System and method for dynamic grid authentication
AssigneeCA, Inc.
InventorsDeepak Kumar VERMA, Akkera NAGESH, Sukhmeet Singh GULATI
Life of this patent
Estimating the term…
Abstract
A method includes dynamically generating an authentication grid that identifies an association between a first set of characters and a second set of characters. Based on a shared secret associated with a user, an encrypted version of the authentication grid is generated and transmitted to a first computing device associated with the user. A challenge is generated and transmitted to a second computing device associated with the user. User input is received, and the user is authenticated based at least in part on the authentication grid and a mapping of at least one character in a first set of characters in the challenge to at least one second character the user input.
Claims21
A method comprising:
- dynamically generating an authentication grid that identifies an association between a first set of characters and a second set of characters;
- based on a shared secret associated with a user, generating an encrypted version of the authentication grid;
- transmitting the encrypted version of the authentication grid to a first computing device associated with the user;
- generating a challenge comprising at least one character in the first set of characters identified in the authentication grid;
- transmitting the challenge to a second computing device associated with the user;
- receiving user input from the second computing device, the user input comprising at least one second character in the second set of characters, the at least one second character based on the machine-readable authentication code;
- and
- authenticating the user based at least in part on the authentication grid and a mapping of the at least one character in the first set of characters in the challenge to the at least one second character as received in the user input based on the machine-readable authentication code.
A non-transitory, computer-readable storage medium having instructions stored thereon, the instructions being executable by a computing system to cause the computing system to:
- dynamically generate an authentication grid that identifies an association between a first set of characters and a second set of characters;
- based on a shared secret associated with a user, generate an encrypted version of the authentication grid;
- transmit the encrypted version of the authentication grid to a first computing device associated with the user;
- generate a challenge comprising at least one character from the first set of characters identified in the authentication grid;
- transmit the challenge to a second computing device associated with the user;
- receive user input from the second computing device, the user input comprising at least one second character from the second set of characters, the at least one second character based on the machine-readable authentication code;
- and
- authenticate the user based at least in part on the authentication grid and a mapping of the at least one character in the first set of characters in the challenge to the at least one second character as received in the user input based on the machine-readable authentication code.
A non-transitory, computer-readable storage medium having instructions stored thereon, the instructions being executable by a computing system to cause the computing system to:
- receive an encrypted authentication grid;
- use a shared secret to decrypt the encrypted authentication grid to generate a user-readable authentication grid that identifies an association between a first set of characters and a second set of characters;
- display the user-readable authentication grid;
- receive, from the authentication server, a challenge comprising a first plurality of characters selected from the first set of characters;
- display the challenge on a display of the client device;
- receive user input comprising a second plurality of characters based on the challenge and the user-readable authentication grid;
- and
- transmit, to the authentication server, the user input comprising the second plurality of characters for authentication of the user.
The non-transitory, computer-readable storage medium of claim 21, wherein:
- the encrypted authentication grid is received as a machine-readable authentication code comprising a QR code®, and
- the instructions are further operable to be executable by the computing system to cause the computing system to scan the machine-readable authentication code comprising the QR code® to identify the encrypted authentication grid prior to decrypting the encrypted authentication grid to generate the user-readable authentication grid.
Dependencies are inferred from the claim text.