Back to results
US 2016/0255059 A1Published application
Secure randomized input
AssigneePaypal, Inc.
InventorHadi Nahari
Life of this patent
Estimating the term…
Abstract
A user inserts a received random sequence into the user's password or PIN. The user enters and transmits this randomized password to a service provider. The service provider extracts the password to determine whether to authenticate the user.
Claims20
A system comprising:
- a non-transitory memory;
- and
- one or more hardware processors coupled to the non-transitory memory and configured to cause the system to perform operations comprising:
- detecting a user attempting to access an electronic site;
- in response to the detecting, transmitting an authentication sequence to a user device associated with the user;
- receiving authentication information that was entered by the user for authentication to access the electronic site;
- validating the received authentication information by:
- determining that the received authentication information is a character string that includes the authentication sequence, and
- determining that omitting the authentication sequence from the character string would provide a valid user credential that is associated with the user;
- and
- in response to the validating, allowing access to the electronic site by the user.
8 more elements
A method comprising,
- detecting, by an access system, a user attempting to access an electronic site;
- in response to the detecting, transmitting an authentication sequence from the access system to a user device associated with the user;
- instructing, by the access system, the user to insert the authentication sequence at a specific location of a user credential;
- receiving, by the access system, authentication information that was entered by the user for authentication to access the electronic site, the authentication information including the authentication sequence inserted at the specific location of the user credential;
- extracting the user credential from the authentication information;
- determining that the user credential is valid for the user;
- and
- in response to determining that the user credential is valid for the user, allowing access to the electronic site by the user.
5 more elements
A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:
- detecting a user attempting to access an electronic site;
- in response to the detecting, generating an authentication sequence based on a user credential associated with the user;
- transmitting the authentication sequence to a user device associated with the user;
- receiving authentication information that was entered by the user for authentication to access the electronic site, the authentication information including the authentication sequence and the user credential;
- extracting the user credential from the authentication information;
- determining that the user credential is valid for the user;
- and
- in response to determining that the user credential is valid for the user, allowing access to the electronic site by the user.
5 more elements
Dependencies are inferred from the claim text.