AU2013101012A4 - A Login Process for Mobile Phones, Tablets and Other Types of Touch Screen Devices or Computers - Google Patents

Abstract

Abstract A process including: displaying icons used for password entry into an electronic system, in such a way that a hand movement associated with entry of the password into the system is randomised. colour colour colour colour cE urSco ur uc ur 5g6 1 8 Figure 1

Description

1 A Login Process for Mobile Phones, Tablets and Other Types of Touch Screen Devices or Computers Cross-Reference to Related Applications 5 This application claims priority from Australian Patent Application(s): No.2013902015 entitled ''A Login Process for Mobile Phones, Tablets and Other Types of Touch Screen Devices or Computers'' and No. 2012903166 entitled 10 ''Login Process for Mobile Phones, Tablets and Other Types of Touch Screen Devices or Computers'' hereby incorporated by reference as though fully set forth herein. 15 Background of Invention Technical Field The present invention pertains to the field of computer system security. 20 Background Art Passwords used for electronic login systems are used to secure computer systems and other electronic systems. However, despite advances in encryption, providing a 25 secure login system remains an ongoing problem. Summary of Invention General problems with the background art, as identified 30 by the inventor, include: the vulnerability of electronic security systems to persons who upon seeing a hand movement associated with password entry into a keyboard are able to guess the password.

2 Specific problems with the background art, as identified by the inventor, include: central to the inventor's discovery is the realization by the inventor that 'standardized'' keypad layouts used for password entry 5 on mobile phones, banking terminals and other points of entry into electronic systems, create a security risk, for even if the complete details of a password, used to enter the system, are not seen by a person attempting to steal the password by watching a person enter the 10 password, the standardized layout of keypads used for password entry coupled with observed hand movements means that the person attempting to steal the password can often guess the password on a trial and error basis with little more information than that gleaned from observing 15 the general pattern of hand movements used to enter the password. Technical Problem 20 To ameliorate some of the effects of the general problems and the specific problems as recited above and in particular to provide, at least in part, a method to minimize the prospect of password theft by persons who have observed, at least in part, the hand movements 25 associated with password entry. Technical Solution Providing a plurality of non-standard keypad layouts, 30 including in one embodiment, randomised layouts, so as to minimize the prospects of an unauthorized person who observed, at least in part, the hand movements used to enter the password, from guessing the complete password.

3 Advantageous Effects Advantageous effects include: reducing the risk of a 5 person guessing a password based upon the person having observed, at least in part, a sequence of hand movements used to enter the password. Brief Description of Drawings 10 Figure 1 discloses an embodiment of a login display screen that features colours in circles that can be associated with numbers in squares for password login purposes. 15 Figure 2 discloses an embodiment of a login display screen that features symbols that can be associated with numbers in squares. Figure 3 shows a login display screen having pictures and numbers. 20 Figure 4 shows a login display screen having colours and numbers. Figure 5 shows a login display screen having more colours and numbers than those displayed in figure 4 (an extended range). 25 Figure 6 shows a login display screen having more colours and numbers than those displayed in figure 5 (a further extended range). Figure 7 shows a login display screen having more colours and numbers than those displayed in figure 6 (another 30 further extended range). Figure 8 shows a login display screen in which numbers can be displayed as a result of rotation of a centrally located wheel.

4 Figure 9 shows a login display screen in which numbers are displayed in the form of a diamond with associated surrounding colours in circles. Figure 10 shows a login display screen in which a 5 horizontal slide is used to associate a colour with an underlying number. Figure 11 shows a login display screen in which another horizontal slide is used to associate a colour with an underlying number (fewer rows are seen here than in 10 figure 10). Figure 12 shows a login display screen in which a horizontal slider features a picture on the slider (the picture can then be associated with an underlying number for password entry purposes). 15 Figure 13 shows a login display screen in which a horizontal slider features a geometric shape on the slider. Figure 14 shows a login display screen in which a colour can be can be moved to a position over a vertical column 20 of numbers so as to associate the colour with a number selected from the column. Figure 15 shows a login display screen in which a picture can be can be moved to a position over a vertical column of numbers so as to associate the picture with a number 25 selected from the column. Figure 16 shows a login display screen in which a geometric symbol can be can be moved to a position over a vertical column of numbers so as to associate the symbol with a number selected from the column. 30 Figure 17 shows a login display screen in which a plurality of pictures can be selected so as to define a login password.

5 Figure 18 shows a computer system in which embodiments of the present invention can be used to login into aspects of the system. 5 Detailed Description Best Mode Definitions and Terms 10 The description in the body of the specification pertains to 'preferred' modes of invention. Accordingly, features recited in the body of the specification should not be construed to be essential features of the invention 15 unless explicitly indicated. Further, any reference in the body of the specification to the expression 'invention' should be construed to imply a reference to preferred embodiments. 20 The word ''random'' as used in the context of the display of icons for purposes of password entry into a computer system is meant to denote an arrangement of icons that are irregular to the extent that hand movements associated with password entry are non-predictable when 25 viewed in the context of password entry systems in routine industrial use. The word 'symbol' is taken to include any mark, geometric image, pictographic image, letter, number or other 30 graphical image used to represent something (adapted from the Macmillan Dictionary). Figure 1 illustrates a preferred embodiment of the present invention. A plurality of squares containing 6 numbers as well as circles containing colours are displayed to a user. The user can touch a circular object, for example Colour 1, which can be red and then drag his\her finger on the touchscreen onto the square 5 box "8" for example. Square box "8" then glows red for an instant to advise the user of his\her selection sequence. The user can then touch the square box "7" and drag his\her finger across the touchscreen to the circular object being colour 3 (in one selection sequence), which 10 is blue. Within the colour 3 circle the number "7" is visible for a moment and then the number '7'' disappears (once again to advise the user of his\her selection choice). This completes a particular user action sequence. The input data of the user consisting of "Red", 15 "8", "7", "Blue" is processed by the computer system and compared with a predefined password sequence that is required for the user to gain access to the system. The system will determine if the user has entered the 20 correct password sequence and if the correct password has been entered the system can grant the user access to a mobile phone device (in one preferred embodiment). When a user drags and drops a "5" onto the red circular 25 object, the computer system can optionally produce an audible sound that the user can hear signifying that the computer system has recognized that an action has been completed by the user. 30 In the case of a user input action sequence such that the action includes a swiping movement going from "1" to "6" within the grid of icons, the system can also provide, in one embodiment, visual feedback to the user by way of displaying the numeral "1" momentarily at the end point 7 of the swipe, that is, the grid point where "6" is usually displayed (to demonstrate the link between numerals ''1'' and ''6''). 5 Other types of layouts showing arrays of symbols, numbers, images (pictures) and colours are depicted in figures 2 to 16, these illustrations pertain to various login procedures that follow similar principles to the login procedure just described. 10 Figures 2-7 pertain to methods for associating colours, symbols and pictures with numbers (with the illustrated potential to vary the number of items being displayed on any login display screen). 15 Figure 8 shows a device where the number is displayed through rotation of a wheel (the number then potentially being associated with a colour). 20 Figure 9 shows numbers arranged together in the form of a diamond that can be associated with surrounding colours. Figures 10-13 show colours, pictures and symbols that appear on a horizontal slider for purposes of association 25 with underlying numbers. Figures 14-16 show items being colours, pictures and symbols that can each be moved to a position over an underlying vertical column of numbers for purposes of 30 associating one of the items with a number selected from the vertical column. Figure 17 shows an interface in which a picture can be touched and slid on top of another picture, so that pic12 8 can, in one password sequence, be dropped onto pic33 to define a password entry sequence. In a further preferred embodiment that can be illustrated 5 by reference to Figure 1, the user input action can be in the form of a drag and drop motion beginning with the number "1" and finishing with the colour "red". Alternatively, the input action can be performed using a stylus or finger by tapping "1" and then tapping the 10 colour "red", or by swiping (maintaining screen contact for at least part of the password entry) with a stylus or finger from the number "1" to the colour "red". Further, a finger swiping movement can occur such that 15 when reaching the "red" point on the grid the action pauses for a moment and then after this momentary pause the finger can move on to another position in the grid such as position "4". The computer system can optionally have settings, which can be configured to recognize 20 events including a momentary pause or to ignore the pause and only register the start and end points of a user's swipe or drag and drop movements. In a different embodiment, the software determining the 25 validity of user input is not present on the mobile device itself but instead is located, for enhanced security, within the core network service of the mobile phone service provider. 30 9 Mode for Invention In preferred modes of invention in generic form: 5 A computer can have a display screen having a grid composed of numerous icons depicting colours, symbols, pictures and numbers. A computer can be configured to receive user input 10 indicating that the user has selected and then moved items to different locations within a grid on the display screen (with this movement occurring according to a predetermined sequence for password entry purposes). 15 Input can be conveyed to a computer system by a user touching, or by another means including contact with a stylus or finger, to indicate that the user has selected a sequence of icons within the grid on the screen, with this touch action happening in a recognized sequence. 20 The provision of visual or audio feedback by a computer system to a user can indicate that the computer system has recognized each individual action a user has completed. 25 A colour, symbol, picture or number that has been contacted by a user, can be returned to its original location in order to conceal the action of the user, so that an observer cannot easily observe the input actions 30 of the user. The system can also include the ability for a user to cancel an incorrect action.

10 A computer system can include the capacity to determine that the user input action is acceptable when compared with a predefined sequence of actions that the computer system requires to happen before authentication and the 5 granting of access to services available on a device connected to the system (it being noted that while the device can in a preferred embodiment, including a phone, be portable, the device need not be portable but can instead be secured in place). 10 A computer system can have the capacity to store data in a system component managed by a memory control module of a device (the device being a phone in one embodiment) connected to the system in order that data that has been 15 input into the device can be compared with predefined data as recorded and stored. The previous comparison enables a determination about the acceptability of a user's input actions. The predefined data for purposes of comparison can also be stored remotely as well as 20 locally. The system can include the ability to lock a mobile phone or other computer device for a period of time if a user fails to provide a valid input action after repeated 25 login attempts, with this locking preferably happening after three failed login attempts. The system can include the capacity for the raising of a security alert within the system network of the mobile 30 phone network provider when a user of a device fails to provide a valid login input action on three consecutive occasions.

11 A further aspect of one embodiment of the present invention can include the ability for a mobile phone network provider to lock a mobile phone and disconnect the phone from the mobile phone network. 5 A computer system can include the capacity to grant access to a mobile phone or computer device of a user who is able to provide acceptable predefined input actions. 10 In a further preferred mode of invention in generic form, a login procedure can be used as login means for a user accessing an Internet web site, in which the embodiment can include some of the following features: 15 A web server can be configured to send HTML text and images to the Internet browser of a user. A web browser can receive transmitted data and display a grid containing colours, symbols, images (pictures) and 20 numbers on a computer screen. A computer system can include as one component, a phone, which can collect input data from a user who is interacting with a web browser displayed on the phone's 25 screen; the browser displaying on the screen, a grid of icons that can include colours, symbols, pictures (images) and numbers. A computer system (that can include a phone, a laptop or 30 a stationary desktop computer) can send data created by a user to a server and also receive input data from the server.

12 The server can authenticate the user data and grant or deny access to a web site. A further preferred mode of invention in generic form can 5 include an application (app) and further include the following features: The application (app) can display colours, symbols and images (pictures) on the computer screen of a device. 10 User input can create data that is checked by a device that can include a mobile phone, laptop, tablet or a stationary desktop computer. 15 A computer system embodying one mode of invention can authenticate user data and participate in the granting or denial of access to an application on the basis of user input. 20 Industrial Applicability Figure 18 shows a computer system in which embodiments of the present invention can be used industrially to login to the system. 25 Copyright in drawings the subject of this application is reserved and remains the property of NOWWW.US Pty Ltd ACN 137 333 709 and its assigns.

Claims (5)

1. A method comprising a step of: spatially associating a plurality of symbols of differing types that are displayed on an electronic screen, in such a way that the symbols can be used to enter a password.

2. The method as recited in claim 1 where the step of entering the password includes executing a swipe gesture.

3. The method as recited in any one of claims 1-2 further comprising a step of: selecting the password to be of at least a predetermined length.

4. The method as recited in any one of claims 1-3 further comprising a step of: moving a first one of the symbols towards a second one of the symbols in order to enter the password.

5. A method for entering symbols used to define a password for an electronic system having a login screen on which the symbols are displayed, comprising a step of: displaying the symbols in a random manner.