Using steganography to protect cryptographic information on a mobile device

An article of manufacture comprising a non-transitory processor-readable storage medium having processor-readable instructions tangibly embodied thereon which, when implemented, cause a processor to carry out steps comprising:

• querying a user to select, in a user-determined ordered sequence, multiple items of multimedia data stored on a computing device to be used in connection with one or more cryptographic actions associated with said computing device, wherein said computing device comprises a mobile device;
• protecting respective ones of multiple sub-components of an item of cryptographic information within respective ones of the multiple selected items of multimedia data such that each of the multiple selected items of multimedia data protects at least one of the multiple subcomponents of the item of cryptographic information, and wherein said protecting comprises (i) encoding and storing, into at least a first of the multiple selected items of multimedia data, one or more values, and (ii) encoding and storing, into at least a second of the multiple selected items of multimedia data, authentication data in a manner indicated by the one or more values stored in the at least a first of the multiple selected items of multimedia data;
• presenting, through a user interface associated with said computing device, a collection of multimedia data stored on said computing device in connection with an authentication request to access a protected resource associated with said computing device, wherein said collection of multimedia data includes (i) the respective ones of the multiple selected items of multimedia data within which the respective ones of the multiple sub-components of the item of cryptographic information are protected and (ii) one or more additional items of multimedia data encoded with authentication data recognized by the computing device as log-in credentials to an account associated with an attempted attack on the computing device;
• extracting each of the respective ones of the multiple sub-components of the item of cryptographic information protected within the respective ones of the multiple selected items of multimedia data, upon user identification of the respective ones of the multiple selected items of multimedia data, in the user-determined ordered sequence, to grant access to the protected resource associated with said computing device;
• and
• performing the one or more cryptographic actions using the protected resource.

An apparatus comprising:

• a memory;
• and
• at least one processor coupled to the memory and configured to:
• query a user to select, in a user-determined ordered sequence, multiple items of multimedia data stored on a computing device to be used in connection with one or more cryptographic actions associated with said computing device, wherein said computing device comprises a mobile device;
• protect respective ones of multiple sub-components of an item of cryptographic information within respective ones of the multiple selected items of multimedia data such that each of the multiple selected items of multimedia data protects at least one of the multiple subcomponents of the item of cryptographic information, and wherein said protecting comprises (i) encoding and storing, into at least a first of the multiple selected items of multimedia data, one or more values, and (ii) encoding and storing, into at least a second of the multiple selected items of multimedia data, authentication data in a manner indicated by the one or more values stored in the at least a first of the multiple selected items of multimedia data;
• present, through a user interface associated with said computing device, a collection of multimedia data stored on said computing device in connection with an authentication request to access a protected resource associated with said computing device, wherein said collection of multimedia data includes (i) the respective ones of the multiple selected items of multimedia data within which the respective ones of the multiple sub-components of the item of cryptographic information are protected and (ii) one or more additional items of multimedia data encoded with authentication data recognized by the computing device as log-in credentials to an account associated with an attempted attack on the computing device;
• extract each of the respective ones of the multiple sub-components of the item of cryptographic information protected within the respective ones of the multiple selected items of multimedia data, upon user identification of the respective ones of the multiple selected items of multimedia data, in the user-determined ordered sequence, to grant access to the protected resource associated with said computing device;
• and
• perform the one or more cryptographic actions using the protected resource.

A method comprising steps of:

• querying a user to select multiple items of multimedia data stored on a computing device to be used in connection with one or more cryptographic actions associated with said computing device, wherein said computing device comprises a mobile device;
• deriving respective ones of multiple sub-components of an item of cryptographic information from within respective ones of the multiple selected items of multimedia data, wherein such that at least one of the multiple sub-components of the item of cryptographic information is derived from within each of the multiple selected items of multimedia data, and wherein said deriving comprises (i) extracting one or more portions of data, from each of the multiple selected items of multimedia data, associated with noise, and (ii) creating the corresponding respective sub-component of the item of cryptographic information from the extracted portions of data, wherein the corresponding respective sub-component of the item of cryptographic information comprises at least a pre-determined level of entropy;
• presenting, through a user interface associated with said computing device, a collection of multimedia data stored on said computing device in connection with an authentication request to access a protected resource associated with said computing device, wherein said collection of multimedia data includes (i) the respective ones of the multiple selected items of multimedia data within which the respective ones of the multiple sub-components of the item of cryptographic information are derived and (ii) one or more additional items of multimedia data encoded with authentication data recognized by the computing device as log-in credentials to an account associated with an attempted attack on the computing device;
• extracting each of the respective ones of the multiple sub-components of the item of cryptographic information derived from the respective ones of the multiple selected items of multimedia data, upon user identification of the respective ones of the multiple selected items of multimedia data, to grant access to the protected resource associated with said computing device;
• and
• performing the one or more cryptographic actions using the protected resource;
• wherein said steps are carried out by at least one computer device.

A method comprising steps of:

• querying for selection, in a user-determined ordered sequence, of a first set multiple items of multimedia data stored on a computing device to be used in connection with one or more cryptographic actions associated with said computing device, wherein said computing device comprises a mobile device;
• protecting respective ones of multiple sub-components of an item of cryptographic information within respective ones of the multiple selected items of multimedia data in the first set such that each of the multiple selected items of multimedia data in the first set protects at least one of the multiple sub-components of the item of cryptographic information, and wherein said protecting comprises (i) encoding and storing, into at least a first of the multiple selected items of multimedia data in the first set, one or more values, and (ii) encoding and storing, into at least a second of the multiple selected items of multimedia data in the first set, authentication data in a manner indicated by the one or more values stored in the at least a first of the multiple selected items of multimedia data in the first set;
• presenting, through a user interface associated with said computing device, a collection of multimedia data stored on said computing device in connection with an authentication request to access a protected resource associated with said computing device, wherein said collection of multimedia data includes (i) the respective ones of the multiple selected items of multimedia data in the first set within which the respective ones of the multiple sub-components of the item of cryptographic information are protected and (ii) one or more additional items of multimedia data encoded with authentication data recognized by the computing device as log-in credentials to an account associated with an attempted attack on the computing device;
• extracting each of the respective ones of the multiple sub-components of the item of cryptographic information protected within the respective ones of the multiple selected items of multimedia data in the first set, upon identification of the respective ones of the multiple selected items of multimedia data in the first set, in the user-determined ordered sequence, via the user, to grant access to the protected resource associated with said computing device;
• performing the one or more cryptographic actions using the protected resource associated with said computing device;
• removing, subsequent to said performing the one or more cryptographic actions, the respective ones of the multiple sub-components of the item of cryptographic information from within the respective ones of the multiple selected items of multimedia data in the first set;
• querying for selection, subsequent to said removing, of a second set of multiple items of multimedia data stored on said computing device to be used in connection with the one or more cryptographic actions associated with said computing device;
• and
• protecting respective ones of multiple sub-components of the item of cryptographic information within respective ones of the multiple selected items of multimedia data in the second set such that each of the multiple selected items of multimedia data in the second set protects at least one of the multiple sub-components of the item of cryptographic information, and wherein said protecting comprises (i) encoding and storing, into at least a first of the multiple selected items of multimedia data in the second set, one or more values, and pi) encoding and storing, into at least a second of the multiple selected items of multimedia data in the second set, authentication data in a manner indicated by the one or more values stored in the at least a first of the multiple selected items of multimedia data in the second set;
• wherein said steps are carried out by at least one computer device.