Authentication system and method based upon random partial digitized path recognition

An authentication system for a client, comprising:

• data processing resources, including a processor, memory and a communication interface;
• data stored in said memory defining a graphical representation of a frame of reference adapted for rendering on a display, the frame of reference including pre-defined locations in the frame of reference having coordinates on the frame of reference;
• user account information stored in said memory, including for respective clients a data set including a plurality of data fields having respective positions in said data set and having field contents a plurality of said pre-defined locations having an order with coordinates along a digitized directional path known to the client on the frame of reference;
• an authentication server adapted for execution by the data processing resources, including logic to identify to the client via the communication interface, positions in said data set of a random partial subset of data fields from said data set, logic to accept input data from the client via the communication interface, corresponding to coordinates on the frame of reference of a partial subset of said plurality of pre-defined locations, the partial subset of said plurality of pre-defined locations being identified by the positions of the data fields in the random partial subset, and logic to determine whether the input data matches the field contents of corresponding data fields in the random partial subset wherein the authentication server includes logic which if the input data matches, signals successful authentication, and if the input data does not match, signal failed authentication.

An article storing computer programs supporting an authentication system for a client, comprising:

• a machine readable data storage medium storing data defining a graphical representation of a frame of reference adapted for rendering on a display, the frame of reference including pre-defined locations in the frame of reference having coordinates on the frame of reference;
• a machine readable data storage medium storing user account information, including for respective clients a data set including a plurality of data fields having respective positions in said data set and having field contents identifying a plurality of said pre-defined locations having an order with coordinates along a digitized directional path known to the client on the frame of reference, and
• a machine readable data storage medium storing computer programs executable by a data processor including logic to identify to the client via the communication interface, positions in said data set of a random partial subset of data fields from said data set, logic to accept input data from the client via the communication interface, corresponding to coordinates on the frame of reference of a partial subset of said plurality of pre-defined locations, the partial subset of said plurality of pre-defined locations being identified by the positions of the data fields in the random partial subset, and logic to determine whether the input data matches the field contents of corresponding data fields in the random partial subset, and if the input data matches, signaling successful authentication, and if the input does not match, signaling failed authentication.