[go: up one dir, main page]

WO2007096648A1 - Système et procédé d'authentification d'utilisateur - Google Patents

Système et procédé d'authentification d'utilisateur Download PDF

Info

Publication number
WO2007096648A1
WO2007096648A1 PCT/GB2007/000656 GB2007000656W WO2007096648A1 WO 2007096648 A1 WO2007096648 A1 WO 2007096648A1 GB 2007000656 W GB2007000656 W GB 2007000656W WO 2007096648 A1 WO2007096648 A1 WO 2007096648A1
Authority
WO
WIPO (PCT)
Prior art keywords
user
perceptible
variables
patterns
identification element
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/GB2007/000656
Other languages
English (en)
Inventor
Ravi Anil Kuber
Wai Yu
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Queens University of Belfast
Original Assignee
Queens University of Belfast
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Queens University of Belfast filed Critical Queens University of Belfast
Publication of WO2007096648A1 publication Critical patent/WO2007096648A1/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/36—User authentication by graphic or iconic representation
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2103—Challenge-response

Definitions

  • the present invention relates to a system and method for user authentication.
  • User authentication is the process required to provide an individual with secure access to data.
  • the three main techniques for user authentication include knowledge-based systems, token-based systems, and the use of biometrics. Modern technology predominantly favours knowledge-based schemes, compared with biometrics, due to its relative infancy and expense of additional hardware.
  • Entry to a knowledge-based system is done through a process of user identification and authentication.
  • the identification step establishes that user's right to access the system.
  • the authentication mechanism verifies that the user is the legitimate owner of the ID.
  • Many token-based authentication systems also make use of knowledge-based schemes, to prevent impersonation through theft or loss of the token. For example, an ATM system makes use of a token (card) and secret knowledge (a PIN) to authenticate entry.
  • a method for user authentication comprising the steps of:- obtaining an identification element of a user, presenting the user with a plurality of user perceptible variables which are perceptible by the user using their sense of touch, detecting selection of at least one of the user perceptible variables by the user, comparing the at least one selected user perceptible variable with one or more user perceptible variables previously associated with the identification element of the user, and authenticating the user if the at least one selected user perceptible variable corresponds to at least one of the user perceptible variables previously associated with the identification element of the user.
  • Touch is a complex sense, divided into two major categories of sensory information: tactile and kinesthetic.
  • Tactile sensory information comprises cutaneous stimulation, and includes the sensation of wetness, temperature, skin curvature and stretch, velocity, vibration, slip, pressure and local force. This conveys information about the initial contact with objects, surface textures and geometry.
  • Kinesthetic sensory information relates to the physical forces applied to and by the body. This includes proprioception or sensing and awareness of body position.
  • the user perceptible variables may be perceptible by the user using tactile sensory information.
  • the user perceptible variables may comprise patterns of tactile sensory information, for example any of patterns of pressure, patterns of vibration, patterns of temperature.
  • the patterns may be static or cyclic or animated or a combination thereof.
  • each user perceptible variable may comprise a pattern of pressure provided by a plurality of pins. Each pattern of pressure may be perceptible by the user by placing at least one fingertip in contact with the pins.
  • the user perceptible variables may be presented to the user on request by the user.
  • The, or at least some of the, user perceptible variables may be presented to the user concurrently.
  • the user perceptible variables may be presented to the user sequentially.
  • the user perceptible variables may be presented to the user until selection of a predetermined number of user perceptible variables has been detected.
  • the user perceptible variables may be presented to the user in a first series of user perceptible variables until selection of a user perceptible variable is detected, and then a second series of user perceptible variables until selection of a user perceptible variable is detected, said process being repeated a plurality of times until selection of a predetermined number of user perceptible variables has been detected.
  • Authentication of the user may take place if each of a plurality of selected user perceptible variables corresponds to a user perceptible variable previously associated with the identification element of the user. Authentication of the user may take place if each of a plurality of selected user perceptible variables corresponds to a user perceptible variable previously associated with the identification element of the user, and the order in which the user perceptible variables is selected by the user corresponds to a predetermined order of the user perceptible variables previously associated with the identification element of the user.
  • the user perceptible variables may be perceptible by the user without requiring movement of the user.
  • the one or more user perceptible variables previously associated with the identification element of the user may comprise user perceptible variables previously chosen to the user and associated with the identification element of the user.
  • the one or more user perceptible variables previously associated with the identification element of the user may be perceptible by a user using their sense of touch.
  • the method may further comprise enrolling a user. Enrolling the user may comprise obtaining an identification element of the user, presenting the user with a plurality of user perceptible variables which are perceptible by the user using their sense of touch, detecting choice of at least one of the user perceptible variables by the user, and associating the identification element of the user with the at least one chosen user perceptible variable.
  • a user may be presented with one or more user perceptible variables to which the user has previously been exposed, and selects one or more of the variables corresponding to previously-chosen variables. Selection of the one or more user perceptible variables takes place by recognition of the variables. In using recognition rather than recall in an authentication method and system, all of the advantages discussed above are realised.
  • Obtaining the identification element of the user may comprise one or more of, receiving an alphanumeric identification element from the user, interrogating a token, card, RFID tag or similar unique identifier provided by the user to read the identification element, sensing a biometric parameter presented by the user.
  • a user authentication system comprising:- an identifier device which obtains an identification element of a user, a user perceptible variable generator device which generates a plurality of user perceptible variables which are perceptible by the user using their sense of touch, a presentation device which presents the plurality of user perceptible variables to the user, a detector device which detects selection of at least one of the user perceptible variables by the user, a comparator device which compares the at least one selected user perceptible variable with one or more user perceptible variables previously associated with the identification element of the user, and an authentication device which authenticates the user if the at least one selected user perceptible variable corresponds to at least one of the user perceptible variables previously associated with the identification element of the user.
  • the presentation device may comprise a tactile device which presents user perceptible variables comprising tactile sensory information to the user.
  • the tactile device may comprise a pressure device which presents user perceptible variables comprising pressure patterns to the user.
  • the pressure device may comprise a plurality of pins which presents user perceptible variables comprising pin patterns to the user. Each of the plurality of pins may be placed in a retracted position or an extended position to present the pin patterns to the user.
  • the presentation device may comprise a haptic mouse.
  • the haptic mouse may comprise a plurality of pins.
  • the tactile device may comprise a temperature device which presents user perceptible variables comprising temperature patterns to the user.
  • the temperature device may comprise a plurality of pins which presents user perceptible variables comprising pin temperature patterns to the user. Each of the plurality of pins may have a temperature which is controlled to present the pin temperature patterns to the user.
  • the presentation device may present the, or at least some of the, user perceptible variables to the user concurrently.
  • the presentation device may present the user perceptible variables to the user sequentially.
  • the presentation device may present the user perceptible variables to the user until selection of a predetermined number of user perceptible variables has been detected.
  • the presentation device may present a first series of user perceptible variables to the user until selection of a user perceptible variable is detected by the detector device, and then present a second series of user perceptible variables to the user until selection of a user perceptible variable is detected, said process being repeated a plurality of times until selection of a predetermined number of user perceptible variables has been detected.
  • the user perceptible variable may be incorporated, at least partially, within the presentation device.
  • the detector device may be incorporated, at least partially, within the presentation device.
  • the comparator device and/or the authentication device may comprise a processor, running comparison/authentication software.
  • the identifier device may comprise a receiver, for example a keypad or keyboard, which receives an alphanumeric identification element from the user.
  • the identifier device may comprise an interrogation device, for example a reader, which interrogates a token, card, RFID tag or similar unique identifier provided by the user to read the identification element.
  • the identifier device may comprise a biometric sensor, which senses a biometric parameter presented by the user.
  • Fig 1 is a schematic diagram of a user authentication system according to a first embodiment of the present invention
  • Fig 2 is a detailed view of the input device of the system of Fig 1 ;
  • Fig 3 is a representation of the user authentication system of Fig 1 when operated in a first operative embodiment
  • Fig 4 is a representation of the screen display of Fig 3 during operation of the user authentication system
  • Fig 5 is a representation of the user authentication system of Fig 1 when operated in a second operative embodiment
  • Fig 6 is a representation of the screen display of Fig 5 during operation of the user authentication system.
  • the user authentication method and system of the present invention enables authentication of a user, through ability of the user to recognize previously perceived user perceptible variables.
  • the idea behind the user authentication method and system of the invention is to make use tactile sensory information (for example pin patterns) as an alternative means to conventional visual information (for example textual characters on a PIN pad/keyboard).
  • the user authentication system comprises a microprocessor 1 , a visual display unit (VDU) 2 and a haptic mouse 3.
  • the haptic mouse 3 comprises two adjacent arrays 4,5 of pins 10 mounted in a housing 11 , each array having sixteen pins 10 arranged in a 4x4 grid.
  • Each pin 10 in the grid is selectively axially moveable between a retracted position wherein an uppermost portion of the pin 10 is substantially level with the surrounding housing 11 , and an extended position wherein the pin 10 extends above the level of the surrounding housing 11.
  • Each array 4,5 of pins 10 is dimensioned such that it can be substantially covered by a fingertip of a user of the user authentication system.
  • Each array 4,5 of pins 10 presents various pin patterns generated by the pins to the user via one or more fingertips.
  • the user authentication system is used as follows.
  • a user first enrols with the system.
  • the user enters an identification element into the system, using an identifier device thereof. This may comprise, for example, entering a unique alphanumeric identification element via a keyboard or keypad of the system, or presenting an identification token or card which is interrogated by a card reader of the system to obtain the identification element of the user, or presenting a biometric parameter of the user which is read by a biometric sensor of the system to obtain the identification element of the user.
  • the identification element of the user is stored by the microprocessor 1.
  • a user perceptible variable generator device of the system then generates a plurality of user perceptible variables which are perceptible by the user using their sense of touch.
  • Each user perceptible variable comprises a pattern of tactile sensory information, comprising a pattern of pressure.
  • the user perceptible variable generator device may comprise a processor, for example as part of the microprocessor 1 , an may generate 36 distinct pressure patterns.
  • the pressure patterns are then presented to the user using a presentation device of the system, comprising the haptic mouse 3.
  • Each distinct pressure pattern is presented to the user using a distinct pattern of the pins 10 in each of the arrays 4, 5 of the haptic mouse 3.
  • Each pin pattern of each array is generated by placing a number of the pins in their retracted position and placing the remainder of the pins in their extended position.
  • the pin patterns can be formed from static arrangement of the pins in each array in either their retracted or extended positions, and/or dynamic or cyclic moving patterns of the pins in each array.
  • the pin patterns may be sequentially presented to the user, once or more preferably repeatedly.
  • Pin patterns may be presented to the user on request by the user.
  • the VDU 2 may display an image corresponding to each pin pattern, and the user may request presentation of a pin pattern by selecting, for example by using the haptic mouse 3, the image corresponding to the pin pattern.
  • Each pin pattern presented to the user is distinct and is perceived to be so by the user. Thus the user may differentiate between patterns.
  • the system may encourage the user to place a fingertip over each array 4, 5 of pins 10 of the haptic mouse 3, by for example displaying visual information on the VDU 2, or using a sound generator of the system.
  • the user perceives each pin pattern via the fingertips using his sense of touch.
  • the authentication system then encourages the user to choose four user perceptible variables each comprising a pin pattern of the two arrays 4, 5 of pins 10 of the haptic mouse 3 presented to the user. This may again be achieved by displaying visual information on the VDU 2, or using a sound generator of the system.
  • a button 6 is provided on the side of the housing 11 of the haptic mouse 3. When the user has chosen a pin pattern, he clicks the button 6, which causes a detector device of the system to detect choice of the pin pattern.
  • Each chosen pin pattern is stored by the microprocessor 1 , and is associated with the identification element of the user.
  • the authentication system may then be used to authenticate a user.
  • the user first enters an identification element into the system, as described above.
  • the identification element is stored by the microprocessor 1 , and is compared to previously-stored identification elements of users which have enrolled with the system. If the identification element of the user does not correspond to any of the previously-stored identification elements, the system may ask the user to enrol (as described above) or may deny the user access to the system. Assuming that the identification element of the user corresponds to a previously stored identification element, the identification element is used to retrieve the four user perceptible variables (pin patterns) chosen by the user in his enrolment with the system, and previously associated with the identification element of the user.
  • pin patterns user perceptible variables
  • the authentication system then generates a plurality of user perceptible variables comprising a plurality of pin patterns, as described above.
  • the plurality of pin pattern user perceptible variables will include the four pin pattern user perceptible variables chosen by the user in his enrolment with the system, and previously associated with the identification element of the user.
  • the authentication system uses the VDU 2 to display an image corresponding to each of the pin pattern user perceptible variables in the plurality of pin patterns.
  • the images comprise minimal visual information, i.e. do not comprise an actual representation of any of the pin patterns of the user perceptible variables.
  • the images are presented on the VDU 2 in a grid-style format (see Figures 3 and 4).
  • a first grid-style format of nine images corresponding to nine pin pattern user perceptible variables is displayed by the VDU 2.
  • These nine pin patterns include a first pin pattern chosen by the user during enrolment.
  • the user uses the haptic mouse 3 to hover a cursor over a first image in the first grid. This causes the haptic mouse to present the pin pattern corresponding to the first image to the user by placing appropriate pins 10 of the arrays 4, 5 of pins in their retracted or extended positions.
  • the system then encourages the user to place a fingertip over each array of pins.
  • the user When the user places a fingertip over each of arrays of pins, he perceives the presented pin pattern using his sense of touch. By placing a fingertip over each array, the user will be occluded from the visual layout of the pins, and will be required to rely on the sense of touch alone to recognise a pin pattern. If the user perceives that the presented pin pattern corresponds to the first pin pattern chosen during enrolment, the user selects the presented pin pattern by clicking the button 6 of the haptic mouse 3. The user will perceive correspondence between the presented pin pattern and the first pin pattern chosen during enrolment using just recognition of the presented pin pattern. The microprocessor 1 stores the selected pin pattern.
  • the user If the user perceives that the presented pin pattern does not correspond to the first pin pattern chosen during enrolment, the user does not select the presented pin pattern.
  • the user uses the haptic mouse 3 to hover a cursor over a second image in the first grid, which causes the haptic mouse to present the pin pattern corresponding to the second image to the user as before. If the user perceives that this presented pin pattern corresponds to the first pin pattern chosen during enrolment, the user selects the presented pin pattern as before, and the microprocessor 1 stores the selected pin pattern. If the user perceives that the presented pin pattern does not correspond to the first pin pattern chosen during enrolment, the user does not select the presented pin pattern, and moves to a third, fourth etc.
  • a second grid-style format of nine images corresponding to nine pin pattern user perceptible variables is then displayed by the VDU 2.
  • These nine pin patterns include a second pin pattern chosen by the user during enrolment.
  • the user uses the haptic mouse 3 to hover a cursor over a first, second, etc. image in the second grid, as before, and selects a pin pattern corresponding to the second pin pattern chosen by the user during enrolment, and the microprocessor 1 stores the selected pin pattern.
  • a third grid-style format of nine images corresponding to nine pin pattern user perceptible variables is then displayed by the VDU 2.
  • These nine pin patterns include a third pin pattern chosen by the user during enrolment.
  • the user uses the haptic mouse 3 to hover a cursor over a first, second, etc. image in the third grid, as before, and selects a pin pattern corresponding to the third pin pattern chosen by the user during enrolment, and the microprocessor 1 stores the selected pin pattern.
  • a fourth grid-style format of nine images corresponding to nine pin pattern user perceptible variables is then displayed by the VDU 2.
  • These nine pin patterns include a fourth pin pattern chosen by the user during enrolment.
  • the user uses the haptic mouse 3 to hover a cursor over a first, second, etc. image in the fourth grid, as before, and selects a pin pattern corresponding to the fourth pin pattern chosen by the user during enrolment, and the microprocessor 1 stores the selected pin pattern.
  • the position of each image in each of the grids is randomly chosen.
  • the microprocessor 1 comprises stored values of each of the four selected pin patterns.
  • the microprocessor 1 then retrieves the pin patterns associated with the identification means of the user during enrolment, and a comparator device of the system then compares each of the selected patterns with the pin patterns previously associated with the identification element of the user during enrolment.
  • An authentication device of the system then authenticates the user if the first selected pin pattern corresponds to the first pin pattern previously associated with the identification element of the user, the second selected pin pattern corresponds to the second pin pattern previously associated with the identification element of the user, the third selected pin pattern corresponds to the third pin pattern previously associated with the identification element of the user, and the fourth selected pin pattern corresponds to the fourth pin pattern previously associated with the identification element of the user.
  • the user must therefore not only correctly select the pin patterns corresponding to those chosen during enrolment, but must also select the pin patterns in the order in which they were chosen during enrolment. If any errors are made, the user will gain the chance to reauthenticate with the system, however authentication attempts will be limited to a pertinent level.
  • the images are presented on the VDU 2 sequentially in a slide-show format (see Figures 5 and 6).
  • a first slide-show format of nine images corresponding to nine pin pattern user perceptible variables is displayed one after the other by the
  • These nine pin patterns include a first pin pattern chosen by the user during enrolment.
  • the user uses the haptic mouse 3 to hover a cursor over the first displayed image in the first slide-show. This causes the haptic mouse to present the pin pattern corresponding to the first image to the user by placing appropriate pins 10 of the arrays 4, 5 of pins in their retracted or extended positions.
  • the user is again encouraged to place a fingertip over each of arrays of pins, and perceives the presented pin pattern using his sense of touch. By placing the fingertips over the arrays, the user will be occluded from the visual layout of the pins, and will be required to rely on the sense of touch alone to recognise a pin pattern.
  • the user selects the presented pin pattern by clicking the button 6 of the haptic mouse 3.
  • the user will perceive correspondence between the presented pin pattern and the first pin pattern chosen during enrolment using just recognition of the presented pin pattern.
  • the microprocessor 1 stores the selected pin pattern. If the user perceives that the presented pin pattern does not correspond to the first pin pattern chosen during enrolment, the user does not select the presented pin pattern.
  • the VDU 2 then displays the second image in the first slide show, and the user selects or does select the presented pin pattern as appropriate. This process is repeated until correspondence between a presented pin pattern and the first pin pattern chosen during enrolment is found, and this pin pattern is selected.
  • a second slide-show format of nine images corresponding to nine pin pattern user perceptible variables is then sequentially displayed by the VDU 2.
  • These nine pin patterns include a second pin pattern chosen by the user during enrolment.
  • the user uses the haptic mouse 3 to hover a cursor over the first, second, etc. image displayed in the second slide show, as before, and selects a pin pattern corresponding to the second pin pattern chosen by the user during enrolment, and the microprocessor 1 stores the selected pin pattern.
  • a third slide-show format of nine images corresponding to nine pin pattern user perceptible variables is then sequentially displayed by the VDU 2.
  • These nine pin patterns include a third pin pattern chosen by the user during enrolment.
  • the user uses the haptic mouse 3 to hover a cursor over the first, second, etc. image displayed in the third slide show, as before, and selects a pin pattern corresponding to the third pin pattern chosen by the user during enrolment, and the microprocessor 1 stores the selected pin pattern.
  • a fourth slide-show format of nine images corresponding to nine pin pattern user perceptible variables is then sequentially displayed by the VDU 2. These nine pin patterns include a fourth pin pattern chosen by the user during enrolment.
  • the user uses the haptic mouse 3 to hover a cursor over the first, second, etc. image displayed in the fourth slide show, as before, and selects a pin pattern corresponding to the fourth pin pattern chosen by the user during enrolment, and the microprocessor 1 stores the selected pin pattern.
  • the position of each image in each of the slide shows is randomly chosen.
  • the microprocessor 1 comprises stored values of each of the four selected pin pattern user perceptible variables.
  • the microprocessor 1 then retrieves the pin patterns associated with the identification means of the user during enrolment, and a comparator device of the system then compares each of the selected patterns with the pin patterns previously associated with the identification element of the user during enrolment.
  • An authentication device of the system then authenticates the user if the first selected pin pattern corresponds to the first -pin pattern previously associated with the identification element of the user, the second selected pin pattern corresponds to the second pin pattern previously associated with the identification element of the user, the third selected pin pattern corresponds to the third pin pattern previously associated with the identification element of the user, and the fourth selected pin pattern corresponds to the fourth pin pattern previously associated with the identification element of the user.
  • the user must therefore not only correctly select the pin patterns corresponding to those chosen during enrolment, but must also select the pin patterns in the order in which they were chosen during enrolment. If any errors are made, the user will gain the chance to reauthenticate with the system, however authentication attempts will be limited to a pertinent level.
  • a third operative embodiment of the invention after generation of the plurality of pin pattern user perceptible variables, these are presented to the user using the pin arrays as before, but without the use of images corresponding to the pin patterns.
  • the system may use a sound generator to communicate presentation of the pin patterns to the user.
  • the user may use a sound receiver of the system to communicate that he is ready to receive presentation of one or more of the pin patterns.
  • the pain patterns may be presented to the user sequentially, in one or more series of patterns.
  • the user may communicate readiness to receive the first pin pattern in the first series of patterns to the system via the sound receiver, and when he has decided to select or not select the presented pin pattern, may communicate readiness to receive the second pin pattern in the first series of patterns to the system via the sound receiver, etc., until four pin patterns have been selected which correspond to the pin patterns previously chosen by the user.
  • user perceptible variables comprising tactile sensory information are presented to the user, via pin patterns perceived through the user's fingertips. It is envisaged that the tactile sensory information may be presented in a manner to be detectable by other parts of the user's body. Further, embodiments are described where four pin pattern user perceptible variables are selected by the user, it will be appreciated that selection of more or less pin patterns may be used.
  • Benefits of tactile authentication include: 1) Increased security ⁇
  • the pin patterns are not visible to the eye, and authentication information is perceived directly through the sense of touch alone.
  • the position of image corresponding to pin patterns in the grid and slide show formats are randomly chosen, so the order of selected pin patterns cannot be memorised by third parties.
  • the array of pins provides a sensory stimulus to the fingertips of the user by axial movement of individual pins between retracted and extended positions
  • distinctive sensory information might be created by varying the temperature of each pin or adjacent groups of pins instead of or in addition to axial movement of the pins.
  • Any haptic or tactile sensory information may be used for the user perceptible variables, including vibrotactile stimuli and force feedback stimuli.
  • auditory and/or visual stimuli and/or stimulation of the senses of taste and smell may be utilised in addition to tactile sensory information.
  • tactile stimulation may be applied to other regions of the user's body, other than the fingertips. As such, other distinguishable modes of tactile stimulation are envisaged within the scope of the present invention.
  • the user authentication method and system according to the present invention may have a wide variety of applications, including controlling access to computer systems, either stand alone or networked systems, access to shared data repositories, Internet access, access to automated teller machines (ATM) for banking, credit and/or debit card authentication and for controlling access to buildings or secure storage devices such as a safe (e.g. controlling operation of a locking device).
  • ATM automated teller machines
  • the system and method of the invention may also be applicable to portable security devices which are often used in Internet banking to provide additional security. Such portable security devices generate random security codes for one-time use, dependent on the ID.
  • the user normally enters a user name, password and random code to gain access to a banking web site. Instead of a customer using the generated numerical code, he/she could use a tactile authentication string.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • User Interface Of Digital Computer (AREA)

Abstract

L'invention concerne un procédé d'authentification d'utilisateur, le procédé consistant à obtenir un élément d'identification d'un utilisateur, à présenter à l'utilisateur une pluralité de variables perceptibles par l'utilisateur qui sont perceptibles par l'utilisateur via son sens du toucher, à détecter une sélection d'au moins une des variables perceptibles par l'utilisateur, à comparer la ou les variables sélectionnées perceptibles par l'utilisateur avec une ou plusieurs variables perceptibles par l'utilisateur préalablement associées à l'élément d'identification de l'utilisateur, et à authentifier l'utilisateur si la ou les variables sélectionnées perceptibles par l'utilisateur correspondent à au moins une des variables perceptibles par l'utilisateur préalablement associées à l'élément d'identification de l'utilisateur. Les variables perceptibles par l'utilisateur peuvent être perceptibles par l'utilisateur via des informations sensorielles tactiles. Les variables perceptibles par l'utilisateur peuvent comprendre des modèles d'informations sensorielles tactiles, par exemple n'importe quels modèles sélectionnés parmi des modèles de pression, des modèles de vibration et des modèles de température. Dans un mode de réalisation de l'invention, chaque variable perceptible par l'utilisateur peut comprendre un modèle de pression fourni par une pluralité de broches, perceptible par l'utilisateur par placement d'au moins un bout de doigt en contact avec les broches.
PCT/GB2007/000656 2006-02-23 2007-02-23 Système et procédé d'authentification d'utilisateur Ceased WO2007096648A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
GB0603581.0 2006-02-23
GB0603581A GB0603581D0 (en) 2006-02-23 2006-02-23 System and method for user authentication

Publications (1)

Publication Number Publication Date
WO2007096648A1 true WO2007096648A1 (fr) 2007-08-30

Family

ID=36178577

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/GB2007/000656 Ceased WO2007096648A1 (fr) 2006-02-23 2007-02-23 Système et procédé d'authentification d'utilisateur

Country Status (2)

Country Link
GB (1) GB0603581D0 (fr)
WO (1) WO2007096648A1 (fr)

Cited By (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2013147769A1 (fr) * 2012-03-28 2013-10-03 Intel Corporation Prévention de capture d'entrée utilisateur
JP2014067277A (ja) * 2012-09-26 2014-04-17 Kyocera Corp 携帯端末装置、プログラムおよびパスワード入力方法
JP2015064814A (ja) * 2013-09-26 2015-04-09 京セラドキュメントソリューションズ株式会社 操作入力装置、及びこれを備える情報処理装置
EP2913741A1 (fr) * 2014-02-28 2015-09-02 Orange Procédé de contrôle d'accès par retour haptique
CN105138889A (zh) * 2015-09-24 2015-12-09 联想(北京)有限公司 一种身份认证方法及电子设备
EP3147753A1 (fr) * 2015-09-25 2017-03-29 Immersion Corporation Captcha haptique
US10229254B2 (en) 2014-06-03 2019-03-12 International Business Machines Corporation Providing a user access to a computer system
WO2019125621A1 (fr) * 2017-12-22 2019-06-27 Mastercard International Incorporated Rétroaction haptique destinée à l'authentification et à la sécurité dans des systèmes informatiques
US10564796B2 (en) 2017-12-14 2020-02-18 Mastercard International Incorporated Haptic interaction
US11204648B2 (en) 2018-06-12 2021-12-21 Mastercard International Incorporated Handshake to establish agreement between two parties in virtual reality

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050005119A1 (en) * 2003-07-02 2005-01-06 Yissum Research Development Company Of The Hebrew University Of Jerusalem Imprinting an identification certificate
US20050171851A1 (en) * 2004-01-30 2005-08-04 Applebaum Ted H. Multiple choice challenge-response user authorization system and method

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050005119A1 (en) * 2003-07-02 2005-01-06 Yissum Research Development Company Of The Hebrew University Of Jerusalem Imprinting an identification certificate
US20050171851A1 (en) * 2004-01-30 2005-08-04 Applebaum Ted H. Multiple choice challenge-response user authorization system and method

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
ROTH ET AL: "How to fend off shoulder surfing", JOURNAL OF BANKING & FINANCE, NORTH-HOLLAND, vol. 30, no. 6, 2 November 2005 (2005-11-02), pages 1727 - 1751, XP005431324, ISSN: 0378-4266 *

Cited By (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9213834B2 (en) 2012-03-28 2015-12-15 Intel Corporation Prevention of user input capture
WO2013147769A1 (fr) * 2012-03-28 2013-10-03 Intel Corporation Prévention de capture d'entrée utilisateur
JP2014067277A (ja) * 2012-09-26 2014-04-17 Kyocera Corp 携帯端末装置、プログラムおよびパスワード入力方法
JP2015064814A (ja) * 2013-09-26 2015-04-09 京セラドキュメントソリューションズ株式会社 操作入力装置、及びこれを備える情報処理装置
EP2913741A1 (fr) * 2014-02-28 2015-09-02 Orange Procédé de contrôle d'accès par retour haptique
FR3018122A1 (fr) * 2014-02-28 2015-09-04 Orange Procede de controle d'acces par retour haptique
US10234943B2 (en) 2014-02-28 2019-03-19 Orange Access control method by haptic feedback
US10229254B2 (en) 2014-06-03 2019-03-12 International Business Machines Corporation Providing a user access to a computer system
US10579782B2 (en) 2014-06-03 2020-03-03 International Business Machines Corporation Providing a user access to a computer system
CN105138889A (zh) * 2015-09-24 2015-12-09 联想(北京)有限公司 一种身份认证方法及电子设备
CN106557158A (zh) * 2015-09-25 2017-04-05 意美森公司 触觉captcha
US9990040B2 (en) 2015-09-25 2018-06-05 Immersion Corporation Haptic CAPTCHA
EP3147753A1 (fr) * 2015-09-25 2017-03-29 Immersion Corporation Captcha haptique
US10564796B2 (en) 2017-12-14 2020-02-18 Mastercard International Incorporated Haptic interaction
WO2019125621A1 (fr) * 2017-12-22 2019-06-27 Mastercard International Incorporated Rétroaction haptique destinée à l'authentification et à la sécurité dans des systèmes informatiques
US10877560B2 (en) 2017-12-22 2020-12-29 Mastercard International Incorporated Haptic feedback for authentication and security in computer systems
US11204648B2 (en) 2018-06-12 2021-12-21 Mastercard International Incorporated Handshake to establish agreement between two parties in virtual reality

Also Published As

Publication number Publication date
GB0603581D0 (en) 2006-04-05

Similar Documents

Publication Publication Date Title
WO2007096648A1 (fr) Système et procédé d'authentification d'utilisateur
Jansen Authenticating users on handheld devices
US6209104B1 (en) Secure data entry and visual authentication system and method
US7486810B1 (en) On-type biometrics fingerprint soft keyboard
EP2856380B1 (fr) Procédé et système destinés à l'identification sécurisée d'un utilisateur
US8407762B2 (en) System for three level authentication of a user
EP2386974B1 (fr) Procédé et dispositif pour générer une valeur secrète
US20080235788A1 (en) Haptic-based graphical password
US10333923B2 (en) Authentication based on visual memory
US20130185778A1 (en) System, method and program for off-line two-factor user authentication
GB2470579A (en) A behavioural biometric security system using keystroke metrics
US8117652B1 (en) Password input using mouse clicking
WO2007098569A1 (fr) Procédé et système de sécurisation d'accès interface via des chemins d'ensembles visuels associés à des opérateurs cachés
Islam et al. Glasspass: Tapping gestures to unlock smart glasses
Varma et al. VibroAuth: authentication with haptics based non-visual, rearranged keypads to mitigate shoulder surfing attacks
Banirostam et al. Functional control of users by biometric behavior features in cloud computing
De Luca et al. Eyepass-eye-stroke authentication for public terminals
Mock et al. User identification using raw sensor data from typing on interactive displays
Belk et al. A personalized user authentication approach based on individual differences in information processing
Zimmermann et al. Keep on rating–on the systematic rating and comparison of authentication schemes
JP2001084051A (ja) 触覚インタフェース装置及びその方法
Kuppusamy PassContext and PassActions: transforming authentication into multi-dimensional contextual and interaction sequences
US7689831B2 (en) Method and system for securing interface access via visual array paths in combination with hidden operators
WO2010136786A2 (fr) Procédé de sécurité biométrique, système et programme informatique
Leberknight et al. An investigation into the efficacy of keystroke analysis for perimeter defense and facility access

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application
NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 07712779

Country of ref document: EP

Kind code of ref document: A1