The present invention relates to authenticating an end user; more specifically, authenticating an end user by means of dynamic information to prevent fraud.
Conventional authentication methods utilize static information to validate an end user. Since static information by its very nature rarely changes, individuals can easily capture an end user's authentication information for fraudulent use in the future.
Furthermore, conventional authentication methods traditionally employ only 1-way authentication. The term 1-way authentication hereinafter means identifying only a single party to a multiple party transaction. Conventional authentication methods usually call for an end user to authenticate to an entity (e.g. bank, credit card company, government agency, etc.) without the entity authenticating to the end user. The use of 1-way authentication methods exposes an end user to phishing attacks. The term phishing hereinafter means an attempt to criminally and/or fraudulently acquire sensitive information by masquerading as a trustworthy entity in an electronic medium.
The present invention provides a method for authenticating an end user, said method comprising:
generating a first pattern in response to receiving an authentication request from said end user, said first pattern comprising a plurality of randomly colored quadrilaterals wherein one quadrilateral of said plurality of quadrilaterals is associated with said end user;
generating a second pattern in response to receiving confirmation that said end user received said first pattern, said second pattern comprising a plurality of colored nodes, said plurality of colored nodes containing a first subset of nodes matching both color and location to a second subset of nodes residing in a transparent credit card being controlled by said end user;
determining an authenticity status of said end user by comparing a third subset of nodes received from said end user with said first subset of nodes, said third subset of nodes being received in response to sending said second pattern to said end user, said end user having generated said third subset of nodes by overlaying said transparent credit card on top of said second pattern and selecting at least one node which displays a color not being black; and
sending said determined authenticity status to said end user via an output device.
The patent or application file contains at least one drawing executed in color. Copies of this patent or patent application publication with color drawing(s) will be provided by the Office upon request and payment of the necessary fee.
Definitions
The term ‘credit card’ as used herein is defined as an authenticating card such as an automated teller machine (ATM) card, credit card, charge card, debit card, gift card, etc. issued by an entity which allows an end user the ability to purchase goods and/or services therewith.
The term ‘node’ as used herein refers to a single point residing within either a login field and/or a transparent credit card.
Specification
Although certain embodiments of the present invention are described herein, it is understood that modifications may be made to the present invention without departing from its course and scope. Scope of the present invention is not limited to the number of constituting components, the materials thereof, the shapes thereof, the relative arrangement thereof, etc. Furthermore, while the accompanying drawings illustrate certain embodiments of the present invention, such drawings are not necessarily depicted to scale.
Example 100 comprises the two patterns 102 and 106 which the login field 100 displays to an end user during an authentication attempt. When the end user requests and authentication attempt, the login field 100 first displays pattern 102.
Pattern 102 comprises a plurality of quadrilaterals each displaying a randomly selected color. Residing within the plurality of quadrilaterals exists a secret quadrilateral 104 known only to an end user and the provider of the login field 100. The secret quadrilateral 104 displays a color, randomly selected, which the end user must remember in order to properly authenticate. Specifically, the end user will utilize the color identified in the secret quadrilateral along with a transparent credit card and the second pattern 106 to complete an authentication request.
Pattern 106 comprises a plurality of nodes each displaying a seemingly random color. Note multiple nodes make up the space previously designated for a single quadrilateral with respect to pattern 102. The nodes appear to comprise randomly selected colors, but the color pattern is actually unique to the end user attempting to authenticate. Specifically, a subset of the nodes displayed in the second pattern 106 match the color and location of a subset of nodes residing in the end user's transparent credit card. The end user to attempt authentication will use these matching nodes.
The transparent credit card 202 is assigned to an end user prior to an authentication attempt. The transparent credit card comprises 202 a plurality of nodes, each displaying a seemingly random color. Only the provider of said transparent credit card 202 knows the pattern of colors contained in the transparent credit card 202.
The login field 204 also comprises a plurality of nodes, each displaying a seemingly random color. The color pattern of nodes contained within the login field 204 is dynamically created each time the end user wishes to authenticate, therefore each authentication attempt will produce a different color pattern of nodes in the login field 204.
As noted supra, a subset of nodes within the login field 204 match the color and location of a subset of nodes residing in the transparent credit card 202. The login field 204 in
Overlaying the transparent credit card 202 on top of the login field 204 results in a third pattern 206. The third pattern 206 displays the nodes in both the transparent credit card 202 and the login field 204 displaying the same color and having the same location.
In one embodiment of the present invention, the login field 204 will display colors such that when the transparent credit card 202 is overlaid, if the overlaid nodes do not match in color they will therein produce a dark, i.e. black, color. The blackening of non-color matching nodes will help identify for the end user which nodes are to be selected from to effectuate the authentication attempt.
In another embodiment of the present invention, the transparent credit card 202 when overlaid on top of the login field 204 merely turns non-color matching nodes a neutral color so as to highlight the matching colored nodes more easily.
The third pattern 206 comprises at least three different groups of differently colored nodes. Specifically and with respect to
If the end user properly selects the red nodes displayed in the third pattern 206, since red was the color of the secret quadrilateral 104 in
The method 300 begins with step 302 which comprises sending a first pattern to the end user. The first pattern is sent to the end user in response to the end user requesting access to the secure information.
In one embodiment of the present invention, the end user requests the authentication attempt by submitting a unique userID. The userID is therein used to identify the color pattern residing in the transparent credit card assigned to the end user as well as the secret quadrilateral known only to the end user.
Step 302 generates the first pattern consisting of a plurality of quadrilaterals each having a randomly selected color and sends said first pattern to the end user by means of an output device 910 (see
After completion of step 302, the method 300 continues with step 304 which comprises sending a second pattern to the end user. The second pattern is sent to the end user in response to the end user identifying that they have received and studied the first pattern.
In one embodiment of the present invention, the end user identifies that they received and studied the first pattern by sending, inter alia, an acknowledgement signal, a character string known only to the end user, an input signal, etc. In response to receiving an acknowledgement signal, step 304 sends the second pattern to the end user by means of an output device 910 (see
The second pattern comprises a plurality of nodes, each displaying a seemingly random color. Again, a subset of nodes within the second pattern match the color and location of a subset of nodes residing in the transparent credit card 202 belonging to the end user attempting to authenticate.
Contained within the subset of nodes in the second pattern are nodes of at least three different color and at least three nodes per color. Specifically, one of the colors present in the subset of nodes matches the color displayed in the secret quadrilateral pursuant to step 302.
After completion of step 304, the method 300 continues with step 306 which comprises receiving authentication data from the end user. Step 306 receives data comprising the locations for a set of nodes which the end user selected after overlaying their transparent credit card on top of the second pattern.
After completion of step 306, the method 300 continues with step 308 which comprises determining whether the end user's authentication attempt is valid or invalid. Step 308 compares the nodes selected in the authentication data received pursuant to step 306 with the subset of nodes residing in the second pattern.
If the authentication data contains all nodes which: 1) correspond to nodes in the subset of nodes residing in the second pattern; and 2) correspond to the color identified in the secret quadrilateral with respect to the first pattern, then step 308 returns a response ‘yes’ and the method 300 continues with step 310 which comprises granting the end user access to the secure information.
In one embodiment of the present invention, step 308 returns a response ‘no’ and the method 300 denies the end user access 312 if the authentication data received pursuant to step 306 contains at least one node having a color which does not correspond to the color identified in the secret quadrilateral with respect to the first pattern. For example, if the authentication data contains three red node locations and one green node location where the subset of nodes in the second pattern comprises three red nodes and the secret quadrilateral displayed the color red, the end user's authentication attempt fails.
In an alternative embodiment of the present invention, step 308 returns a response ‘no’ and the method 300 denies the end user access 312 if the authentication data received pursuant to step 306 contains at least one node not corresponding to any node in the subset of nodes residing in the second pattern. For example, if the authentication data contains a node not present in the subset of nodes in the second pattern, the end user's authentication attempt fails.
In another alternative embodiment of the present invention, step 308 returns a response ‘no’ and the method 300 denies the end user access 312 if the authentication data received pursuant to step 306 does not contain all nodes which: 1) correspond to nodes in the subset of nodes residing in the second pattern; and 2) correspond to the color identified in the secret quadrilateral with respect to the first pattern. For example, if the authentication data contains only two red node locations where the subset of nodes in the second pattern comprises three red nodes and the secret quadrilateral displayed the color red, the end user's authentication attempt fails.
Step 310 comprises granting the end user access to secure information. After completion of step 310, the method 300 ends.
Step 312 comprises denying the end user who attempted to authenticate access to the secure information. In one embodiment of the present invention, after completion of step 312, the method 300 ends. In an alternative embodiment of the present invention, after completion of step 312, the method 300 returns to step 302 and sends a new first pattern to the end user to attempt an authentication again.
The computer system 900 comprises a processor 908, an input device 906 coupled to the processor 908, an output device 910 coupled to the processor 908, and memory devices 902 and 912 each coupled to the processor 908.
The input device 906 may be, inter alia, a keyboard, a mouse, a keypad, a touchscreen, a voice recognition device, a sensor, a network interface card (NIC), a Voice/video over Internet Protocol (VOIP) adapter, a wireless adapter, a telephone adapter, a dedicated circuit adapter, etc.
The output device 910 may be, inter alia, a printer, a plotter, a computer screen, a magnetic tape, a removable hard disk, a floppy disk, a NIC, a VOIP adapter, a wireless adapter, a telephone adapter, a dedicated circuit adapter, an audio and/or visual signal generator, a light emitting diode (LED), etc.
The memory devices 902 and 912 may be, inter alia, a cache, a dynamic random access memory (DRAM), a read-only memory (ROM), a hard disk, a floppy disk, a magnetic tape, an optical storage such as a compact disc (CD) or a digital video disc (DVD), etc. The memory device 912 includes a computer code 914 which is a computer program that comprises computer-executable instructions.
The computer code 914 includes, inter alia, an algorithm used for authenticating an end user at a user device, according to the present invention. The processor 908 executes the computer code 914. The memory device 902 includes input data 904. The input data 904 includes input required by the computer code 914. The output device 910 displays output from the computer code 914. Either or both memory devices 902 and 912 (or one or more additional memory devices not shown in
Any of the components of the present invention can be deployed, managed, serviced, etc. by a service provider that offers to deploy or integrate computing infrastructure with respect to a process for authenticating and end user. Thus, the present invention discloses a process for supporting computer infrastructure, comprising integrating, hosting, maintaining and deploying computer-readable code into a computing system (e.g., computing system 900), wherein the code in combination with the computing system is capable of performing a method for authenticating and end user.
In another embodiment, the invention provides a business method that performs the process steps of the invention on a subscription, advertising and/or fee basis. That is, a service provider, such as a Solution Integrator, can offer to create, maintain, support, etc. a process for authenticating an end user. In this case, the service provider can create, maintain, support, etc. a computer infrastructure that performs the process steps of the invention for one or more customers. In return, the service provider can receive payment from the customer(s) under a subscription and/or fee agreement, and/or the service provider can receive payment from the sale of advertising content to one or more third parties.
While
While particular embodiments of the present invention have been described herein for purposes of illustration, many modifications and changes will become apparent to those skilled in the art. Accordingly, the appended claims are intended to encompass all such modifications and changes as fall within the true spirit and scope of this invention.
Number | Date | Country | Kind |
---|---|---|---|
08305865 | Nov 2008 | EP | regional |
This application is a continuation application claiming priority to Ser. No. 12/316,149, filed Dec. 10, 2008.
Number | Name | Date | Kind |
---|---|---|---|
4016404 | Appleton | Apr 1977 | A |
4670644 | Grayson | Jun 1987 | A |
5056142 | Lapointe et al. | Oct 1991 | A |
5251259 | Mosley | Oct 1993 | A |
5450491 | McNair | Sep 1995 | A |
5488664 | Shamir | Jan 1996 | A |
5742035 | Kohut | Apr 1998 | A |
5939699 | Perttunen | Aug 1999 | A |
7007168 | Kubo et al. | Feb 2006 | B2 |
7181433 | Yousofi | Feb 2007 | B2 |
7263205 | Lev | Aug 2007 | B2 |
7266693 | Potter et al. | Sep 2007 | B1 |
7659869 | Bauchot et al. | Feb 2010 | B1 |
7672906 | Schwartz et al. | Mar 2010 | B2 |
7845013 | Bhogal et al. | Nov 2010 | B2 |
8150034 | Hogl | Apr 2012 | B2 |
8201227 | Bauchot et al. | Jun 2012 | B2 |
8260717 | Bauchot et al. | Sep 2012 | B2 |
8260718 | Bauchot et al. | Sep 2012 | B2 |
20010026248 | Goren et al. | Oct 2001 | A1 |
20050140497 | Chiviendacz et al. | Jun 2005 | A1 |
20050144449 | Voice | Jun 2005 | A1 |
20050144450 | Voice | Jun 2005 | A1 |
20050149761 | Chiviendacz et al. | Jul 2005 | A1 |
20060015725 | Voice et al. | Jan 2006 | A1 |
20060020559 | Steinmetz | Jan 2006 | A1 |
20060031174 | Steinmetz | Feb 2006 | A1 |
20060156385 | Chiviendacz et al. | Jul 2006 | A1 |
20070005967 | Mister et al. | Jan 2007 | A1 |
20070098965 | Hoshiyama | May 2007 | A1 |
20070277224 | Osborn et al. | Nov 2007 | A1 |
20070282854 | Bhogal et al. | Dec 2007 | A1 |
20070289000 | Weiss | Dec 2007 | A1 |
20080005035 | Schwartz et al. | Jan 2008 | A1 |
20080148352 | Matsumoto et al. | Jun 2008 | A1 |
20090067627 | Hogl | Mar 2009 | A1 |
20090282464 | Bauchot et al. | Nov 2009 | A1 |
20100024004 | Boegelund et al. | Jan 2010 | A1 |
20100138657 | Bauchot et al. | Jun 2010 | A1 |
20100138912 | Bauchot et al. | Jun 2010 | A1 |
20120204229 | Bauchot et al. | Aug 2012 | A1 |
20120204230 | Bauchot et al. | Aug 2012 | A1 |
Number | Date | Country |
---|---|---|
10307799 | Nov 1998 | JP |
2000172644 | Jun 2000 | JP |
2003256373 | Sep 2003 | JP |
WO2007068098 | Jun 2007 | WO |
WO 2007068098 | Jun 2007 | WO |
Entry |
---|
Verheul et al. (“Binding cryptography. A fraud-detectible alternative to key-escrow proposals”, The Computer Law & Security Report, Jan.-Feb. 1997, 17 pages). |
Ito et al., “Authentication with 3D Pattern Communication,” Electronics and Communications in Japan, Part 1, vol. 87, No. 12, 2004. Obtained from Wiley Periodicals, Inc., pp. 78-89. |
QRick Card System, [online] 1 page. [retrieved on May 28, 2008]. Retrieved from the Internet:< URL: http://ubiks.net/local/blog/jmt/archives3/004419.html>. |
Help in Connecting to Jyske Netbank. [online] 2 pages—original and English Translation. [retrieved on 09/11/2008]. Retrieved from the Internet:< URL: https://www.jyskedistance.dk/service/—jb/ASP/Apps/NetbankDemo/demo/jb/html/DK/hlplogon1.htm>. |
RSA SecurID. [online] 3 pages. [retrieved on Aug. 21, 2008]. Retrieved from the Internet:< URL: http://www.rsa.com/node.aspx?id=1156>. |
Zhao, et al.; Anti-Phishing Mutual Authentication Using Visual Secret Sharing Scheme, Oct. 17-20, 2010, Information Theory and its Applications (ISITA), 2010 International Symposium, pp. 560-565. |
SecurID, Wikipedia, Nov. 27, 2007. [online]. 2 pages. [retrieved on Dec. 1, 2007]. Retrieved from the Internet: < URL: http://en.wikipedia.org/wiki/SecurID >. |
Office Action (Mail Date Jun. 7, 2011) for U.S. Appl. No. 12/128,060, filed May 28, 2008, Confirmation No. 9627. |
Notice of Allowance (Mail Date Feb. 8, 2012) for U.S. Appl. No. 12/128,060, filed May 28, 2008, Confirmation No. 9627. |
Notice of Allowance (Mail Date Sep. 28, 2009) for U.S. Appl. No. 12/329,972, filed Dec. 8, 2008, Confirmation No. 9926. |
Office Action (Mail Date Oct. 24, 2011) for U.S. Appl. No. 12/316,149, filed Dec. 10, 2008, Confirmation No. 9012. |
Notice of Allowance (Mail Date Feb. 10, 2012) for U.S. Appl. No. 12/316,149, filed Dec. 10, 2008, Confirmation No. 9012. |
Office Action (Mail Date Oct. 20, 2011) for U.S. Appl. No. 12/316,221, filed Dec. 10, 2008, Confirmation No. 1248. |
Office Action (Mail Date Jan. 28, 2011) for U.S. Appl. No. 11/967,910, filed Dec. 31, 2007, Confirmation No. 7834. |
Office Action (Mail Date Jun. 24, 2011) for U.S. Appl. No. 11/967,910, filed Dec. 31, 2007, Confirmation No. 7834. |
Amendment filed Jan. 20, 2012 in response to Office Action (Mail Date Oct. 20, 2011) for U.S. Appl. No. 12/316,221, filed Dec. 10, 2008, Confiramtion No. 1248. |
Notice of Allowance (Mail Date Mar. 26, 2012) for U.S. Appl. No. 12/316,221, filed Dec. 10, 2008, Confirmation No. 1248. |
Amendment filed Sep. 6, 2011 in response to Office Action (Mail Date Jun. 7, 2011) for U.S. Appl. No. 12/128,060, filed May 28, 2008, Confirmation No. 9627. |
Final Office Action (Mail Date Nov. 17, 2011) for U.S. Appl. No. 12/128,060, filed May 28, 2008, Confirmation No. 9627. |
Amendment after Final filed Jan. 17, 2012 in response to Final Office Action (Mail Date Nov. 17, 2011) for U.S. Appl. No. 12/128,060, filed May 28, 2008, Confirmation No. 9627. |
Amendment filed Jan. 23, 2012 in response to Office Action (Mail Date Oct. 24, 2011) for U.S. Appl. No. 12/316,149, filed Dec. 10, 2008, Confirmation No. 9012. |
Amendment filed Apr. 20, 2011 in response to Office Action (Mail Date Jan. 28, 2011) for U.S. Appl. No. 11/967,910, filed Dec. 31, 2007, Confirmation No. 7834. |
Request for Continued Examination and Amendment filed Sep. 14, 2011 in response to Office Action (Mail Date Jun. 14, 2011) for U.S. Appl. No. 11/967,910, filed Dec. 31, 2007, Confirmation No. 7834. |
U.S. Appl. No. 13/494,077, filed Jun. 12, 2012. |
Notice of Allowance (Mail Date Aug. 17, 2012) for U.S. Appl. No. 13/454,250, filed Apr. 24, 2012. |
Preliminary Amendment filed Aug. 9, 2012 for U.S. Appl. No. 13/494,077, filed Jun. 6, 2012. |
Office Action (Mail Date Oct. 24, 2011) for U.S. Appl. No. 12/316,149, filed Dec. 10, 2008. |
Notice of Allowance (Mail Date Feb. 10, 2012) for U.S. Appl. No. 12/316,149, filed Dec. 10, 2008. |
Amendment filed Jan. 23, 2012 in response to Office Action (Mail Date Oct. 24, 2011) for U.S. Appl. No. 12/316,149, filed Dec. 10, 2008. |
Number | Date | Country | |
---|---|---|---|
20120210411 A1 | Aug 2012 | US |
Number | Date | Country | |
---|---|---|---|
Parent | 12316149 | Dec 2008 | US |
Child | 13454198 | US |