BG112680A - User iidentity and will proving method - Google Patents

Abstract

The invention relates to a user identity and/or will proving method, intended for performing or enabling communication between a tablet, computer, mobile or other communication or functional device and a user. The method creates conditions for achieving a higher level of security in identification, including direct visual or technology assisted surveillance. The method can also be used as an addition or substitute of other methods of user identity and/or will. When performing a user session to gain access in a workspace with "n" work areas, it is generated a set of service elements, as the user selects the number, type and/or repeatability of the elements and saves the sequence of their specifying, whereby the generated random combination visualizes for the user the elements in a sequence, the combination chosen by user, and when starting a user access session the user marks only the work areas where the pre-selected elements can be found, and in the sequence set by the user at the initial registration.

Description

METHOD OF PROVING THE IDENTITY AND / OR WILL OF A USER

FIELD OF THE INVENTION

The invention relates to a method for proving user identity and / or will, intended for performing or enabling communication between a tablet, computer, mobile or other communication or functional device and a user. The method creates conditions for achieving a higher level of security in identification, including direct visual or technology-assisted surveillance, but can also be used as a supplement or substitute for other methods of identity and / or user will.

BACKGROUND OF THE INVENTION.

Various methods for proving user identity and / or user will are currently known, which are considered to be the methods providing the highest degree of access security, based on the use of additional autonomous devices owned by the user, generating unique for the user, for the specific moment in time and the device identifying dynamic code. The information contained in the device can additionally be accessed by using a key, password or PIN code, which are known only to the user. A similar method of user identification and / or user will can be applied to a device that is not owned by the user, as well as in public places. In such cases, the user is accessed by sending a password key, PIN code, which is one-time and valid only for the specific user session, ie. to identify the user for a specific period of time.

A method of identification and / or user will is known, which is applied including in cases where access to information is required, where neither the address nor the device is required from the user, and the key, code or password known to the user is enters in a working window of a web site, which is accessed through an international communication network / Internet or Intranet web environment /.

The described method of access and identification shall be performed from each communication point, without any restriction regarding location and / or access device.

The described method has a disadvantage, mainly related to the degree of security, due to the availability of common methods for tracking password entry by recording keyboard shortcuts and sequences and / or recording cursor movements, (keyloggers), as well as possible methods. to record the screen recorders. On the other hand, due to the need for easy and fast identification and especially when used in public places, passwords with a high degree of security are entered relatively slowly. For this purpose, a method has been adopted for entering simple passwords, such as "pin codes", which, however, do not contain the necessary mathematical complexity. All types of passwords contain a certain degree of risk and can be visually traced, copied or obtained by intercepting the communication protocol of the devices.

Methods are known for proving user identity, identity and will, which include an individual device with hardware-encrypted unique user identification information installed, which is used with accompanying software (electronic signature), and the information is exchanged. based on private and public keys.

Control software is accessed by entering a password or pin code when the individual device is connected to the operating system. This method of identification can be defined as having sufficient security, but at the same time the user has the inconvenience of owning his own device, as well as periodically updating a physical device and recorded information from each user, the need to install software to support the device. system, as the compatibility under the handle is conditional and significantly limited.

There are a number of security precedents when using this method, which are due to improper storage and protection of the device. In these cases, after interception of the PIN code or the password for identification of the control software of the device, illegal access to the physical device or to a computer system is carried out, in the presence of an actively switched device, and also during the running control software. will or identification, in the latter case it is not always necessary to have the PIN code or password for the control software in advance.

Methods for user identification are known in which additional capture of biometric user information is provided. Existing methods provide relatively good security in identifying the user and / or user will. A significant disadvantage is the requirement of certain biometric devices to the used device and / or operating system, which are different types and currently there are no standard rules and requirements for different types of devices to make the method universal.

At present, the identification is performed as the application does not directly control the biometric device, and the user sends a request to it by entering pre-recorded biometric data and after comparing them the device returns a binary answer - yes or no. A method of identification using a face image (US20180039845) is known, which allows misidentification of parts of the image. It is therefore important to reduce the possibility of erroneous or fraudulent biometric authentication, such as those based on the recognition of an image (such as a portrait photograph) of an authorized person.

Thus, by manipulating the communication between the control drivers or the middleware of the device with the application performing the query, the results can be manipulated and depend on the specific device models, middleware drivers and others. For this reason, it is difficult to make a realistic assessment of the degree of security of the described method. In certain cases, the requested biometric information may be pre-acquired or downloaded by the user, including the available possibility to be successfully compared in front of the biometric device.

A method for graphically representing alphanumeric information is known. A series of letters, numbers, or symbols is displayed as an image in a preview window. The method allows a certain degree of deformation of the displayed information. The user must reproduce the displayed image as text in an input window. This method has a lower level of security than using a standard password consisting of letters, numbers, and symbols from a standard QWERTY keyboard, due to the likelihood of misrecognition of individual distorted images. Like the method previously described, this one is also not secure in terms of the possibility of performing a visual association performed by another user, not guaranteeing the necessary security against computer-generated attempts to reproduce combinations.

There is a method for identifying a user, in which the user from his own device, with an operating system installed, can set a trajectory on pre-selected from a randomly selected image. When identifying, the user must reproduce a predetermined or part of the trajectory with a certain approximation, which he marks with closed polygons, vectors or points. The disadvantage of the described method is its insufficient certainty in terms of possible mathematical combinations, as well as due to the fact that there is a finite number of trajectories of motion on a fully visualized graphic image. The level of security additionally implies the possibility of using screen recorders.

A method for user identification is known - EP2493228, according to which the user selects a graphic object, divides it into separate areas, which are arranged on the basis of graphically presented information, representing a matrix consisting of "t" row, with "N" columns. There is a graphic image in each element of the matrix. Based on predefined identification instructions, the user must select one or more specific elements that are defined by regular geometric areas enclosed in polygons from the matrix based on a visual association.

The described method is not sufficiently certain in terms of the possibility of a visual association performed by another user, but guarantees a certain security against computer generation of attempts to reproduce combinations. The level of security further implies the possibility of using screen recording methods (screen recorders). Another disadvantage of the method is the finite number of elements of the matrix, which gives a limited number of permutations of probable solutions, as well as the overall output of the whole image, which gives additional limitations in terms of compatibility and universal support with different operating systems, devices and more.

SUMMARY OF THE INVENTION.

In view of the prior art described above in the art, it is an object of the invention to provide a method of proving user identity and / or will which is universally and conveniently applicable, while at the same time providing

L. ·:: / · j / j increased security, ’to increase the security of identification and authenticity and improve the reliability of access to the system as a whole.

The object of the invention is solved by a method for proving user identity and / or will, which comprises selecting one or more elements located in working polygon zones, after which the user sets a certain sequence of the selected elements, as at the opening of a session for access, the user recognizes the selected graphic elements in the predetermined selection sequence.

According to the invention, when performing a user session for gaining access to a work area with "n" work zones, a set of service-defined elements is generated, the user selects the number, type and / or repeatability of the elements and remembers the order of their indication, where the generated random combination visualizes the elements in front of the user in the order selected by him, and when starting a user access session the user marks only the work areas in which the pre-selected elements can be found, in the order set by him at the initial registration.

At each access attempt (at each new session), the selected elements located in work areas are configured at different locations within one work area, in combination with other service-generated elements that the access security system contains. The elements selected by the user, located in the work areas are compared and confirmed whether they are specified in the predetermined by the user sequence, as in case of coincidence of the elements and the sequence of their indication the user gets access, and in case of incorrect indication of elements .

According to the identification sequence requirement, the predefined elements can be static or moving images, as well as spatial, three-dimensional images.

According to a preferred embodiment, the predetermined elements may be represented as a letter, number, symbols, names, image, photograph, combinations of corresponding or directional colors, displayed in multiple lines or sequences.

The work areas are preferably rectangular or square in shape, and it is possible to have work areas of different shapes in one work area.

·: L. : ’·. ·. *: / [0021] The user can at his discretion choose a combination of "and" the number of elements from the officially set elements.

According to a variant embodiment of the method, in the set of optional elements the user can enter "n" the number of personal elements, for example personal photos or parts of them or parts of a user's face.

According to a preferred embodiment of the method, in each user session, the identification sequence of the working areas in one working field and the location of the elements in them are generated at random.

According to a preferred embodiment of the method, each user session is only valid for a predetermined period of time.

According to a variant embodiment of the method for proving identity simultaneously with the visualization of a randomly generated sequence of predefined elements, additional auxiliary and / or misleading information is indicated for the identification sequence to indicate the sequence of the user selection, which is extracted from the row with supporting information that may be in or out of the work area.

According to a preferred embodiment of the invention, the graphic element may be one or more two-dimensional images.

According to a preferred embodiment of the invention, the graphic object may be one or more three-dimensional graphic surfaces.

According to an embodiment of the invention, the graphic object may be a combination of two-dimensional and three-dimensional images.

According to the invention, the graphic object may be a moving object.

The method for user identification and / or expression of user will has the advantage of a high degree of security against accidental generation or recognition, as it is based on the visual association, recognition and selection by the user of pre-selected elements - graphic images , located in different work areas of one workspace, as each new access session changes both their location and the combinations in their grouping, which is the result of a random identification sequence generated by the system. The number of selected elements is not limited and is determined by the user, as the larger number of elements in one combination gives greater security of access.

The identification method allows the use of elements as two-dimensional and / or three-dimensional images and surfaces, moving objects, including personal photos of the user, the diversity of which creates conditions for high variability of combinations of elements, respectively achieving a higher degree security when recognizing the user-selected combination of elements. The method for identifying a user according to the invention is also distinguished by the advantage that it generally guarantees a higher level of security than the known methods. The proposed method of identification provides security of access, which eliminates opportunities for unauthorized software tracking, as well as for visual tracking and remembering the user-selected sequence of elements, because only through it the user receives in one work area (field) pre-selected by an element in combination with other element (s) of a similar or radically different nature. This generally increases security, because when visually traced by another person or tracked by technical means, the user's motive for marking a work area (field) does not become clear and cannot be deciphered, while the level of security of the access and protection increases in proportion to the number of elements in the workspace.

The method is applicable and works successfully in all known network and operating environments, as the protection is achieved by using notations that are known only to the user, who independently sets, means, determines their sequence, but remains randomly combined with other elements of the system. A work area (field) can include at least 2 elements, be of different type, as well as with different number and type of combinations and elements - two-dimensional, three-dimensional, including moving and be displayed on the same or different background each time etc. The shape and number of all elements in the access system can be changed, while maintaining the principle of placement of elements in a work area, which can change its location and shape to contain misleading information in combination with correct information. The method may require a pre-entered sequence to identify the assigned areas in a specific way known only to the user and adding accompanying, assisting or misleading information, and it may be necessary to specify a given area more than once. This makes it difficult to retrieve information in direct visual or technology-assisted monitoring of user actions to monitor the manipulation of the introduction of ♦ · · · · · · · ”·· designations.

The method according to the invention limits the possibilities of using standard methods for tracking the user's actions, for example by recording keyboard shortcuts and sequences and / or recording cursor movements (keyloggers), or taking recordings on the screen (screen recorders). , and does not require the use of additional identification devices of any kind and without additional encryption requirements for the operating systems used. The method can be used as a supplement or substitute for other methods of identity and / or consumer will, respectively, and can be applied in public places and / or on devices that are not the personal property of the user.

DESCRIPTION OF THE DRAWINGS.

Hereinafter, in the description of the invention, an exemplary embodiment of the method for proving user identity will be presented, which is illustrated by means of the accompanying drawing, in which:

FIG. 1 - represents a representation of elements arranged in multiple rows or sequences

FIG. 2 - presents a combination of elements selected by the user, in a sequence selected by him.

FIG. Za-Zv - presents a sequence of three working fields, with different location of the working areas, respectively different location of the elements selected by the user.

EXAMPLE EMBODIMENT OF THE INVENTION

Hereinafter, an exemplary embodiment of the method for proving user identity and / or user will will be presented, and the described sequence of operations and their characteristic parameters may be applied in various embodiments and modifications, such as use two or three dimensional images, the grouping and arrangement of which in separate work areas have an equivalent action or functional purpose and provide the described beneficial effect of using the method of proving user identification. In this sense, the exemplary embodiment of the method according to the invention should be considered and interpreted to illustrate the idea of the proposed technical solution, which does not limit the use of other alternative embodiments. Aspects of the present invention are described in connection with the application of the method

according to embodiments of the invention. What is stated in the description must be understood and interpreted that any workspace as well as a combination of workspaces can be applied by reading program instructions from a computer.

The method of proving user identity is performed in the following sequence:

Initially, the user performs preliminary preparation, including the following operations: it is appropriate for the user to have a library of elements in his / her individual profile / FIG. 1 /, essentially graphic objects, which contains a standard set of pre-selected or added graphic objects, as the user has the option to add his own graphic objects. Each element can be accompanied by a sound equivalent.

The user selects one of the elements in the library, essentially graphic objects or an element added by him, which practically sets a graphic object that will be used to prove the user identification and / or will. The order of its selection (Fig. 2) also determines the identification sequence required for the system to compare the results in subsequent sessions.

Visual reproduction of the individual elements. In the present embodiment, all the features of the method described below are displayed and / or randomly generated for each individual user session and each individual actual implementation, which may be valid for a certain period of time after which they cease to be relevant, accordingly, it is not possible to grant user access. Each visual element can be displayed in each user session or in a series of user sessions in different style, style and vision, but defining the user's predetermined choice in a definite way, providing his exact definition of the element.

When performing a user session for gaining access, the system device generates any combination of pre-selected by the user elements in combination with other elements officially offered by the system. The correct combination with the correct sequence is found in the system and a hidden timer for the duration of the user session is started, as well as information about the previous unsuccessful number of access attempts, the critical state

mode and the number of critical failed attempts. The specified work areas contain officially generated elements, for example graphic images extracted from the system library as the generated arbitrary combination of graphic areas is visualized in front of the user in any order (Fig. 3). At the same time, the system, in combination with random elements from its library, loads and visualizes the tooltips (pre-selected by the user) and rules of the user profile. The method also provides for setting ancillary requesting information, which renders the sequence of the predetermined identification sequence, changing it in an order determined by the system, which is different each time. It can be integrated into the desktop, as a separate module (s), where the system generates different requesting information for each new session, which renders the sequence of the predefined identification sequence and, by matching the combinations, determines whether the session is successful or not.

The user selects the areas according to the names / designations preset by him, and when specifying N number of marks and when the user confirms his choice, the operating system performs a check for matching the identification sequence preset in the system. When all selected areas match within the time valid for the session and the execution of the identification sequence, the system allows access. In the absence of a match of one area, or in case of non-fulfillment of the identification sequence, the system reports a failed access attempt, and in case of exhaustion of the predefined and / or critical number of failed attempts, the user access is limited. After each unsuccessful attempt, the working session is closed and the user must open a new session, and within the duration and re-enter the required identification sequence, which is different in the new user session.

The method provides possibilities for applying the standard actions used in conventional access methods, in particular with respect to actions determining the number of critical and unsuccessful access attempts, for the duration of a user session, for a temporary or complete blocking of the user profile.

Visual representation of a given element. The preview of the set graphic element or any of the set graphic elements is performed in a selection window. The selection window is part of ·: ύ. ·:. ·. '· · ’*:« ······ <·· * the working field of the device * on which the proposed access method is applied. The selection window displays the graphic object or part of it, and the size and shape of the selection window is consistent with the specific user access device in terms of hardware and software characteristics. In this way, the size of the selection window does not affect the actual size of the graphic object's surface. The selection window may display tools for controlling the display of the specified graphic object. They can be used to select and present a desired part of the graphic object, which should contain the specified area or part of it, in the desired perspective and size. The control tools allow you to move or play a part of the graphic object, in particular that part which does not currently fall into the selection window.

The control tools allow increasing and / or decreasing the display of the given graphic object or part of it to the possibilities of the selection window, rotation - rotation of the graphic object relative to different axes of coordinate systems, output of the prompt markers that are visualized in the operating system workspace.

The access identification, when there is requesting information, ends with the sequential execution of the instructions set in the requesting information field. Upon successful execution of the method, the system allows user access. If the identification sequence fails, an error message is displayed on the screen of the device, the user session is closed, during which the user can start a new user session, in which the specified elements are displayed in a new, different combination. After a certain number of failed attempts, the user's access may be partially or completely blocked.

Actual implementation of the method for proving user identity and / or will. It is performed when it is necessary to perform initial and / or subsequent user identification and / or confirmation of a user action in relation to the access device containing the predefined user elements and settings in the user profile.

The selection of a working area is performed by positioning a graphic cursor and activating a selection or marking key combination on a given point of the working area, and depending on the type of device the selection of a working area is performed by direct single selection of a point on the surface. on the desktop from touch displays or screen.

The terminology used herein is for the purposes of the description only specific embodiments and is not intended to limit the invention. As used herein, the singular forms a, one and are intended to include multiple forms, as well as unless the context clearly indicates otherwise. It will be further understood that the terms include and / or include, when used in this specification, the specified presence of the specified characteristics, integers, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other functions, integers, steps, operations, elements, components and / or groups thereof.

The descriptions of the various embodiments of the present invention are provided by way of illustration, but are not intended to be exhaustive or to be limited to the disclosed embodiments. The method allows the implementation of a large number of modifications and variants that contain the scope and spirit of the idea.

Claims (10)

PATENT CLAIMS A method of proving user identity and / or will, comprising selecting one or more elements contained in an access security system located in work ranges, wherein the user sets a certain sequence of selected elements, such as when detecting In an access session, the user recognizes the graphic elements selected by him in the predetermined selection sequence, characterized in that the elements are displayed on the screen of the device, displayed in multiple rows or sequences, the user selects "n" number of elements and determines their identification sequence, and when opening an access session, the access security system visualizes a workspace composed of multiple work areas in which elements located in the work areas are located, where the user recognizes the selected elements by marking the work areas. zones in the pre-determined by him electoral sequence set by the user during the initial registration and the elements selected by the user, located in the work areas are compared and confirmed whether they are specified in the predefined by the user sequence, as in case of coincidence of the elements and the sequence of their indication the user gets access. or a broken sequence the user does not gain access. Method according to claim 1, characterized in that in each user session the identification sequence of the working areas in one working field and the location of the elements in them is generated at random. Method according to claim 1, characterized in that each user session is valid only for a predetermined period of time. Method according to claim 1, characterized in that at each new access attempt (at each new session) the selected elements located in work areas are configured in different places within one working field, in combination with other officially generated elements that the access security system contains. Method according to claim 1, characterized in that the elements can be static or dynamic images, as well as spatial, three-dimensional images. Method according to claim 1, characterized in that the elements of the library can be represented as a letter, number, symbol, name, image, photo, combinations of corresponding or directing colors and others, displayed in multiple lines or sequences Method according to claim 1, characterized in that the work areas are preferably made rectangular or square in shape, and it is possible to have work areas of different shapes in one working field. Method according to claim 1, characterized in that the user can enter in the library of elements "n" the number of personal items, personal photos or parts thereof or parts of a user's face. Method according to claim 1, characterized in that simultaneously with the visualization of a randomly generated sequence of predefined elements, for the purposes of the identification sequence, additional auxiliary and / or misleading information is displayed to indicate the sequence of the user selection to be extracted. from the line of supporting information that may be in or outside the workspace. Method according to claim 1, characterized in that the element may be one or more two-dimensional images, a three-dimensional graphic surface.