System, device, and method of visual login and stochastic cryptography

Patent metadata

Field	Value
Publication number	US-10032010-B2
Application number	US-201615256744-A
Country	US
Kind code	B2
Filing date	Sep 6, 2016
Priority date	Nov 29, 2010
Publication date	Jul 24, 2018
Grant date	Jul 24, 2018

Abstract

Devices, systems, and methods of detecting user identity, differentiating between users of a computerized service, and detecting a possible attacker. A log-in process or a user-authentication process, is augmented or enriched by one or more incidental tasks, which force the user to perform additional on-screen interactions or input-unit interactions, which in turn enrich and augment the pool of user interactions from which the system extracts one or more user-specific features. The extracted user-specific features are used as part of the user authentication process, and are further used to differentiate among users.

First claim

What is claimed is:

1. A method comprising:
(a) generating an interactions-enriched log-in process for authenticating a user of an electronic device, by generating a log-in process that requires the user: (i) to enter at least a password, and (ii) to perform an on-screen incidental task that enriches an ability of a user-interactions tracker to extract a user-specific feature from user interactions while performing said on-screen incidental task;
(b) tracking the user interactions while the user performs said on-screen incidental task of said interactions-enriched log-in process, and extracting from said user interactions a user-specific feature;
(c) determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches a pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from other interactions of said user.

2. The method of claim 1 , wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches a pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

3. The method of claim 1 , wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches a pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous usage sessions in which said user was already authenticated as a logged-in user.

4. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform an on-screen drag-and-drop operation;
extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen drag-and-drop operation of said interactions-enriched log-in process;
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen drag-and-drop operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

5. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform a set of multiple on-screen drag-and-drop operations;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen drag-and-drop operation of said interactions-enriched log-in process, wherein the user-specific feature reflects at least an order in which said user chooses to perform said set of multiple on-screen drag-and-drop operations;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from the order in which the user performs said set of multiple on-screen drag-and-drop operations as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

6. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform an on-screen operation having an on-screen route that corresponds to at least a part of a circle;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen operation of said interactions-enriched log-in process;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

7. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform an on-screen operation having an on-screen route that corresponds to at least a part of a circle;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen operation of said interactions-enriched log-in process, wherein said user-specific feature indicates whether said user performs either (i) a clockwise movement to achieve said at least part of the circle, or (ii) a counter-clockwise movement to achieve said at least part of the circle;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.

8. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform an on-screen task of drawing an on-screen shape;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen operation of said interactions-enriched log-in process, wherein said user-specific feature indicates whether said user performs either (i) a generally-clockwise movement to draw said on-screen shape, or (ii) a generally counter-clockwise movement to draw said on-screen shape;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password e

Assignees

• Biocatch Ltd

Inventors

• Turgeman Avi
• Rivner Uri

Classifications

• G06F3/0486

  Drag-and-drop · CPC title

• G06F3/04842

  Selection of displayed objects or displayed text elements (G06F3/0482 takes precedence) · CPC title

• H04W12/06

  Authentication · CPC title

• G06F21/316 Primary

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title