Establishing a secure channel with a human user

Patent metadata

Field	Value
Publication number	US-9356929-B2
Application number	US-201213451369-A
Country	US
Kind code	B2
Filing date	Apr 19, 2012
Priority date	Apr 25, 2002
Publication date	May 31, 2016
Grant date	May 31, 2016

Abstract

A method of establishing a secure channel between a human user and a computer application is described. A secret unique identifier (“PIN”) is shared between a user and an application. When the user makes a request that involves utilizing the PIN for authentication purposes, the application renders a randomly selected identifier. The randomly selected identifier is in a format that is recognizable to a human but is not readily recognizable by an automated agent. The randomly selected identifier is then presented to the human user. The user identifies the relationship between the randomly selected identifier and the PIN. If the user's input reflects the fact that the user knows the PIN, then the user is authenticated.

First claim

We claim:

1. A secure, computer implemented, and non-cryptographic method of authenticating a user over an insecure communication channel, the method comprising:
receiving, at a first computing device associated with the user, an image sent from a second computing device over the insecure communication channel, the image comprising randomly chosen alphanumeric characters, the randomly chosen alphanumeric characters being encoded in the image such that when the image is displayed to the user, at least some of the randomly chosen alphanumeric characters at least partially intersect;
displaying the image to the user on the first computing device;
receiving, at a user interface from the user, a number of clicks on a sequence of up and down buttons associated with the randomly chosen alphanumeric characters, the number of clicks based on a relationship between each character of the randomly chosen alphanumeric characters and a corresponding character of a predefined password, and collecting the number of clicks on the sequence of up and down buttons as first input data;
sending the first input data to the second computing device over the insecure communication channel, the first input data enabling, at least in part, the second computing device to derive the predefined password from the randomly chosen alphanumeric characters; and
receiving, from the second computing device, authorization to access a service provided by the second computing device.

2. The method of claim 1 , wherein the first computing device is selected from the group consisting of: personal computer, automated teller machine, set-top box, laptop computer, cellular phone, personal digital assistant, and workstation.

Assignees

• Pinkas Binyamin
• Haber Stuart A
• Tarjan Robert E
• Sander Tomas
• Intertrust Tech Corp

Inventors

• Pinkas Binyamin
• Haber Stuart A
• Tarjan Robert E
• Sander Tomas

Classifications

• G07C9/33

  by means of a password · CPC title

• G09C5/00

  Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• G06Q20/341

  Active cards, i.e. cards including their own processing means, e.g. including an IC or chip · CPC title

• G07F7/1008

  Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system · CPC title