Authentication without inputting passwords
AssigneeInternational Business Machines Corporation
InventorsHe Huang, Shi Peng Li, Jin Hong Fu, Shi Chong Ma
Life of this patent
Estimating the term…
Abstract
The present disclosure provides a computer-implemented method, computer system and computer program product for user authentication. According to the method, identity information can be received from a user, and a plurality of questions can be presented to the user, the plurality of questions comprising one or more valid questions generated based on a password related to the identity information and one or more invalid questions. Then, an input can be received from the user, and in response to the input corresponding to the one or more valid questions, the user can be authenticated based on the input.
Claims19
A computer-implemented method comprising:
- receiving identity information from a user;
- presenting a plurality of questions to the user, wherein the plurality of questions includes one or more valid questions generated based on a password related to the identity information and one or more invalid questions, wherein the one or more valid questions are generated according to one or more attributes of the password, wherein one of the one or more attributes includes positions of characters in the password, wherein one or more of the plurality of questions are generated based on selecting different characters of the password to be verified;
- receiving an input from the user, wherein the input does not include the password;
- and
- in response to the input corresponding to the one or more valid questions, authenticating the user based on the input.
A computer system comprising:
- a processor;
- a computer-readable memory coupled to the processor, the computer-readable memory comprising instructions that when executed by the processor perform actions of:
- receiving identity information from a user;
- presenting a plurality of questions to the user, wherein the plurality of questions includes one or more valid questions generated based on a password related to the identity information and one or more invalid questions, wherein the one or more valid questions are generated according to one or more attributes of the password, wherein one of the one or more attributes includes positions of characters in the password, wherein one or more of the plurality of questions are generated based on selecting different characters of the password to be verified;
- receiving an input from the user, wherein the input does not include the password;
- and
- in response to the input corresponding to the one or more valid questions, authenticating the user based on the input.
A computer program product, comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform actions of:
- receiving identity information from a user;
- presenting a plurality of questions to the user, wherein the plurality of questions includes one or more valid questions generated based on a password related to the identity information and one or more invalid questions, wherein the one or more valid questions are generated according to one or more attributes of the password, wherein one of the one or more attributes includes positions of characters in the password, wherein one or more of the plurality of questions are generated based on selecting different characters of the password to be verified;
- receiving an input from the user, wherein the input does not include the password;
- and
- in response to the input corresponding to the one or more valid questions, authenticating the user based on the input.
Dependencies are inferred from the claim text.