Secure passcode entry using mobile device with augmented reality capability

Patent metadata

Field	Value
Publication number	US-10607221-B2
Application number	US-201816045088-A
Country	US
Kind code	B2
Filing date	Jul 25, 2018
Priority date	Oct 29, 2014
Publication date	Mar 31, 2020
Grant date	Mar 31, 2020

Abstract

Secure passcode entry using a mobile device having augmented reality capability. The mobile device is registered with an authorization server to register an agreed input display algorithm with an initialization seed, and a user passcode is registered with the authorization server. A superset of options is obtained from an input interface device at which a user passcode is to be entered. The superset of options is processed using the input display algorithm and initialization seed to result in an arrangement of characters including the characters of a registered user passcode. The arrangement of characters is overlaid using the augmented reality capability of the mobile device in relation to an input interface of the input interface device.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
registering a mobile device with an authorization server to register an agreed input display algorithm with an initialization seed and wherein a user passcode is registered with the authorization server;
obtaining, from the authorization server, a superset of options from an input interface device at which the user passcode is to be entered;
processing, by the mobile device without communicating with the authorization server, the superset of options using the input display algorithm and initialization seed to result in an arrangement of characters including characters of the registered user passcode, wherein processing the superset of options comprises merging characters extracted from the superset of options to form a set of composite characters comprising the registered user passcode;
overlaying the composite characters using the augmented reality capability of the mobile device in relation to an input interface of the input interface device; and
accessing transactions, from the mobile device, accessible via communication with the authorization server, based on the authorization server verifying the registered user passcode obtained via entry in the overlaid input interface.

2. The computer-implemented method as claimed in claim 1 , wherein overlaying the composite characters further comprises: ordering the composite characters in an arrangement for presentation to a user.

3. The computer-implemented method as claimed in claim 1 , wherein the characters extracted from the superset of options comprise a subset of options, and wherein an option corresponds to a character.

4. The computer-implemented method as claimed in claim 1 , wherein the obtaining the superset of options from the input interface device is by communication over a wireless communication network.

5. The computer-implemented method as claimed in claim 1 , wherein the obtaining the superset of options from the input interface device is by display of the superset of options at the input interface device.

6. The computer-implemented method as claimed in claim 1 , wherein the processing the superset of options using the input display algorithm and initialization seed is carried out offline from the input interface device.

7. The computer-implemented method as claimed in claim 1 , wherein obtaining the superset of options, the processing the superset of options, and the overlaying the arrangement of characters are carried out for each new transaction with an input interface device.

8. The computer-implemented method as claimed in claim 1 , wherein obtaining a superset of options obtains a different superset of options for each new transaction with an input interface device.

9. The computer-implemented method as claimed in claim 1 , wherein at least one of: the input display algorithm is a dynamic algorithm or the initialization seed changes with each new transaction with the input interface device.

10. The computer-implemented method as claimed in claim 1 , further comprising obtaining details of the input interface of the input interface device in order to determine a required arrangement for presentation of the composite characters.

11. The computer-implemented method as claimed in claim 1 , wherein the characters are in the form of numerical or alphanumerical characters.

12. A computer system, comprising:
a memory; and
a processing device in communication with the memory, wherein the computer system is configured to perform a method, said method comprising:
registering a mobile device with an authorization server to register an agreed input display algorithm with an initialization seed and wherein a user passcode is registered with the authorization server;
obtaining, from the authorization server, a superset of options from an input interface device at which the user passcode is to be entered;
processing, by the mobile device without communicating with the authorization server, the superset of options using the input display algorithm and initialization seed to result in an arrangement of characters including characters of the registered user passcode, wherein processing the superset of options comprises merging characters extracted from the superset of options to form a set of composite characters comprising the registered user passcode;
overlaying the composite characters using the augmented reality capability of the mobile device in relation to an input interface of the input interface device; and
accessing transactions, from the mobile device, accessible via communication with the authorization server, based on the authorization server verifying the registered user passcode obtained via entry in the overlaid input interface.

13. The computer system of claim 12 , wherein overlaying the composite characters further comprises: ordering the composite characters in an arrangement for presentation to a user.

14. The computer system of claim 12 , wherein the characters extracted from the superset of options comprise a subset of options, and wherein an option corresponds to a character.

15. The computer system of claim 12 , wherein obtaining the superset of options from the input interface is accomplished utilizing a method selected from the group consisting of: communication over a wireless communication network and display of the superset of options at the input interface device.

16. A computer program product, comprising:
a computer readable storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising:
registering a mobile device with an authorization server to register an agreed input display algorithm with an initialization seed and wherein a user passcode is registered with the authorization server;
obtaining, from the authorization server, a superset of options from an input interface device at which the user passcode is to be entered;
processing, by the mobile device without communicating with the authorization server, the superset of options using the input display algorithm and initialization seed to result in an arrangement of characters including characters of the registered user passcode, wherein processing the superset of options comprises merging characters extracted from the superset of options to form a set of composite characters comprising the registered user passcode;
overlaying the composite characters using the augmented reality capability of the mobile device in relation to an input interface of the input interface device; and
accessing transactions, from the mobile device, accessible via communication with the authorization server, based on the authorization server verifying the registered user passcode obtained via entry in the overlaid input interface.

17. The computer program product of claim 16 , wherein overlaying the composite characters further comprises: ordering the composite characters in an arrangement for presentation to a user.

18. The computer program product of claim 16 , wherein the characters extracted from the superset of options comprise a subset of options, and wherein an option corresponds to a character.

19. The computer program product of claim 16 , wherein obtaining the superset of options from the input interface is accomplished utilizing a method selected from the group consisting of: communication over a wireless communication network and display of the superset of options at the input interface device.

20. The computer program product of clai

Assignees

• IBM

Inventors

• Briggs Simon A S
• Hook James K
• Hunt Hamish C
• Lincoln Nicholas K

Classifications

• G06Q20/3223

  Realising banking transactions through M-devices · CPC title

• G06Q20/4012 Primary

  Verifying personal identification numbers [PIN] · CPC title

• G06F21/00

  Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity · CPC title

• G06F21/36 Primary

  by graphic or iconic representation · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title