# US 2014/0157382 A1 · Observable authentication methods and apparatus

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2014/0157382 A1
- Document ID: US20140157382A1
- Status: Published application
- Kind: A1
- Application number: 13/837,767
- Filed: 2013-03-15
- Published: 2014-06-05
- Earliest claimed: 2012-11-30
- Assignees: SunStone Information Defense, Inc.
- Applicants: Sunstone Information Defense, Inc.
- Inventors: David K. Ford
- Web page: https://patentgrep.com/patent/US20140157382A1

## CPC

- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- G06F 21/36: by graphic or iconic representation
- H04W 12/06: Authentication
- H04W 12/128: Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
- G06F 2221/031: Protect user input by software means
- H04W 12/77: Graphical identity
- H04W 88/02: Terminal devices
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A system, method, and apparatus for providing observable authentication are disclosed. An example method includes receiving a request from a user to access an account, the request including an identifier associated with the user, determining a secret login rule previously provided to the user, and transmitting observable information to be displayed in a login map by a client device associated with the user. The example method also includes determining a correct answer by analyzing the positioning of the displayed observable information within the login map in conjunction with the secret login rule associated with the user. The example method further includes receiving an answer from the client device and providing the user access to the account responsive to the answer matching the correct answer.

## Claims

### Claim 1

A method comprising:
receiving a request from a user to access an account, the request including an identifier associated with the user;
determining a secret login rule previously provided to the user based on the identifier;
transmitting observable information to be displayed in a login map by a client device associated with the user;
determining a correct answer by analyzing the positioning of the displayed observable information within the login map in conjunction with the secret login rule associated with the user;
receiving an answer from the client device; and
providing the user access to the account responsive to the answer matching the correct answer.

### Claim 2 (depends on 1)

The method of claim 1, wherein the secret login rule specifies how the observable information in a login map is to be observed by the user to receive access to an account.

### Claim 3 (depends on 1)

The method of claim 1, further comprising prior to transmitting the observable information, generating the observable information using the secret login rule in conjunction with a random character generator.

### Claim 4 (depends on 1)

The method of claim 1, wherein the observable information in conjunction with the login map includes a graphical representation of at least one of characters, letters, numbers, and symbols arranged in a pattern.

### Claim 5 (depends on 1)

The method of claim 1, further comprising:
receiving a second request from a second user to access a second account, the second request including a second identifier associated with the second user and the second account hosted by a same entity as the first account;
determining a second secret login rule previously provided to the second user, the second secret login rule being different from the secret login rule provided to the user;
transmitting a second observable information to be displayed in the login map by a second client device associated with the second user, the second observable information being different from the observable information;
determining a second correct answer by comparing the positioning of the displayed second observable information within the login map in conjunction with the second secret login rule; and
responsive to determining that a second answer received from the second client device matches the second correct answer, providing the second user access to the second account.

### Claim 6 (depends on 1)

The method of claim 1, further comprising:
responsive to determining that the answer received from the client device does not match the correct answer, transmitting second observable information to be displayed in the login map;
determining a second correct answer by comparing the positioning of the displayed second observable information within the login map in conjunction with the secret login rule;
receiving a second answer from the client device; and
providing the user access to the account responsive to the second answer matching the second correct answer.

### Claim 7 (depends on 1)

The method of claim 1, further comprising transmitting the observable information in conjunction with the login map to the client device.

### Claim 8 (depends on 1)

The method of claim 1, further comprising:
determining a second secret login rule previously provided to the user based on the identifier; and
determining the correct answer by analyzing the positioning of the displayed observable information within the login map in conjunction with the secret login rule and the second secret login rule,
wherein information generated from the secret login rule is to be applied to the second secret login rule.

### Claim 9

A machine-accessible device having instructions stored thereon that, when executed, cause a machine to at least:
receive a request from a user to create an account;
receive a selection of a level of security from the user;
determine a secret login rule for the user based on the selected level of security, the secret login rule corresponding to a type of login map used to provide access to the account; and
transmit the secret login rule to the user.

### Claim 10 (depends on 9)

The machine-accessible device of claim 9, further comprising instructions stored thereon that are configured when executed to cause the machine to responsive to prompting the user, receiving at least one of a user name and password for the account.

### Claim 11 (depends on 9)

The machine-accessible device of claim 9, wherein the secret login rule is transmitted to use via at least one of an e-mail, a text message, or a physical document.

### Claim 12 (depends on 9)

The machine-accessible device of claim 9, further comprising instructions stored thereon that are configured when executed to cause the machine to:
select a first type of login map responsive to the user selecting a nominal level of security; and
select a second type of login map different from the first type of login map responsive to the user selecting a relatively greater level of security,
wherein a first secret login rule corresponding to the first type of login map includes fewer steps the user is to perform to determine an answer compared to a second secret login rule corresponding to the second type of login map.

### Claim 13 (depends on 9)

The machine-accessible device of claim 9, wherein
the first type of login map includes a grid of characters,
the first secret login rule includes at least one secret square within the grid,
the second type of login map includes a key, a first rotary wheel, and a second rotary wheel, and
the second secret login rule includes a starting position of an inner ring of the first rotary wheel, a first step to determine an ending position in an outer ring of the first rotary wheel based on the key, and a second step to determine an answer based on a comparison of the ending position with the starting position.

### Claim 14 (depends on 9)

The machine-accessible device of claim 9, further comprising instructions stored thereon that are configured when executed to cause the machine to determine for the secret login rule at least one action the user is to perform based at least in part on the type of login map.

### Claim 15 (depends on 14)

The machine-accessible device of claim 14, wherein the action includes at least one of a calculation, a comparison, a reference to other information, and a movement to a location on a login map.

### Claim 16

A system comprising:
a server configured to:
host a service for authorized users; and
receive a request from a client device associated with a user to access an account for the service, the request including an identifier associated with the user;
a security processor communicatively coupled to the server and configured to:
determine a secret login rule previously provided to the user based on the identifier;
determine a login map associated with the account of the user;
generate observable information based at least in part on the secret login rule and the login map;
transmit the observable information and the login map to the client device;
determine a correct answer by analyzing the positioning of the observable information within the login map in conjunction with the secret login rule; and
responsive to determining that a answer received from the client device matches the correct answer, instructing the server to provide the client device access to the account for the service.

### Claim 17 (depends on 16)

The system of claim 16, wherein the observable information and the login map are transmitted from the server to the client device and the server receives the answer from the client device.

### Claim 18 (depends on 16)

The system of claim 16, wherein the security processor is integrated with the server.

### Claim 19 (depends on 16)

The system of claim 16, wherein the security processor is remotely located from the server in a cloud computing environment.

### Claim 20 (depends on 16)

The system of claim 16, wherein the client device is configured to:
transmit the observable information to a card that includes the secret login rule; and
receive the answer from the card.