Multiple field authentication

Patent metadata

Field	Value
Publication number	US-2018191702-A1
Application number	US-201715397398-A
Country	US
Kind code	A1
Filing date	Jan 3, 2017
Priority date	Jan 3, 2017
Publication date	Jul 5, 2018
Grant date	—

Abstract

Techniques are disclosed relating to authenticating a user via a login screen. In one embodiment, a computer system displays a login screen having an arrangement of input fields where each input field is operable to receive a character. In some embodiments, the computer system receives a request from a user to access the computer system. The request may include a first passcode having characters input into a first subset of the input fields. The computer system then verifies the first passcode against a second passcode of an authorized user. The verifying may include comparing characters of the first passcode with characters of the second passcode and determining whether the first subset of input fields matches a second subset of the input fields used by the authorized user to input characters. Based on the verifying, the computer system may provide the user with access to the computer system.

First claim

What is claimed is:

1 . A non-transitory computer readable medium having program instructions stored thereon that are executable to cause a computer system to perform operations comprising:
displaying a login screen having an arrangement of input fields, wherein each input field is operable to receive a character of a passcode; receiving a request from a user to access the computer system, wherein the request includes a first passcode having characters input into a first subset of the input fields; verifying the first passcode against a second passcode of an authorized user, wherein the verifying includes:
comparing characters of the first passcode with characters of the second passcode; and
determining whether the first subset of input fields matches a second subset of the input fields used by the authorized user to input characters of the second passcode; and
based on the verifying, providing access to the computer system.

2 . The computer readable medium of claim 1 , wherein the comparing and the determining include:
calculating a first hash value for the first passcode based on the characters of the first passcode and identifiers of the first subset of input fields; and comparing the first hash value with a second hash value calculated for the second passcode.

3 . The computer readable medium of claim 2 , wherein the displaying includes arranging the input fields into a two-dimensional grid, and wherein the identifiers of the first subset of input fields are positions of the first subset of input fields within the two-dimensional grid.

4 . The computer readable medium of claim 2 , wherein calculating the first hash value includes:
creating a string by concatenating characters of the first passcode with the identifiers of the first subset of input fields; and applying a hash function to the string.

5 . The computer readable medium of claim 1 , wherein the receiving includes:
concealing content of an input field after a character has been input into the input field.

6 . The computer readable medium of claim 1 , wherein the operations further comprise:
denying access to the user requesting access to the computer system after a number of failed passcode verifications, wherein a length of time for denying the access is based on the number.

7 . The computer readable medium of claim 1 , wherein the operations further comprise:
displaying an additional input field that is operable to receive a sequence of characters specifying identification information for a user; and wherein verifying the passcode includes verifying the identification information.

8 . A non-transitory computer readable medium having program instructions stored thereon that are executable to cause a computer system to perform operations comprising:
presenting a display having a plurality of input fields arranged in a grid, wherein the plurality of input fields is operable to receive characters of a password; storing data for a first password of an authorized user, wherein the data indicates a first set of characters included in the first password and indicates a first set of positions for input fields within the grid that are used to input the first set of characters; receiving a second password of a user that requests access to the computer system, wherein the second password includes a second set of characters input into input fields having a second set of positions within the grid; determining 1) whether the second set of positions corresponds to the first set of positions and 2) whether the second set of characters matches the first set of characters; and based on the determining, granting access to functionality of the computer system.

9 . The computer readable medium of claim 8 , wherein the operations further comprise:
calculate a first hash value by applying a hash function to the first set of characters and values identifying the first set of positions, wherein the stored data includes the first hash value; and calculating a second hash value by applying the hash function to the second set of characters and values identifying the second set of positions; and wherein the determining includes comparing the first hash value with the second hash value.

10 . The computer readable medium of claim 9 , wherein the plurality of input fields are arranged into a plurality of columns and a plurality of rows within the grid, wherein the values identifying the first set of positions include a value identifying a row including an input field in the grid and a value identifying a column including the input field in the grid.

11 . The computer readable medium of claim 8 , wherein the operations further comprise:
receiving a third password of a user that requests access to the computer system, wherein the third password includes a third set of characters input into input fields having a third set of positions within the grid; and rejecting access to the computer system in response to determining that the third set of inputs fields differs from the first set of input fields.

12 . The computer readable medium of claim 8 , wherein the operations further comprise:
rejecting access to the computer system in response to a number of failed attempts of a user satisfying a threshold amount.

13 . The computer readable medium of claim 8 , wherein the operations further comprise:
hiding characters entered into the plurality of input fields, by replacing the entered characters with a default character indicating that the entered characters are hidden.

14 . The computer readable medium of claim 8 , wherein the plurality of input fields is arranged into a rectangular grid.

15 . The computer readable medium of claim 8 , wherein the plurality of input fields is arranged into a triangular grid.

16 . A non-transitory computer readable medium having program instructions stored thereon that are executable to cause a computer system to perform operations comprising:
storing information about a first password provided by an authorized entity, wherein the information includes information about characters included in the first password and information identifying a first set of locations where the characters were entered into an arrangement of input fields; retrieving an access request specifying a second password entered into a second set of locations in the arrangement of input fields; comparing the first password with the second password, wherein the comparing includes:
determining whether characters of the first password match characters of the second password; and
determining whether the second set of locations matches the first set of locations; and
based on the comparing, determining whether to grant the access request.

17 . The computer readable medium of claim 16 , wherein the operations further comprise:
determining to not grant the access request in response to determining that the second set of locations does not match the first set of locations, and wherein the first set of locations correspond to a subset of input fields within the arrangement of input fields.

18 . The computer readable medium of claim 16 , wherein the access request is a request for accessing a computing device.

19 . The computer readable medium of claim 16 , wherein the retrieving includes:
retrieving the access request over a computer network from a computing device external to the computer system.

20 . The computer readable medium of claim 16 , wherein the arrangement of input fields has two or more dimension

Assignees

• Ca Inc

Inventors

• Padmanabhan Ragavendran
• Mokhinuddeen Shaik
• Aluri Koti Reddy

Classifications

• G06F21/36

  by graphic or iconic representation · CPC title

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title