# US 12,118,071 B2 · System and user pattern authentication method for preventing smudge and shoulder surfing attack of mobile device

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,118,071 B2
- Document ID: US12118071B2
- Status: Granted
- Kind: B2
- Application number: 17/267,899
- Filed: 2019-03-27
- Published: 2021-07-08
- Granted: 2024-10-15
- Earliest claimed: 2018-08-20
- Assignees: Eyl Inc.
- Applicants: Eyl Inc.
- Inventors: Jung Hyun Baik; Seong Joon Cho; Bu Suk Jeong; Dae Hyun Nam; Kang Won Suh
- Web page: https://patentgrep.com/patent/US12118071B2

## CPC

- G06F 21/36: by graphic or iconic representation
- G06F 3/0488: using a touch-screen or digitiser, e.g. input of commands through traced gestures
- G06F 3/04883: for inputting data by handwriting, e.g. gesture or text
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A pattern authentication method for preventing a smudge and a shoulder surfing attack. The pattern authentication method includes: a pattern registration step; and a pattern authentication step, in which the pattern registration step includes: a step of receiving a pattern from a user by an input unit of a pattern authentication device; a step of matching and storing a code value corresponding to the pattern input from the user by a matching unit; and a step of generating a user KDI (Key Derivation ID) by matching the code value to a quantum random number generated by a quantum random number generator by a KDI generator.

## Claims

### Claim 1

A pattern authentication method for preventing a smudge and a shoulder surfing attack on wired and wireless networks, the pattern authentication method comprising:
a pattern registration step; and
a pattern authentication step,
wherein the pattern registration step includes:
a step of receiving a pattern from a user by an input unit of a pattern authentication device;
a step of matching and storing a code value corresponding to the pattern input from the user by a matching unit; and
a step of generating a user KDI (Key Derivation ID) by matching the code value to a quantum random number generated by a quantum random number generator by a KDI generator,
wherein the pattern authentication step includes:
a step of determining whether a user touches a specific region of the input unit of the pattern authentication device for a predetermined time;
a step in a normal mode is changed into a substitution conversion mode and the code value is changed in accordance with the number of touches by the user and a touch tempo when it is determined that the user has touched the specific region for a predetermined time;
a step of receiving a pattern from the user by the input unit of the pattern authentication device;
a step of matching and storing a code value corresponding to the pattern input by the user by the matching unit; and
a step of generating a user KDI by matching the code value and a quantum random number table by the KDI generator.

### Claim 2 (depends on 1)

The pattern authentication method of claim 1, wherein the specific region is divided into a first region and a second region, first region and the second region are disposed at a side of a lower end portion of a mobile device for convenience of user's left thumb and right thumb, respectively, and a touch event is input from the user through an HOK (Hidden One Click) button that is not shown to the user and shoulder surfing attackers on a touch screen.

### Claim 3 (depends on 2)

The pattern authentication method of claim 2, wherein the specific region is a region that senses a click event of the user on the touch screen of the mobile device.

### Claim 4 (depends on 2)

The pattern authentication method of claim 2, wherein a click event is input by a physical button of the specific region.