Single key authentication method

Patent metadata

Field	Value
Publication number	US-10237258-B2
Application number	US-201615364858-A
Country	US
Kind code	B2
Filing date	Nov 30, 2016
Priority date	Nov 30, 2016
Publication date	Mar 19, 2019
Grant date	Mar 19, 2019

Abstract

Systems, methods, and computer-readable media are disclosed for obtaining authenticated access to a service provider system, or more specifically, to a user account maintained on the service provider system, using a single key authentication mechanism. This mechanism includes generating an authentication image that includes user-generated content, user application-generated content, and service provider-generated content; sending the authentication image to the service provider system, which is configured to authenticate access to the user account based at least in part on the authentication image; and receiving an indication as to whether access to the user account has been authenticated.

First claim

What is claimed is:

1. A computer-implemented method for authenticating access to a service provider system, the method comprising:
sending, by a user application executing on a user device, an access request to the service provider system;
presenting a user interface containing an empty grid, the empty grid comprising a plurality of user-selectable cells;
receiving user input to the empty grid, the user input comprising a user selection of at least a portion of the user-selectable cells;
generating a matrix object based at least in part on the user selection of the at least a portion of the user-selectable cells;
sending the matrix object to the service provider system;
sending, by the user application, an authentication image to the service provider system, the authentication image comprising first data generated in response to user input, second data generated by the user application, and third data generated by the service provider system, wherein the first data comprises the matrix object; and
receiving, by the user application, an indication from the service provider system that access to a user account has been authenticated based at least in part on the authentication image.

2. The computer-implemented method of claim 1 , wherein the matrix object comprises a plurality of digits, and wherein each digit comprises a designated number of cells of the plurality of user-selectable cells.

3. The computer-implemented method of claim 1 , further comprising:
receiving a bounded matrix object image from the service provider system, the bounded matrix object image comprising the matrix object and at least a portion of the third data; and
storing the bounded matrix object image in local storage of the user device.

4. The computer-implemented method of claim 3 , wherein the at least a portion of the third data comprises at least one of an identifier associated with the service provider system, a datestamp, a timestamp, or a geo-location identifier.

5. The computer-implemented method of claim 4 , wherein the at least a portion of the third data further comprises a plurality of boundary indicators that indicate a boundary of the matrix object, and wherein a first boundary indicator of the plurality of boundary indicators indicates an orientation of the matrix object.

6. The computer-implemented method of claim 3 , further comprising:
sending, by the user application, a request for a code and a background image to the service provider system;
receiving, by the user application, the code and the background image from the service provider system;
executing, by the user application, a digital imprint signature algorithm using the code to generate a digital imprint signature; and
combining the bounded matrix object image, the digital imprint signature, and the background image to form the authentication image.

7. A client device for authenticating access to a service provider system, the client device comprising:
at least one memory storing computer-executable instructions; and
at least one processor configured to access the at least one memory and execute the computer-executable instructions to:
send, by a user application executing on the client device, an access request to the service provider system;
present a user interface containing an empty grid, the empty grid comprising a plurality of user-selectable cells;
receive user input to the empty grid, the user input comprising a user selection of at least a portion of the user-selectable cells;
generate a matrix object based at least in part on the user selection of the at least a portion of the user-selectable cells;
send the matrix object to the service provider system;
send, by the user application, an authentication image to the service provider system, the authentication image comprising first data generated in response to user input, second data generated by the user application, and third data generated by the service provider system, wherein the first data comprises the matrix object; and
receive, by the user application, an indication from the service provider system that access to a user account has been authenticated based at least in part on the authentication image.

8. The client device of claim 7 , wherein the matrix object comprises a plurality of digits, and wherein each digit comprises a designated number of cells of the plurality of user-selectable cells.

9. The client device of claim 7 , wherein the at least one processor is further configured to execute the computer-executable instructions to:
receive a bounded matrix object image from the service provider system, the bounded matrix object image comprising the matrix object and at least a portion of the third data; and
store the bounded matrix object image in local storage of the user device.

10. The client device of claim 9 , wherein the at least a portion of the third data comprises at least one of an identifier associated with the service provider system, a datestamp, a timestamp, or a geo-location identifier.

11. The client device of claim 10 , wherein the at least a portion of the third data further comprises a plurality of boundary indicators that indicate a boundary of the matrix object, and wherein a first boundary indicator of the plurality of boundary indicators indicates an orientation of the matrix object.

12. The client device of claim 9 , wherein the at least one processor is further configured to execute the computer-executable instructions to:
send, by the user application, a request for a code and a background image to the service provider system;
receive, by the user application, the code and the background image from the service provider system;
execute, by the user application, a digital imprint signature algorithm using the code to generate a digital imprint signature; and
combine the bounded matrix object image, the digital imprint signature, and the background image to form the authentication image.

13. A computer program product for authenticating access to a service provider system, the computer program product comprising a non-transitory storage medium readable by a processing circuit, the storage medium storing instructions executable by the processing circuit to cause a method to be performed, the method comprising:
sending an access request to the service provider system;
presenting a user interface containing an empty grid, the empty grid comprising a plurality of user-selectable cells;
receiving user input to the empty grid, the user input comprising a user selection of at least a portion of the user-selectable cells;
generating a matrix object based at least in part on the user selection of the at least a portion of the user-selectable cells;
sending the matrix object to the service provider system;
sending an authentication image to the service provider system, the authentication image comprising first data generated in response to user input, second data generated by a user application, and third data generated by the service provider system, wherein the first data comprises the matrix object; and
receiving an indication from the service provider system that access to a user account has been authenticated based at least in part on the authentication image.

14. The computer program product of claim 13 , the method further comprising:
receiving a bounded matrix object image from the service provider system, the bounded matrix object image comprising the matrix object and at least a portion of the third data; and
storing the bounded matrix object image in local storage of a user device.

15. The computer program product of cla

Assignees

• IBM

Inventors

• Maresh Mark E
• Nolan Colm
• Vargas Juan F
• Whitney Michael J

Classifications

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• G06F21/36

  by graphic or iconic representation · CPC title