Access control by a mobile device using an image

Patent metadata

Field	Value
Publication number	US-9613201-B1
Application number	US-201314041103-A
Country	US
Kind code	B1
Filing date	Sep 30, 2013
Priority date	Sep 30, 2013
Publication date	Apr 4, 2017
Grant date	Apr 4, 2017

Abstract

A technique provides access control on a mobile device (e.g., a smart phone, a tablet, etc.). The technique involves displaying an image on a touch screen of the mobile device. The technique further involves, while the image is displayed on the touch screen, receiving user input from a user. The user input includes user gestures applied to the touch screen over the displayed image. The technique further involves performing an access control operation which provides an access control result based on the user input, the access control result (i) providing access to a set of protected resources when the user input matches expected input and (ii) denying access to the set of protected resources when the user input does not match the expected input.

First claim

What is claimed is:

1. A method of providing access control on a mobile device, the method comprising:
displaying an image on a touch screen of the mobile device;
while the image is displayed on the touch screen, receiving user input from a user, the user input including user gestures applied to the touch screen over the displayed image; and
performing an access control operation which provides an access control result based on the user input, the access control result (i) providing access to a set of protected resources when the user input matches expected input and (ii) denying access to the set of protected resources when the user input does not match the expected input;
wherein performing the access control operation includes:
outputting, as the access control result, a match signal indicating that the user input matches the expected input, and
providing access to a set of access control keys in response to the match signal, each access control key being constructed and arranged to control access to a respective protected resource; and

wherein receiving the user input from the user while the image is displayed over the touch screen includes:
while a set of gridlines is rendered over the image, receiving a set of user gestures which trace over the set of gridlines rendered over the image, each gridline extending from one edge of the image to another edge of the image;

wherein at least one user gesture traces along at least a portion of a particular gridline of the set of gridlines to copy that portion of the particular gridline; and
wherein performing the access control operation which provides the access control result further includes:
comparing the received set of user gestures which traced over the set of gridlines to an expected set of user gestures to determine whether the user is authentic.

2. A method as in claim 1 wherein the mobile device initially stores an encrypted container which contains the set of access control keys; and wherein providing access to the set of access control keys includes:
decrypting the encrypted container which contains the set of access control keys to obtain access to the set of access control keys.

3. A method as in claim 1 wherein providing access to the set of access control keys includes:
performing, by processing circuitry of the mobile device, a set of key derivation operations that: (i) uses the picture and the user input as key derivation function (KDF) inputs, and (ii) outputs the set of access control keys in response to the KDF inputs.

4. A method as in claim 1 , further comprising:
prior to displaying the image on the touch screen of the mobile device, prompting the user to select the image from a displayed offering of multiple images;
wherein the image is displayed on the touch screen in response to the user selecting the image from the displayed offering of the multiple images.

5. A method as in claim 4 wherein performing the access control operation which provides the access control result includes:
adding the selection of the image by the user to the user input, and
comparing the user input, which includes the added selection of the image, to the expected input to determine whether the user is authentic.

6. A method as in claim 1 wherein receiving the user input from the user while the image is displayed over the touch screen further includes:
while the set of gridlines is rendered over the image to divide the image into an array of image segments, receiving another set of user gestures which identify particular image segments of the image.

7. A method as in claim 6 wherein performing the access control operation which provides the access control result includes:
comparing the received other set of user gestures which identified particular image segments of the image to an expected set of user gestures to determine whether the user is authentic.

8. A method as in claim 1 wherein receiving the user input from the user while the image is displayed over the touch screen further includes:
while the set of gridlines is rendered over the image to divide the image into an array of image segments and while a segment modification control panel is displayed adjacent to the image, receiving another set of user gestures which (i) identify segment modification commands of the segment modification control panel, and (ii) modify at least some of the image segments of the image based on the identified segment modification commands.

9. A method as in claim 8 wherein performing the access control operation which provides the access control result includes:
comparing the received other set of user gestures which identified segment modification commands and modified at least some of the image segments to an expected set of user gestures to determine whether the user is authentic.

10. A method as in claim 8 wherein receiving other the set of user gestures includes:
receiving user gestures which rotate an image segment relative to other image segments.

11. A method as in claim 8 wherein receiving the other set of user gestures includes:
receiving user gestures which change a color of an image segment relative to other image segments.

12. A method as in claim 8 wherein a first image segment initially resides at a first location on the touch screen and a second image segment initially resides at a second location on the touch screen; and wherein receiving the other set of user gestures includes:
receiving user gestures which swap the first image segment with the second image segment to locate the first image segment at the second location on the touch screen and the second image segment at the first location on the touch screen.

13. A method as in claim 8 wherein receiving the other set of user gestures includes:
receiving user gestures which flip an image segment about an axis to render a mirror image of the image segment.

14. A mobile device, comprising:
a touch screen;
memory; and
control circuitry coupled to the touch screen and the memory, the memory storing instructions which, when carried out by the control circuitry, cause the control circuitry to:
display an image on the touch screen,
while the image is displayed on the touch screen, receive user input from a user, the user input including user gestures applied to the touch screen over the displayed image, and
perform an access control operation which provides an access control result based on the user input, the access control result (i) providing access to a set of protected resources when the user input matches expected input and (ii) denying access to the set of protected resources when the user input does not match the expected input;

wherein receiving the user input from the user while the image is displayed over the touch screen includes:
while a set of gridlines is rendered over the image, receiving a set of user gestures which trace over the set of gridlines rendered over the image, each gridline extending from one edge of the image to another edge of the image;

wherein at least one user gesture traces along at least a portion of a particular gridline of the set of gridlines to copy that portion of the particular gridline; and
wherein performing the access control operation which provides the access control result includes:
comparing the received set of user gestures which traced over the set of gridlines to an expected set of user gestures to determine whether the user is authentic.

15. A computer program product having a non-transitory computer readable medium which stores a set of instructions to provide access control on a mobile device, the se

Assignees

• Emc Corp
• Emc Ip Holding Co Llc

Inventors

• Dotan Yedidya
• Friedman Lawrence N
• Richards Gareth
• Bailey Daniel V

Classifications

• G06F21/36 Primary

  by graphic or iconic representation · CPC title