Secure passcode entry using mobile device with augmented reality capability

Patent metadata

Field	Value
Publication number	US-10049358-B2
Application number	US-201514887861-A
Country	US
Kind code	B2
Filing date	Oct 20, 2015
Priority date	Oct 29, 2014
Publication date	Aug 14, 2018
Grant date	Aug 14, 2018

Abstract

Secure passcode entry using a mobile device having augmented reality capability. The mobile device is registered with an authorization server to register an agreed input display algorithm with an initialization seed, and a user passcode is registered with the authorization server. A superset of options is obtained from an input interface device at which a user passcode is to be entered. The superset of options is processed using the input display algorithm and initialization seed to result in an arrangement of characters including the characters of a registered user passcode. The arrangement of characters is overlaid using the augmented reality capability of the mobile device in relation to an input interface of the input interface device.

First claim

What is claimed is:

1. A computer-implemented method of secure passcode entry using a mobile device having augmented reality capability, comprising:
registering the mobile device with an authorization server to register an agreed input display algorithm with an initialization seed and wherein a user passcode is registered with the authorization server;
obtaining, from the authorization server, a superset of options from an input interface device at which the user passcode is to be entered;
processing, by the mobile device without communicating with the authorization server, the superset of options using the input display algorithm and initialization seed to result in an arrangement of characters including characters of the registered user passcode, wherein the processing the superset of options includes:
extracting a subset of options from the superset of options;
merging characters corresponding to the subset of options to form a set of composite characters, wherein the set of composite characters includes the characters of the registered user passcode; and
ordering the composite characters in an arrangement for presentation to a user; and

overlaying the arrangement of characters using the augmented reality capability of the mobile device in relation to an input interface of the input interface device; and
accessing transactions, from the mobile device, accessible via communication with the authorization server, based on the authorization server verifying the registered user passcode obtained via entry in the overlaid input interface.

2. The computer-implemented method as claimed in claim 1 , wherein
extracting the subset of options from the superset of options comprises extracting, wherein an option corresponds to a character and wherein the subset includes the characters of the registered user passcode.

3. The computer-implemented method as claimed in claim 1 , wherein the obtaining the superset of options from the input interface device is by communication over a wireless communication network.

4. The computer-implemented method as claimed in claim 1 , wherein the obtaining the superset of options from the input interface device is by display of the superset of options at the input interface device.

5. The computer-implemented method as claimed in claim 1 , wherein the processing the superset of options using the input display algorithm and initialization seed is carried out offline from the input interface device.

6. The computer-implemented method as claimed in claim 1 , wherein the obtaining the superset of options, the processing the superset of options, and the overlaying the arrangement of characters are carried out for each new transaction with an input interface device.

7. The computer-implemented method as claimed in claim 1 , wherein the obtaining a superset of options obtains a different superset of options for each new transaction with an input interface device.

8. The computer-implemented method as claimed in claim 1 , wherein at least one of: the input display algorithm is a dynamic algorithm or the initialization seed changes with each new transaction with the input interface device.

9. The computer-implemented method as claimed in claim 1 , further comprising obtaining details of the input interface of the input interface device in order to determine a required arrangement for presentation of the composite characters.

10. The computer-implemented method as claimed in claim 1 , wherein the characters are in the form of numerical or alphanumerical characters.

11. A computer system for secure passcode entry using a mobile device having augmented reality capability, comprising:
a memory; and
a processing device in communication with the memory, wherein the computer system is configured to perform a method, said method comprising:
registering the mobile device with an authorization server to register an agreed input display algorithm with an initialization seed and wherein a user passcode is registered with the authorization server;
obtaining, from the authorization server, a superset of options from an input interface device at which the user passcode is to be entered;
processing, by the mobile device without communicating with the authorization server, the superset of options using the input display algorithm and initialization seed to result in an arrangement of characters including characters of the registered user passcode, wherein the processing the superset of options includes:
extracting a subset of options from the superset of options;
merging characters corresponding to the subset of options to form a set of composite characters, wherein the set of composite characters includes the characters of the registered user passcode; and
ordering the composite characters in an arrangement for presentation to a user; and

overlaying the arrangement of characters using the augmented reality capability of the mobile device in relation to an input interface of the input interface device; and
accessing transactions, from the mobile device, accessible via communication with the authorization server, based on the authorization server verifying the registered user passcode obtained via entry in the overlaid input interface.

12. The computer system as claimed in claim 11 , wherein
extracting the subset of options from the superset of options, comprises extracting, wherein an option corresponds to a character and wherein the subset includes the characters of the registered user passcode.

13. The computer system as claimed in claim 11 , wherein the obtaining the superset of options, the processing the superset of options, and the overlaying the arrangement of characters are carried out for each new transaction with an input interface device.

14. A computer program product for secure passcode entry using a mobile device having augmented reality capability, comprising:
a computer readable storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising:
registering the mobile device with an authorization server to register an agreed input display algorithm with an initialization seed and wherein a user passcode is registered with the authorization server;
obtaining, from the authorization server, a superset of options from an input interface device at which the user passcode is to be entered;
processing, by the mobile device without communicating with the authorization server, the superset of options using the input display algorithm and initialization seed to result in an arrangement of characters including characters of the registered user passcode, wherein the processing the superset of options includes:
extracting a subset of options from the superset of options;
merging characters corresponding to the subset of options to form a set of composite characters, wherein the set of composite characters includes the characters of the registered user passcode; and
ordering the composite characters in an arrangement for presentation to a user; and

overlaying the arrangement of characters using the augmented reality capability of the mobile device in relation to an input interface of the input interface device; and
accessing transactions, from the mobile device, accessible via communication with the authorization server, based on the authorization server verifying the registered user passcode obtained via entry in the overlaid input interface.

15. The computer program product as claimed in claim 14 , wherein the
extracting the subset of options from the superset of options, comprising extracting, where

Assignees

• IBM

Inventors

• Briggs Simon A S
• Hook James K
• Hunt Hamish C
• Lincoln Nicholas K

Classifications

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q20/3223

  Realising banking transactions through M-devices · CPC title

• G06F21/00

  Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity · CPC title

• G06Q20/4012 Primary

  Verifying personal identification numbers [PIN] · CPC title

• G06F21/31

  User authentication · CPC title