Point and click authentication

A system comprising:

• an electronic device with a display;
• a processor;
• and
• a computer-readable storage medium comprising instructions that upon execution
• by the processor cause the system to perform operations, the operations
• comprising:
• sending an access request identifying a protected resource to an access service associated with a host server, the access request including an identifier;
• in response, receiving a user interface from the access service that includes a plurality of graphical objects for presentation at random locations on the display as defined by a first object map, wherein:
• the plurality of graphical objects includes a set of user-defined objects associated with the identifier that define a graphical password based on a sequence-based criterion that specifies an order for selecting each user-defined object among the set of user-defined objects,
• the graphical password is further defined by a behavior-based criterion that specifies a characteristic of an interaction for selecting at least one user-defined object among the set of user-defined objects,
• each user-defined object among the set of user-defined objects shares a common visual attribute,
• the first object map comprises a graphical object display position mapping data that is stored and accessed at the user interface, and
• configuration information is stored in the first object map that represents a location in which a display position of a particular graphical object within the user interface is mapped to that graphical object;
• recording input data including an input event for each detected interaction with the user interface while presenting the user interface on the display, each input event identifying a position on the display at which a corresponding interaction was detected;
• determining, based on the input data, location data comprising a location of selected graphical objects of the plurality of graphical objects based on each position on the display;
• sending the location data of the input data including each recorded input event to the access service, wherein the access service determines whether the input data satisfies the graphical password using the configuration information in the first object map;
• and
• receiving access to the protected resource when the access service determines that the input data satisfies the graphical password using the first object map that defines randomly assigned positions for presenting the plurality of graphical objects on the display.

A non-transitory computer-readable storage medium, storing program instructions that upon execution by a processor of a computing device, cause the computing device to perform operations comprising:

• at an access service associated with a host server:
• generating a user interface that includes a plurality of graphical objects for presentation at random locations on a display of a client device as defined by a first object map, wherein:
• the plurality of graphical objects includes a set of user-defined objects associated with an identifier that define a graphical password based on a sequence-based criterion that specifies an order for selecting each user-defined object among the set of user-defined objects,
• the graphical password is further defined by a behavior-based criterion that specifies a characteristic of an interaction for selecting at least one user-defined object among the set of user-defined objects,
• each user-defined object among the set of user-defined objects share a common visual attribute, and
• the first object map comprises a graphical object display position mapping data that is stored and accessed at the user interface;
• storing configuration information in the first object map that represents a location in which a display position of a particular graphical object within the user interface is mapped to that graphical object;
• receiving input data including an input event for each interaction with the user interface that the client device detects, the input event for each interaction identifying a position on the display at which a corresponding interaction was detected;
• determining, based on the input data, location data comprising a location of selected graphical objects of the plurality of graphical objects based on each position on the display;
• determining that the location data of the input data satisfies the graphical password using the configuration information in the first object map;
• and
• in response to determining that the input data satisfies the graphical password, granting access to a protected resource.