentication system using junk data matching, the system comprising:
a communication adapter transmitting and receiving data through a network;
a storage unit storing instructions to be executed by a processor; and
the processor sequentially executing the instructions loaded on the storage unit,
wherein the communication adapter receives a password comprising junk data from a remote terminal connected through the network where the junk data are comprised before, after, or before and after the password, and
the processor extracts the password excluding the junk data from the received password comprising the junk data, and processes user authentication as a failure even though the extracted password matches a previously stored password in the storage unit when the password comprising the junk data matches, by a critical length, the previously stored password comprising junk data inputted in the past.

### Claim 11 (depends on 9)

The user authentication system of claim 9, wherein the processor determines whether or not the password comprising the junk data matches the previously stored password comprising junk data inputted in the past, and when the password comprising the junk data continuously or discontinuously matches, by the critical length, the previously stored password comprising the junk data inputted in the past, the processor processes the user authentication as a failure even though the extracted password matches the previously stored password in the storage unit, and
the critical length is nine or more digits.

### Claim 12 (depends on 10)

The user authentication system of claim 10, wherein when the length of the password comprising the junk data inputted from a user is equal to or greater than the critical length, the processor determines whether or not the password comprising the junk data matches the previously stored password comprising junk data inputted in the past,
wherein when the length of the password comprising the junk data inputted from a user is less than the critical length, the processor omits the determination of whether or not the password comprising the junk data matches the previously stored password comprising junk data inputted in the past, and
when the extracted password matches the previously stored password in the storage unit, the processor processes the user authentication as a success.

### Claim 13 (depends on 12)

The user authentication system of claim 12, wherein the processor determines whether or not the password comprising the junk data matches the previously stored password comprising junk data inputted in the past, and when the password comprising the junk data continuously or discontinuously matches, by the critical length, the previously stored password comprising the junk data inputted in the past, the processor processes the user authentication as a failure even though the extracted password matches the previously stored password in the storage unit, and
the critical length is nine or more digits.