US 8,943,563 B1Granted

Authentication system and method using arrangements of objects

OwnerVeronika Orlovskayainventor

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system and method is presented for authentication, so as to control access to a resource. A set of objects (for example, a set of images) is established in advance between the user and the service for which the user is to be authenticated. During the authentication, the user, instead of inputting an alpha-numeric password, will be sent several sets (e.g., tables) containing the previously specified objects (e.g., images) in some arrangement (e.g., spatial pattern) among other objects (images). In order to authenticate, the user is shown additional tables, and must determine, as to each, whether it contains the same set of specified objects in the same spatial relationship as in the first table shown. After the user has correctly identified which tables reflect the specified objects in the requisite pattern, the user will be considered authenticated, and will then be granted access to the requested resource (for example, a bank account).

Claims20

Dependent claims

A method for authenticating an actor, the actor being associated with a client computer, to a server, the server comprising a computer-based system having an electronic communications connection with the client computer, comprising:

a) registering the actor with the server, by establishing, through electronic communications with the client computer, a set of registration objects comprising a plurality of registration objects, the registration objects each having an associated human perceptible form when reproduced by the client computer;
b) authenticating the actor, by
i. electronically sending to the client computer a key set of objects, the key set of objects comprising the set of registration objects and other objects in addition to the set of registration objects, and further such that the set of registration objects is arranged within the key set of objects so as to be reproduced on the client computer in a first relative arrangement among the objects in the set of registration objects, the first relative arrangement comprising a spatial pattern;
ii. electronically sending to the client computer one or more selection sets of objects, each selection set of objects also comprising the set of registration objects and other objects in addition to the objects comprising the set of registration objects, and further such that the set of registration objects is arranged within the selection set of objects so as to be reproduced on the client computer in a second relative arrangement among the objects in the set of registration objects, the second relative arrangement comprising a spatial pattern;
iii. for each selection set of objects, receiving from the client computer a determination by the actor whether the second relative arrangement in the selection set of objects matches the first relative arrangement in the key set of objects;
and
iv. granting the actor access to a requested resource if the determinations by the actor were correct.

4 more elements

A non-transitory machine-readable medium containing computer program instructions for:

c) registering an actor with a server, the actor being associated with a client computer, the server comprising a computer-based system having an electronic communications connection with the client computer, by establishing, through electronic communications with the client computer, a set of registration objects comprising a plurality of registration objects, the registration objects each having an associated human perceptible form when reproduced by the client computer;
d) authenticating the actor, by
i. electronically sending to the client computer a key set of objects, the key set of objects comprising the set of registration objects and other objects in addition to the set of registration objects, and further such that the set of registration objects is arranged within the key set of objects so as to be reproduced on the client computer in a first relative arrangement among the objects in the set of registration objects, the first relative arrangement comprising a spatial pattern;
ii. electronically sending to the client computer one or more selection sets of objects, each selection set of objects also comprising the set of registration objects and other objects in addition to the objects comprising the set of registration objects, and further such that the set of registration objects is arranged within the selection set of objects so as to be reproduced on the client computer in a second relative arrangement among the objects in the set of registration objects, the second relative arrangement comprising a spatial pattern;
iii. for each selection set of objects, receiving from the client computer a determination by the actor whether the second relative arrangement in the selection set of objects matches the first relative arrangement in the key set of objects;
and
iv. granting the actor access to a requested resource if the determinations by the actor were correct.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/038,642Filed 26 Sep 2013 · continuation
Priority: 19 Jan 2007
Granted: 27 Jan 2015
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
G06F 21/36
User authentication: by graphic or iconic representation
G09C 5/00
Ciphering apparatus or methods not provided for in the preceding groups
H04L 9/3226
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…: using…