System and methods for secure entry of a personal identification number (PIN)

Patent metadata

Field	Value
Publication number	US-11089009-B2
Application number	US-201916519664-A
Country	US
Kind code	B2
Filing date	Jul 23, 2019
Priority date	Mar 6, 2012
Publication date	Aug 10, 2021
Grant date	Aug 10, 2021

Abstract

Systems and methods for credential character selection are provided. The system includes one or more sensors configured to detect a character selection and generate a character selection signal, and detect a character selection completion and generate a character selection completion signal. The system also includes one or more processors coupled to the one or more sensors, the one or more processors configured to receive the character selection signal and the character selection completion signal, and generate an output signal based on the received character selection signal that includes components of a credential. The system also includes a network interface component configured to transmit the output signal. The credential characters may be components of a PIN or password. Moreover, the credential character selections may be made on one device, but displayed on a separate coupled device. The character selections may be a selection of a character or a modification of character.

First claim

What is claimed is:

1. A system, comprising:
a non-transitory memory; and
one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the system to perform operations comprising:
providing a set of numeric characters for display to a user device in a sequence at an initial state;
detecting, at least in part via a sensor of the user device, a physical movement of the user device;
translating the detected physical movement of the user device into at least one signal for modifying at least one corresponding numeric character of the set of numeric characters;
causing the user device to generate a modified set of numeric characters based on the at least one signal;
receiving a signal indicating that the modified set of numeric characters is at a final state; and
transmitting the modified set of numeric characters to a remote server to authenticate the user device.

2. The system of claim 1 , wherein the operations further comprise encrypting, in response to receiving the signal indicating that the modified set of numeric characters is at the final state, the modified set of numeric characters,
wherein transmitting the modified set of numeric characters comprises transmitting an encrypted version of the modified set of numeric characters.

3. The system of claim 2 , wherein the modified set of numeric characters is transmitted to a terminal or a remote server for authentication.

4. The system of claim 1 , wherein each of the set of numeric characters in the sequence provided for display to the user device is randomized.

5. The system of claim 1 , wherein the sensor comprises an accelerometer, and wherein:
the detecting comprises detecting, via the accelerometer, that the user device has been tilted up or down; and
the translating comprises adding or subtracting an amount from the corresponding numeric character to correspond with a detection that the user device has been tilted up or down, respectively.

6. The system of claim 1 , wherein the sensor comprises an accelerometer, wherein each numeric character of the set of numeric characters is adjustable when highlighted by a movable value indicator, and wherein:
the detecting comprises detecting, via the accelerometer, that the user device has been tilted left or right; and
the translating comprises moving the movable value indicator left or right to correspond with a detection that the user device has been tilted left or right, respectively.

7. The system of claim 1 , wherein the set of numeric characters correspond to a personal identification number (PIN), and wherein the causing the user device to generate the modified set of numeric characters comprises:
causing the user device to display the modified set of numeric characters for a predetermined amount of time; and
obfuscating the modified set of numeric characters after the predetermined amount of time has been reached.

8. A method for entry of a personal identification number (PIN), the method comprising:
providing a set of numeric characters for display to a user device in a sequence at an initial state;
detecting, at least in part from data received from a sensor of the user device, a physical movement of the user device;
translating the detected physical movement of the user device into receiving at least one signal for modifying at least one corresponding numeric character of the set of numeric characters;
causing the user device to generate a modified set of numeric characters based on the at least one signal;
receiving a signal indicating that the modified set of numeric characters is at a final state; and
performing, in response to receiving the signal that the modified set of numeric characters is at the final state, an authentication of the final state; and
transmitting, in response to determining that the final state is authenticated, the modified set of numeric characters to a remote server to authenticate the user device.

9. The method of claim 8 , wherein the final state is authenticated by checking at least one of a digital signature or a media access control (MAC) address associated with the user device.

10. The method of claim 8 , further comprising encrypting, in response to receiving the signal indicating that the modified set of numeric characters is at the final state, the modified set of numeric characters,
wherein transmitting the modified set of numeric characters comprises transmitting an encrypted version of the modified set of numeric characters.

11. The method of claim 10 , wherein the modified set of numeric characters is transmitted to a terminal or a remote server for additional authentication.

12. The method of claim 8 , wherein each of the set of numeric characters in the sequence provided for display to the user device is randomized.

13. The method of claim 8 , wherein the sensor comprises an accelerometer, and wherein:
the detecting comprises detecting, via the accelerometer, that the user device has been tilted up or down; and
the translating comprises adding or subtracting an amount from the corresponding numeric character to correspond with a detection that the user device has been tilted up or down, respectively.

14. The method of claim 8 , wherein the sensor comprises an accelerometer, wherein each numeric character if the set of numeric characters is adjustable when highlighted by a movable value indicator, and wherein:
the detecting comprises detecting, via the accelerometer, that the user device has been tilted left or right; and
the translating comprises moving the movable value indicator left or right to correspond with a detection that the user device has been tilted left or right, respectively.

15. A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:
providing a set of numeric characters for display to a user device in a sequence at an initial state;
detecting, at least in part data received via a sensor of the user device, a physical movement of the user device;
translating the detected physical movement of the user device into at least one signal for modifying at least one corresponding numeric character of the set of numeric characters;
causing the user device to generate a modified set of numeric characters based on the at least one signal;
receiving a signal indicating that the modified set of numeric characters is at a final state; and
performing, in response to receiving the signal that the modified set of numeric characters is at the final state, an authentication of the final state; and
transmitting, in response to determining that the final state is authenticated, the modified set of numeric characters to a remote server to authenticate the user device.

16. The non-transitory machine-readable medium of claim 15 , wherein the operations further comprise encrypting, in response to receiving the signal indicating that the modified set of numeric characters is at the final state, the modified set of numeric characters,
wherein transmitting the modified set of numeric characters comprises transmitting an encrypted version of the modified set of numeric characters.

17. The non-transitory machine-readable medium of claim 16 , wherein the modified set of numeric characters is transmitted to a terminal or a remote server for authentication.

18. The non-transitory machine-readable medium of claim 15 , wherein each of the set of numeric characters in the sequence provided for d

Assignees

• Paypal Inc

Inventors

• Jakobsson Bjorn Markus
• Palmer James Roy
• Leddy William

Classifications

• G06F21/31 Primary

  User authentication · CPC title

• G06F3/04842

  Selection of displayed objects or displayed text elements (G06F3/0482 takes precedence) · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06F2221/031

  Protect user input by software means · CPC title

• G06F21/45

  Structures or tools for the administration of authentication · CPC title