Challenge-based authentication protocol
AssigneeCisco Technology, Inc.
InventorBryan C. Turner
Life of this patent
Estimating the term…
Abstract
Methods and apparatus for authenticating a user are disclosed. According to one aspect of the present invention, a method for authenticating a user includes displaying a first representation of a challenge. The challenge is based on a ruleset. The method also includes receiving a first input, determining if the first input furthers a successful completion of the first representation of the challenge, and determining if the first input completes the first representation of the challenge. If it is determined that the first input completes the first representation of the challenge and that the first input furthers the successful completion of the first representation of the challenge, the method further includes positively augmenting a security indicator.
Claims38
A computer-implemented method for authenticating a user, the method comprising:
- displaying a first representation of a pattern on a display associated with a computing device, the pattern including a plurality of elements, the plurality of elements including a first element having a first state and a second element having a second state, wherein the first representation includes a first element representation and a second element representation, the first element representation being arranged to incorrectly represent the first element as not having a first state, the second element representation being arranged to correctly represent the second element as having the second state;
- receiving a first input on a lattice associated with the computing device, the first input being arranged to identify either the first element representation or the second element representation;
- and
- augmenting a security indicator based on the first input, wherein the security indicator has a value and is arranged to indicate whether the user is authenticated, and wherein the user is authenticated when the value meets or exceeds a variable threshold.
A computer-implemented method for authenticating a user, the method comprising:
- displaying a first representation of a pattern on a display associated with a computing device, the pattern including a plurality of elements, the plurality of elements including a first element having a first state and a second element having a second state, wherein the first representation includes a first element representation and a second element representation, the first element representation being arranged to incorrectly represent the first element as not having a first state, the second element representation being arranged to correctly represent the second element as having the second state;
- receiving a first input on a lattice associated with the computing device, the first input being arranged to identify either the first element representation or the second element representation;
- determining if the first input identifies the first element representation as representing the first element as not having the first state;
- and
- positively augmenting a security indicator based on the first input if it is determined that the first input identifies the first element representation as representing the first element as not having the first state.
A computer-implemented method for authenticating a user, the method comprising:
- displaying a first representation of a pattern on a display associated with a computing device, the pattern including a plurality of elements, the plurality of elements including a first element having a first state and a second element having a second state, wherein the first representation includes a first element representation and a second element representation, the first element representation being arranged to incorrectly represent the first element as not having a first state, the second element representation being arranged to correctly represent the second element as having the second state;
- receiving a first input on a lattice associated with the computing device, the first input being arranged to identify either the first element representation or the second element representation;
- determining if the first input identifies the second element representation as representing the second element as having the second state;
- and
- positively augmenting a security indicator based on the first input if it is determined that the first input identifies the second element representation as representing the second element as having the second state.
An apparatus for authenticating a user, the apparatus comprising:
- means for displaying a first representation of a pattern, the pattern including a plurality of elements, the plurality of elements including a first element having a first state and a second element having a second state, wherein the first representation includes a first element representation and a second element representation, the first element representation being arranged to incorrectly represent the first element as not having a first state, the second element representation being arranged to correctly represent the second element as having the second state;
- means for receiving a first input, the first input being arranged to identify either the first element representation or the second element representation;
- and
- means for augmenting a security indicator based on the first input, wherein the security indicator has a value and is arranged to indicate whether the user is authenticated, and wherein the user is authenticated when the value meets or exceeds a variable threshold.
An apparatus comprising:
- logic embodied in one or more physical media operable to cause a first representation of a pattern to be displayed, the pattern including a plurality of elements, the plurality of elements including a first element having a first state and a second element having a second state, wherein the first representation includes a first element representation and a second element representation, the first element representation being arranged to incorrectly represent the first element as not having a first state, the second element representation being arranged to correctly represent the second element as having the second state;
- logic embodied in the one or more physical media operable to cause a first input to be received, the first input being arranged to identify either the first element representation or the second element representation;
- logic embodied in the one or more physical media operable to cause a security indicator to be augmented based on the first input, wherein the security indicator has a value and is arranged to indicate whether an authentication is successful, and wherein the user is authenticated when the value meets or exceeds a variable threshold;
- and
- a processor configured to execute the logic embodied in the one or more physical media.
An apparatus:
- logic embodied in one or more physical media operable to cause a first representation of a pattern to be displayed, the pattern including a plurality of elements, the plurality of elements including a first element having a first state and a second element having a second state, wherein the first representation includes a first element representation and a second element representation, the first element representation being arranged to incorrectly represent the first element as not having a first state, the second element representation being arranged to correctly represent the second element as having the second state;
- logic embodied in the one or more physical media operable to cause a first input to be received, the first input being arranged to identify either the first element representation or the second element representation;
- logic embodied in the one or more physical media operable to cause a security indicator to be augmented based on the first input;
- logic embodied in the one or more physical media operable to cause a determination if the first input identifies the first element representation as representing the first element as not having the first state;
- logic embodied in the one or more physical media operable to cause the security indicator to be positively augmented if it is determined that the first input identifies the first element representation as representing the first element as not having the first state;
- and
- a processor configured to execute the logic embodied in the one or more physical media.
An apparatus comprising:
- logic embodied in one or more physical media operable to cause a first representation of a pattern to be displayed, the pattern including a plurality of elements, the plurality of elements including a first element having a first state and a second element having a second state, wherein the first representation includes a first element representation and a second element representation, the first element representation being arranged to incorrectly represent the first element as not having a first state, the second element representation being arranged to correctly represent the second element as having the second state;
- logic embodied in the one or more physical media operable to cause a first input to be received, the first input being arranged to identify either the first element representation or the second element representation;
- logic embodied in the one or more physical media operable to cause a security indicator to be augmented based on the first input;
- logic embodied in the one or more physical media operable to cause a determination if the first input identifies the second element representation as representing the second element as having the second state;
- logic embodied in the one or more physical media operable to cause the security indicator to be positively augmented if it is determined that the first input identifies the second element representation as representing the second element as having the second state;
- and
- a processor configured to execute the logic embodied in the one or more physical media.
A computer-implemented method for authenticating a user, the method comprising:
- displaying a first representation of a challenge on a display associated with a computing device, the challenge being based on a ruleset;
- receiving a first input on a lattice associated with the computing device;
- determining if the first input furthers a successful completion of the first representation of the challenge;
- determining if the first input completes the first representation of the challenge;
- positively augmenting a security indicator if it is determined that the first input completes the first representation of the challenge;
- positively augmenting the security indicator if it is determined that the first input furthers the successful completion of the first representation of the challenge;
- and
- determining whether the first input indicates a duress code when it is determined that the first input does not further the successful completion of the first representation of the challenge.
An apparatus for authenticating a user, the apparatus comprising:
- means for displaying a first representation of a challenge, the challenge being based on a ruleset;
- means for receiving a first input;
- means for determining if the first input furthers a successful completion of the first representation of the challenge;
- means for determining if the first input completes the first representation of the challenge;
- means for positively augmenting a security indicator if it is determined that the first input completes the first representation of the challenge;
- means for positively augmenting the security indicator if it is determined that the first input furthers the successful completion of the first representation of the challenge;
- and
- means for determining whether the first input indicates a duress code when it is determined that the first input does not further the successful completion of the first representation of the challenge.
An apparatus comprising:
- logic embodied in one or more physical media operable to cause a first representation of a challenge to be displayed, the challenge being based on a ruleset;
- logic embodied in one or more physical media operable to cause a first determination of whether a first input furthers a successful completion of the first representation of the challenge;
- logic embodied in one or more physical media operable to cause a second determination of whether the first input completes the first representation of the challenge;
- logic embodied in one or more physical media operable to cause a security indicator to be positively augmented if the first determination is that the first input completes the first representation of the challenge;
- logic embodied in one or more physical media operable to cause the security indicator to be positively augmented if the second determination is that the first input furthers the successful completion of the first representation of the challenge;
- and
- logic embodied in one or more physical media operable to cause a third determination of whether the first input indicates a duress code when the first determination is that the first input does not further the successful completion of the first representation of the challenge.
Dependencies are inferred from the claim text.