RU2263341C1 - Method and device for inputting password for access to computer databases - Google Patents

Abstract

FIELD: computer science.

SUBSTANCE: according to one variant, parameters of dynamic image are inputted to computer, dynamic image with selected parameters is shown to user, at least one object of dynamic image is marked, which received position in space preset by user and/or received time state, predetermined by user. According to other variant, predetermined access code in form of rhythmic series is provided, aforementioned series is pre-recorded in computer for storage and use during later input of password, during input of password aforementioned rhythmic series is inputted with use of a set of contact means of user input device.

EFFECT: higher efficiency, higher reliability, protection from reproduction by observers.

8 cl, 7 dwg

Description

Technical field

The invention relates to computer technology, and more particularly to a method for entering a password for access to computer databases and to a device for implementing the method.

State of the art

A known method for entering a graphic password, in which to enter a password, the user must in a certain sequence touch the areas of the graphic image on the display with the mouse (US patent No. 5559961, IPC G06F 11/00, publ. 24.09.1996).

However, the degree of password protection is not high. Firstly, an unauthorized user can see the process of entering password data and is able to repeat it. Secondly, the number of possible combinations of the passwords generated in this process is not high and is easily selected. In addition to the lack of a high degree of user protection, there is another significant inconvenience - not every password chosen by the user is easy to remember. To access many databases, it is necessary to store many different password combinations in memory, which with the abundance of such systems becomes impossible.

There is also a known method for entering a password, in which changing graphical images in the form of numbers are used, and for entering a password, the user performs logical operations, for example, subtraction, on the displayed and conceived images of numbers (Japanese patent No. 6-214954, IPC G06F 15/00, 3 / 02, publ. 08/05/1944). This known method provides a fairly high degree of protection, but requires additional logical operations that increase the load on the user.

SUMMARY OF THE INVENTION

The objective of the invention is to provide a method and device for entering a password for access to computer databases, which allows to eliminate the above disadvantages. The technical result achieved is the provision of effective protection of the user's password from being played by an outside observer, a substantial increase in the number of possible combinations to avoid selection while ensuring maximum ease of remembering the password and the convenience of entering the password by the user.

The specified technical result is achieved by the fact that in the method for entering a password for accessing a computer database in accordance with the invention, the parameters of the dynamic image used to enter the password are determined, the mentioned parameters are entered using the user input device into the computer and stored, the aforementioned is displayed on the display to the user at least one predefined dynamic image with user-selected parameters is marked with a means for marking time points A dynamic image object that has taken a user-defined position in space and / or has taken a user-defined state in time compares the saved parameters of the dynamic image used to enter the password with the parameters of the mentioned marked dynamic image objects and, if the specified parameters match, the password is identified.

The dynamic image is preferably a set of several screens, the state of each of which changes in time, and using a user device for marking time points, the appearance of the aforementioned predetermined object in at least one predefined screen is noted, the change of state of which is preferably carried out, for example, periodically.

The parameters of the dynamic image are preferably selected from the group including the number of screens, the number of objects displayed in each screen, the mode of changing the state of each of the screens, the rate of change of the state of each of the screens, an indication in which order to select the objects of the dynamic image and on which screen, an indication which of the screens are significant for entering a password, as well as a combination of the mentioned parameters.

In addition, the dynamic image may be an animated image, which includes animated objects whose position varies in space and / or the state of which changes in time, while using a user device to mark the time instants the appearance of a certain object in at least one position and / or condition. In this case, the parameters of the dynamic image are selected from the group including the number of animated objects, the animation speed of the objects, an indication in which order to select animated objects, and an indication of which of the animated objects are significant for entering a password.

The above technical result is also achieved by the fact that the device for entering a password for accessing a computer database, in accordance with the invention, comprises a user input device for entering parameters of a dynamic image for inputting a password into a computer, a display for displaying to the user a dynamic image with user selected parameters, means for marking points in time, designed to mark at least one predefined object dynamically image, which has taken a user-predefined position in space and / or has taken a user-predefined state in time, means for storing the entered parameters of the dynamic image, which serves for entering a password, comparing said stored parameters with the parameters of the marked objects of the dynamic image, and if the specified parameters coincide for password identification.

Moreover, the means for marking time instants preferably comprises at least one contact means providing marking of time instants when the user activates it, and can be made based on at least one input device selected from the group including a computer mouse, keyboard, graphic tablet.

In addition, the device for entering a password further comprises means for implementing a mode for changing the state of each of the screens, the speed of changing the state of each of the screens, the animation speed of the dynamic image objects, the order of selecting the dynamic image objects on the respective screens, taking into account the user entered indication of which contact tools are significant for entering a password.

The specified technical result is achieved by the fact that in the method for entering a password for accessing a computer database, in accordance with the invention, a predetermined access code is set in the form of a rhythmic sequence, said rhythmic sequence is previously entered using a user input device into the computer for storage and use when subsequent password entry, when entering the password, the aforementioned rhythmic sequence is entered using the user input device, vayut saved rhythmic sequence introduced rhythmic sequence and when they coincide identify password.

As a rhythmic sequence, a fragment of a musical work is preferably selected, while the contact means in the said set of contact means are assigned the key functions of a musical instrument.

A user input device may comprise at least one contact means, and for inputting a rhythmic sequence, the duration of each actuation of said contact means in the sequence of their activations is determined. In addition, a combination of long and short activations of said contact means may be selected as a rhythmic sequence.

The above technical result is also achieved by the fact that the device for entering a password into a computer database in accordance with the invention comprises a user input device for entering a rhythmic sequence into a computer, means for storing a preselected rhythmic sequence entered by a user input device, means for comparing the stored rhythmic sequences with a rhythmic sequence entered by the user on subsequent entries password, and, when they coincide, to identify the password.

In this case, the user input device is preferably selected from the group including a computer mouse, keyboard, and combination thereof, and a set of contact tools from said keyboard and computer mouse is selected for inputting a rhythmic sequence, and each contact element may correspond to a single contact means.

In addition, the set of contact tools may include groups of contact tools with the same functions so that each element of the rhythmic sequence corresponds to the involvement of any contact tool from the said group of contact tools.

Brief Description of the Drawings

The invention is illustrated by examples of its implementation, illustrated by the drawings, which show the following:

figure 1 - illustration of a first variant of a method for entering a password using a set of images dynamically displayed on the display of a user's computer;

figure 2 - illustration of a second variant of a method for entering a password using images with dynamically changing content displayed on the display of a user's computer;

figa-d is a detailed view of the steps of a password entry method according to a second embodiment of the invention.

Preferred Embodiments

In accordance with the first embodiment of the claimed method (FIG. 1), the user pre-determines the number of screens, the type of images displayed on each of the screens, the number of objects displayed on each screen, and the order in which to select the objects of the dynamic image, and which screen. In addition, the user determines by which contact means (for example, a left or right mouse button or a specific button on the keyboard, etc.) the time moment of the appearance of one or another predefined object on the screen will be marked. A predefined dynamic image object is an object that has assumed a user-defined position in space and / or has adopted a user-conceived state in time.

Additionally, the user can determine which of the screens are significant for entering a password, and which of them are insignificant, i.e. will be used to increase the security of entering a password. Relevant user settings are recorded by the software.

According to figure 1, the user is invited to monitor the appearance on the specified number of screens (in this case, four) graphic objects previously defined to create a password. The moments of time when a user-defined object appears on each of the screens are marked with the selected contact tool, for example, by clicking the left mouse button or by pressing the selected keyboard button. Moreover, the contents of each screen can periodically change any number of times at the request of the user and at his chosen speed. For example, the number of pictures displayed periodically by each screen is 20. The password can be defined by the user, for example, like this: the appearance of a tiger on the upper right screen; the appearance of a parrot on the lower left screen; the appearance of a shark on the upper left screen; the appearance of a butterfly on the lower right screen. That is, the first time stamp made by the selected contact means is addressed to the upper right screen, the second to the lower left screen, the third to the upper left, and the fourth to the lower right, which should correspond to the user-predefined order of selecting objects on the corresponding screens. The peculiarity of entering a password is that when fixing the time of appearance of a predefined object, the process of displaying objects continues until the password is completely entered. The password entry process does not reveal itself on the display, therefore, an outside observer does not know the appearance of which object and on which screen the user is watching, i.e. the appearance of what objects on what screens and in what order the user marks.

The functions of saving the entered parameters of the dynamic image, which is used to enter the password, comparing the mentioned saved parameters with the parameters of the marked objects of the dynamic image and, if these parameters coincide, identify the password using the appropriate software.

There are various options for implementing the password entry process. Firstly, the selection of password objects in each of the screens is optional, i.e. when determining the number of screens for display, the user can set any number of screens, for example, three, as significant. In this case, the password consists of any three objects of the dynamic image. Secondly, to mark the time moments of the appearance of each of the objects, you can select a specific contact tool. In this case, the example password described above with reference to FIG. 1 will look as follows. If the user's password corresponds to the appearance of a tiger on the upper right screen, the appearance of a parrot on the lower left screen, the appearance of a shark on the upper left screen and the appearance of a butterfly on the lower right screen, then the user can mark the time of the appearance of the tiger with the left mouse button, the time of the appearance of the parrot - right, shark - left, butterfly - left. Thus, the user himself chooses the degree of secrecy of his password and the level of difficulty in remembering it. Thirdly, when defining a password, you can select contact tools that are insignificant for creating a password. That is, in the above password, the right mouse button is considered insignificant, therefore, its click does not affect the password. This additionally increases the degree of password protection from the observer - now not only does the third-party observer not know the appearance of which object and on which screen the user is watching, he also does not know whether the appearance of this object is significant for the password, i.e. whether engaging a specific contact tool is meaningful for entering a password.

In another embodiment illustrated by FIG. 2, the user is prompted to monitor selected objects combined into a dynamic (animated) image. According to figure 2, such objects presented on the displayed image as a child, ball, fish, butterfly change their position in space, and such an object as a bird changes its state, that is, flies without changing its coordinates. Moments of time when animated objects occupy a predetermined position in space or reach a certain state in time are marked by the user with any device selected by him for this purpose to mark time instants (for example, by clicking the mouse or pressing the selected keyboard button). The user’s password can correspond to the states of animated objects at times when the fish went under water with his head (Fig. 3a), when the child stood still by the ball (Fig. 3b), when the ball appeared on the screen (Fig. 3c), when the butterfly is above the far right umbrella (Fig. 3d) and when the bird raises its wings up (Fig. 3d). That is, the first point in time, for example, the first mouse click, is addressed to the fish, the second to the child, the third to the ball, the fourth butterfly, and the fifth to the bird, which should correspond to the user-predefined order of selection of animated objects.

The peculiarity of entering a password is that when fixing the time of the appearance of a predefined object at a predefined point in space or when the object reaches a predefined state, the process of displaying animated objects continues until the password is fully entered. The password entry process does not reveal itself on the display, therefore, an outside observer does not know the position in space and / or the state of which object the user is following, and in what order the user marks them. In this case, the display of animated objects with a user-specified animation speed is periodically repeated in time in case the user does not have time to mark the corresponding object in a predetermined position. All of the above features for creating a password are possible: the selection of all animated password objects in a dynamic image is optional, i.e. the user, when defining objects for entering a password, can declare any objects significant.

Functions such as selecting the mode of changing the state of each of the screens, determining the speed of changing the state of each of the screens, determining the animation speed of dynamic image objects, the order of selecting dynamic image objects on the corresponding screens, taking into account the user entered indication of which of the contact tools involved are significant for password entry are implemented using the appropriate software.

When entering a password that is a rhythmic sequence, the user must enter a predetermined rhythmic sequence by means of predefined contact means. In this case, a fragment of a musical work can be selected as a rhythmic sequence, and the functions of the keys of a musical instrument can be assigned to contact means.

For example, the user selects the left and right mouse buttons as a means for entering a password. The user password can be set as follows: three clicks of the left mouse button, two clicks of the right mouse button, three - right, two - left, three - right, one - left, one - right, one - left, one - right, two - left. Such a seemingly difficult to remember password is a melody known as the “Dog Waltz” played on two keys of a keyboard instrument. Such a password is not easy to spy and repeat, because the hand completely covers the mouse, while the fingers are constantly on both contact means - it is difficult to understand which mouse button is pressed and how many times. Only the user knows the key melody, thanks to which you can remember the password in the form of an appropriate rhythmic sequence and the number and sequence of activations of each of the selected contact tools. When creating such a password, the user can select any means from the group of keyboard buttons, mouse buttons, their combinations, as well as a combination of contact tools with identical functions as contact tools for entering a password. For example, to enter the password described above, the user selects the top line of the keyboard, where the numbers are displayed, instead of the left mouse button, and the right field of the keyboard, where the numbers are also located, instead of the right mouse button. Moreover, in the process of entering the password within each group of buttons, each of them is identical in meaning. Those. it doesn’t matter which button of the group is pressed, it is important to which group, “right” or “left”, it belongs. This method of entering the password increases the degree of its protection from an outside observer, since the observer not only does not “hear” the rhythmic sequence entered by the user, but also does not know what meaning means the contact means corresponds to each element of the code. The code in the form of a rhythmic sequence can contain any number of "sounds", i.e. clicks of contact tools, depending on the user's ability to remember it.

The rhythmic sequence entered by the user is compared with the previously stored rhythmic sequence, and when they match, the password is identified. These functions can be implemented using software.

In one embodiment, the rhythmic sequence may be introduced as a combination of long and short activations of a predefined user-defined contact means.

The process of entering a password in the form of a rhythmic sequence is not accompanied by the display of any images on the screen, and access to the computer database does not occur until the password is completely entered.

The advantages of entering a password using a dynamic image are: a large number of possible combinations - each animated object can accept a sufficient number of easily remembered positions, as well as a high degree of protection from an outside observer-cracker, which can be implemented by any means described above or their combination. Thus, the proposed method of entering a password helps to solve one of the main problems that a user faces when choosing, remembering, and protecting his password for accessing computer databases.

The advantages of entering a password using a rhythmic sequence are: a large number of combinations created on the basis of well-known melodies and rhythms provide simplicity and ease of remembering a password by a user; The methods for entering rhythmic sequences additionally provide a high degree of protection from an outside observer.

Industrial applicability

The invention can be used to create password entry means for access to computer databases, when implementing secure access to mobile phones, terminals of financial transaction systems, as well as in access control systems to protected areas equipped with video monitoring devices.

Claims (23)

1. A method of entering a password for accessing a computer database, in which the parameters of the dynamic image used to enter the password are determined, the above parameters are entered using the user input device into the computer and saved, the said dynamic image with the parameters selected by the user is displayed on the display to the user, using at least one predetermined dynamic image object that has received the predetermined read only user position in space and / or accepted by the user a predetermined state in time, compared dynamic image stored parameters, used to enter a password, with the parameters of said selected dynamic image object and the coincidence of said parameters identified password. 2. The method according to claim 1, characterized in that the dynamic image is a set of several screens, the state of each of which changes in time, while using the user device to mark the time points the appearance of the aforementioned predetermined object in at least one predefined screen. 3. The method according to claim 2, characterized in that the state of the screen is changed periodically. 4. The method according to claim 2 or 3, characterized in that the dynamic image parameters are selected from the group including the number of screens, the number of objects displayed in each screen, the mode of changing the state of each of the screens, the speed of changing the state of each of the screens, indicating in what order you should choose objects of the dynamic image and on which screen, an indication of which of the screens are significant for entering a password, as well as a combination of the mentioned parameters. 5. The method according to claim 1, characterized in that the dynamic image is an animated image, which includes animated objects, the position of which varies in space and / or the state of which changes in time, while using a user device to mark time points the appearance of a particular object in at least one position and / or condition. 6. The method according to claim 5, characterized in that the dynamic image parameters are selected from the group including the number of animated objects, the animation speed of the objects, an indication in which order to select animated objects, and an indication of which of the animated objects are significant for entering a password . 7. A device for entering a password for accessing a computer database, comprising a user input device for entering parameters of a dynamic image for inputting a password into a computer, a display for displaying a dynamic image with user selected parameters, means for marking time points for marking at least one predefined object of the dynamic image that has taken a predefined user position in space stve and / or accepting user predetermined state in time, means for storing the input moving image parameters, used to enter a password, comparing said stored parameters with the parameters selected dynamic image object and the coincidence of the above parameters - for password authentication. 8. The device according to claim 7, characterized in that the means for marking time instants comprises at least one contact means providing a marking of time instants when activated by the user. 9. The device according to claim 7 or 8, characterized in that the means for marking time instants is based on at least one input device selected from the group including a computer mouse, keyboard, graphic tablet. 10. The device according to claim 7, characterized in that it further comprises means for implementing a mode for changing the state of each of the screens, the speed of changing the state of each of the screens, the animation speed of the dynamic image objects, the selection order of the dynamic image objects on the respective screens, taking into account the user input of which of the contact tools involved are significant for entering a password. 11. A method for entering a password for access to a computer database, in which a predetermined access code is set in the form of a rhythmic sequence, the aforementioned rhythmic sequence is preliminarily entered using a user input device into the computer for storage and use during subsequent password entry, when entering the password, the aforementioned rhythmic sequence using a user input device, compare the stored rhythmic sequence with the entered rhythmic sequence and if they match, identify the password. 12. The method according to claim 11, characterized in that the user input device contains a set of contact means, while for entering the rhythmic sequence, a certain number of contact means and the sequence of their use by the user are selected. 13. The method according to claim 11 or 12, characterized in that as a rhythmic sequence a fragment of a musical work is selected, while the contact means in the said set of contact means are assigned the key functions of a musical instrument. 14. The method according to claim 11, characterized in that the user input device comprises at least one contact means, and for the input of the rhythmic sequence, the duration of each actuation of said contact means in the sequence of their activations is determined. 15. The method according to 14, characterized in that as a rhythmic sequence select a combination of long and short activations of the said contact means. 16. A device for entering a password into a computer database containing a user input device for inputting a rhythmic sequence into a computer, means for storing a previously selected rhythmic sequence entered by a user input device, means for comparing a stored rhythmic sequence with a rhythmic sequence entered by the user at subsequent password entries, and if they match, to identify the password. 17. The device according to clause 16, wherein the user input device is selected from the group comprising a computer mouse, keyboard and combination thereof, while a set of contact tools from said keyboard and computer mouse is selected to enter a rhythmic sequence. 18. The device according to 17, characterized in that each element of the rhythmic sequence corresponds to the use of one contact tool. 19. The device according to 17, characterized in that the said set of contact means includes groups of contact means with the same functions so that each element of the rhythmic sequence corresponds to the involvement of any contact means from the said group of contact means. 20. A device for entering a password into a computer, comprising an input device for entering parameters of a dynamic image for inputting a password into a computer, a display for displaying a dynamic image, means for marking time instants for marking at least one predetermined object of the dynamic image, adopted a user-defined position in space and / or adopted a user-defined state in time, and means storage of input moving image parameters, used to enter a password, comparing the stored parameters to parameters selected dynamic image object and the coincidence parameters - for password authentication. 21. The method of entering the password into the computer, in which the parameters of the dynamic image used to enter the password are determined, the parameters are entered using the user input device into the computer and saved, the dynamic image with the parameters selected by the user is displayed on the display, marked with the means for marking the moments the time intended for marking at least one predefined object of the dynamic image that has taken a predefined user position s in space and / or accepting user during a predetermined time condition, and comparing the stored parameters of the dynamic image, used to input a password with parameters selected dynamic image object and the coincidence parameters identified password. 22. An input device to a computer, comprising an input device for inputting a rhythmic sequence into a computer, means for storing a preselected rhythmic sequence inputted by the input device, and means for comparing the stored rhythmic sequence with the rhythmic sequence entered by the user upon subsequent password entries, and when their coincidence - to identify the password. 23. A method for entering a password into a computer, in which a predetermined access code in the form of a rhythmic sequence is set, a rhythmic sequence is preliminarily entered using an input device into a computer for storing and using the subsequent password, when a password is entered, a rhythmic sequence is entered using an input device and compare the stored rhythmic sequence with the entered rhythmic sequence and if they match, identify the password.

Images