Dynamic object passwords

Patent metadata

Field	Value
Publication number	US-11296886-B2
Application number	US-201916376848-A
Country	US
Kind code	B2
Filing date	Apr 5, 2019
Priority date	May 15, 2017
Publication date	Apr 5, 2022
Grant date	Apr 5, 2022

Abstract

A construction of a dynamic object password (DOP) is initiated by selecting an object from a set of objects in a step of the construction. A transformation is applied to the object to form a transformed object by altering a dynamic aspect of the object. A placement operation is performed on the transformed object relative to a field position of the DOP. As a part of the step, a triple is generated including an identifier of the selected object, an identifier of the transformation, and an identifier of the placement operation. The triple is transmitted as a part of transmitting an authorization code, the authorization code forming the DOP.

First claim

What is claimed is:

1. A method comprising:
initiating, in a step of a construction of a dynamic object password (DOP) for user authentication, a transformation operation that alters a dynamic aspect of an object to transform the object, forming a transformed object;
performing a placement operation on the transformed object relative to a field position of the DOP;
generating a triple comprising a static indication of an instance of the object, a static identifier of the transformation operation, and an identifier of the placement operation;
transmitting to a server application the triple as a part of transmitting an authorization code, the authorization code forming the DOP; and
adding the transformed object to a set of objects such that the transformed object is available for selecting in a subsequent step of the construction of the DOP.

2. The method of claim 1 , wherein a visible manifestation of the DOP shows the transformed object in field position.

3. The method of claim 1 , further comprising: sending only the triple as a part of the transmitting.

4. The method of claim 1 , wherein transmitting the triple comprises transmitting several triples corresponding to several steps, and wherein the several steps are a subset of a set of steps such that the set of steps form the DOP.

5. The method of claim 1 , wherein the field position and a number of the step are different from each other.

6. The method of claim 1 , wherein the placement operation removes the transformed object from the field position, making the field position empty.

7. The method of claim 1 , wherein a set of placement operations in the DOP cause each field position in the DOP to become empty.

8. The method of claim 1 , wherein the dynamic aspect of the object comprises a shape of the object.

9. The method of claim 1 , wherein the dynamic aspect comprises an orientation of the object.

10. The method of claim 1 , wherein the dynamic aspect comprises a position of the object relative to a reference.

11. The method of claim 1 , wherein the dynamic aspect comprises a color characteristic of the object.

12. The method of claim 1 , wherein the dynamic aspect comprises an intensity of the object.

13. The method of claim 1 , wherein the altering the dynamic aspect comprises causing a movement of the object.

14. The method of claim 1 , wherein the dynamic aspect comprises a behavior of the object.

15. The method of claim 1 , wherein the object comprises one of (i) a character representable in Unicode, (ii) a symbol, (iii) a font, (iv) a static image, (v) an animated image, (vi) a video clip, (vii) sound generating data, (viii) an audio clip, (ix) vibration causing data.

16. A computer usable program product comprising a computer readable storage medium, and program instructions stored on the computer readable storage medium, the stored program instructions comprising:
program instructions to initiate, in a step of a construction of a dynamic object password (DOP) for user authentication, a transformation operation that alters a dynamic aspect of an object to transform the object, forming a transformed object;
program instructions to perform a placement operation on the transformed object relative to a field position of the DOP;
program instructions to generate a triple comprising a static indication of an instance of the object, a static identifier of the transformation operation, and an identifier of the placement operation;
program instructions to transmit to a server application the triple as a part of transmitting an authorization code, the authorization code forming the DOP; and
program instructions to add the transformed object to a set of objects such that the transformed object is available for selecting in a subsequent step of the construction of the DOP.

17. The computer usable program product of claim 16 , wherein the computer usable code is stored in the computer readable storage medium in a data processing system, and wherein the computer usable code is transferred over a network from a remote data processing system.

18. The computer usable program product of claim 16 , wherein the computer usable code is stored in the computer readable storage medium in a server data processing system, and wherein the computer usable code is downloaded over a network to a remote data processing system for use in a second computer readable storage medium associated with the remote data processing system.

19. A computer system comprising a processor, a computer-readable memory, and a computer readable storage device, and program instructions stored on the storage device for execution by the processor via the memory, the stored program instructions comprising:
program instructions to initiate, in a step of a construction of a dynamic object password (DOP) for user authentication, a transformation operation that alters a dynamic aspect of an object to transform the object, forming a transformed object;
program instructions to perform a placement operation on the transformed object relative to a field position of the DOP;
program instructions to generate a triple comprising a static indication of an instance of the object, a static identifier of the transformation operation, and an identifier of the placement operation;
program instructions to transmit to a server application the triple as a part of transmitting an authorization code, the authorization code forming the DOP; and
program instructions to add the transformed object to a set of objects such that the transformed object is available for selecting in a subsequent step of the construction of the DOP.

Assignees

• IBM

Inventors

• Kline Eric V
• Maresh Mark E
• Nolan Colm
• Vargas Juan F
• Vasudevan Cheranellore
• Whitney Michael J

Classifications

• H04L9/3228 Primary

  One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key · CPC title

• G06F21/36

  by graphic or iconic representation · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G09C5/00

  Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title