Connect public, paid and private patent data with Google Patents Public Datasets

System and method for user authentication with enhanced passwords

Info

Publication number
WO2004021108A3
WO2004021108A3 PCT/US2003/026378 US0326378W WO2004021108A3 WO 2004021108 A3 WO2004021108 A3 WO 2004021108A3 US 0326378 W US0326378 W US 0326378W WO 2004021108 A3 WO2004021108 A3 WO 2004021108A3
Authority
WO
Grant status
Application
Patent type
Prior art keywords
user
element
timing
sequence
stored
Prior art date
Application number
PCT/US2003/026378
Other languages
French (fr)
Other versions
WO2004021108A2 (en )
Inventor
Michael Lawrence Serpa
Original Assignee
Michael Lawrence Serpa
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRICAL DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/316User authentication by observing the pattern of computer usage, e.g. typical user behaviour
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRICAL DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication

Abstract

A system and method for enhancing passwords, access codes, and personal identification numbers by making them pace, rhythm, or tempo sensitive. The password includes a sequence of characters and an associated timing element. To access a restricted device or function a user enters the correct character sequence according to the correct pace, rhythm, or tempo. The entered sequence and timing element are compared with stored values and access is granted only if the entered and stored values match. In an alternative embodiment the stored timing element is set, and periodically altered, by a computer or program without consent from the user and visual, auditory, and/or tactile prompts indicate the correct timing element to the user during the authentication process. The meaning of the prompts are provided to the user in advance.
PCT/US2003/026378 2002-08-27 2003-08-22 System and method for user authentication with enhanced passwords WO2004021108A3 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US10228551 US6954862B2 (en) 2002-08-27 2002-08-27 System and method for user authentication with enhanced passwords
US10/228,551 2002-08-27

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2004532951A JP2005537574A (en) 2002-08-27 2003-08-22 User authentication system and method with enhanced password
EP20030791729 EP1540869B1 (en) 2002-08-27 2003-08-22 System and method for user authentication with enhanced passwords

Publications (2)

Publication Number Publication Date
WO2004021108A2 true WO2004021108A2 (en) 2004-03-11
WO2004021108A3 true true WO2004021108A3 (en) 2004-07-01

Family

ID=31976052

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2003/026378 WO2004021108A3 (en) 2002-08-27 2003-08-22 System and method for user authentication with enhanced passwords

Country Status (4)

Country Link
US (2) US6954862B2 (en)
JP (1) JP2005537574A (en)
EP (1) EP1540869B1 (en)
WO (1) WO2004021108A3 (en)

Families Citing this family (101)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR100450953B1 (en) * 2002-03-05 2004-10-02 삼성전자주식회사 User authentication method using password
US6954862B2 (en) * 2002-08-27 2005-10-11 Michael Lawrence Serpa System and method for user authentication with enhanced passwords
US7206938B2 (en) * 2002-09-24 2007-04-17 Imagic Software, Inc. Key sequence rhythm recognition system and method
US20080133933A1 (en) * 2002-09-24 2008-06-05 Bender Steven L Key sequence rhythm recognition system and method
US20080028231A1 (en) * 2002-09-24 2008-01-31 Bender Steven L Key sequence trustable activation recognition system and method
US20080028232A1 (en) * 2002-09-24 2008-01-31 Bender Steven L Key sequence recognition and password hardening system and method
US20080034218A1 (en) * 2002-09-24 2008-02-07 Bender Steven L Key sequence rhythm guidance recognition system and method
US7478248B2 (en) 2002-11-27 2009-01-13 M-Systems Flash Disk Pioneers, Ltd. Apparatus and method for securing data on a portable storage device
GB0229727D0 (en) * 2002-12-19 2003-01-29 Ibm Improved password entry
US7305705B2 (en) * 2003-06-30 2007-12-04 Microsoft Corporation Reducing network configuration complexity with transparent virtual private networks
US7533421B2 (en) * 2003-09-19 2009-05-12 Cyberlink Corp. Method for encoding and decoding confidential optical disc
US7873995B2 (en) * 2003-09-29 2011-01-18 Avaya Inc. Method and apparatus for generating and reinforcing user passwords
US8639937B2 (en) * 2003-11-26 2014-01-28 Avaya Inc. Method and apparatus for extracting authentication information from a user
US20050114678A1 (en) * 2003-11-26 2005-05-26 Amit Bagga Method and apparatus for verifying security of authentication information extracted from a user
US7490242B2 (en) 2004-02-09 2009-02-10 International Business Machines Corporation Secure management of authentication information
US7372839B2 (en) * 2004-03-24 2008-05-13 Broadcom Corporation Global positioning system (GPS) based secure access
US7444517B2 (en) * 2004-06-03 2008-10-28 International Business Machines Corporation Method for protecting a user's password
JP4371223B2 (en) * 2004-06-14 2009-11-25 日本電気株式会社 Mobile phone, set and release method lock function, program, and information recording medium
US8011014B2 (en) * 2004-12-16 2011-08-30 International Business Machines Corporation System and method for password validation based on password's value and manner of entering the password
US20060136738A1 (en) * 2004-12-16 2006-06-22 International Business Machines Corporation System and method for password validation
US7430756B2 (en) * 2004-12-22 2008-09-30 Jsm Technologies, Llc System and method for generating and authenticating a computer password
US7669057B2 (en) * 2005-01-24 2010-02-23 International Business Machines Corporation Secure computer password system and method
WO2006124666A3 (en) * 2005-05-13 2007-06-28 Sarangan Narsimhan A coordinate based computer authentication system and methods
US20060280339A1 (en) * 2005-06-10 2006-12-14 Sungzoon Cho System and method for performing user authentication based on keystroke dynamics
KR100714725B1 (en) * 2005-08-29 2007-05-07 삼성전자주식회사 Apparatus and method for protecting exposure of inputted information
US7890768B2 (en) * 2005-11-30 2011-02-15 Scenera Technologies, Llc Methods, systems, and computer program products for entering sensitive and padding data using user-defined criteria
US7480870B2 (en) 2005-12-23 2009-01-20 Apple Inc. Indication of progress towards satisfaction of a user input condition
US7657849B2 (en) 2005-12-23 2010-02-02 Apple Inc. Unlocking a device by performing gestures on an unlock image
JP2007249344A (en) * 2006-03-14 2007-09-27 Dainippon Printing Co Ltd User authentication system and method
JP2007265018A (en) * 2006-03-28 2007-10-11 Dainippon Printing Co Ltd User authentication system and method
JP4882448B2 (en) * 2006-03-29 2012-02-22 大日本印刷株式会社 User authentication system and method
EP2000939B1 (en) 2006-03-29 2013-04-17 The Bank of Tokyo-Mitsubishi UFJ, Ltd. Person oneself authenticating system and person oneself authenticating method
JP4882463B2 (en) * 2006-04-06 2012-02-22 大日本印刷株式会社 User authentication system and method
US20070271466A1 (en) * 2006-05-18 2007-11-22 Genevieve Mak Security or authentication system and method using manual input measurements, such as via user manipulation of a computer mouse
JP4127842B2 (en) * 2006-06-05 2008-07-30 株式会社東芝 The information processing apparatus
GB0621189D0 (en) * 2006-10-25 2006-12-06 Payfont Ltd Secure authentication and payment system
US8929360B2 (en) * 2006-12-07 2015-01-06 Cisco Technology, Inc. Systems, methods, media, and means for hiding network topology
US20080148393A1 (en) * 2006-12-15 2008-06-19 Barry Myron Wendt Neural authenticator and method
US7266693B1 (en) * 2007-02-13 2007-09-04 U.S. Bancorp Licensing, Inc. Validated mutual authentication
JP4359636B2 (en) * 2007-07-06 2009-11-04 京セラミタ株式会社 Authentication device, an authentication method and an authentication program
KR100923179B1 (en) * 2007-08-16 2009-10-22 재단법인서울대학교산학협력재단 Method and system for detecting account sharing based on behavior patterns
JP2010541046A (en) 2007-09-24 2010-12-24 アップル インコーポレイテッド An authentication system that was incorporated in an electronic device
JP2009169516A (en) * 2008-01-11 2009-07-30 Denso Corp Authentication device and authentication method
US20090210937A1 (en) * 2008-02-15 2009-08-20 Alexander Kraft Captcha advertising
US9513704B2 (en) * 2008-03-12 2016-12-06 Immersion Corporation Haptically enabled user interface
US8695087B2 (en) * 2008-04-04 2014-04-08 Sandisk Il Ltd. Access control for a memory device
US20090278807A1 (en) * 2008-05-12 2009-11-12 Sony Corporation Password input using touch duration code
US8174503B2 (en) 2008-05-17 2012-05-08 David H. Cain Touch-based authentication of a mobile device through user generated pattern creation
US8561174B2 (en) * 2008-06-16 2013-10-15 Igor Fischer Authorization method with hints to the authorization code
JP4693875B2 (en) * 2008-07-14 2011-06-01 シャープ株式会社 Image forming apparatus
US8217753B2 (en) 2008-12-30 2012-07-10 Harris Technology, Inc. Electronics antitheft authorizing unit
US8638939B1 (en) 2009-08-20 2014-01-28 Apple Inc. User authentication on an electronic device
EP2290572A1 (en) * 2009-08-27 2011-03-02 Monika Holland Process and arrangement for remotely specifiying a user profile
US8707453B2 (en) * 2010-01-29 2014-04-22 Christopher Liam Ivey System and method for restricting access to a computer system to live persons by means of semantic association of images
US8549314B2 (en) * 2010-04-29 2013-10-01 King Saud University Password generation methods and systems
US8788834B1 (en) * 2010-05-25 2014-07-22 Symantec Corporation Systems and methods for altering the state of a computing device via a contacting sequence
US8528072B2 (en) 2010-07-23 2013-09-03 Apple Inc. Method, apparatus and system for access mode control of a device
US20120032779A1 (en) * 2010-08-04 2012-02-09 Nokia Corporation Method and apparatus for accessing content within a device
US8547354B2 (en) 2010-11-05 2013-10-01 Apple Inc. Device, method, and graphical user interface for manipulating soft keyboards
US8587547B2 (en) 2010-11-05 2013-11-19 Apple Inc. Device, method, and graphical user interface for manipulating soft keyboards
US20120144460A1 (en) * 2010-12-07 2012-06-07 Netanel Raisch Methods and devices for access authenication on a computer
KR101755024B1 (en) * 2010-12-28 2017-07-06 주식회사 케이티 Mobile terminal and method for cancelling hold thereof
US8346217B2 (en) 2011-02-21 2013-01-01 Knowledge Solutions, LLC Systems, methods and apparatus for controlling access to mobile devices
US8401522B2 (en) 2011-02-21 2013-03-19 Carmela R. Crawford Systems, methods and apparatus for authenticating access to enterprise resources
US20120246483A1 (en) * 2011-03-25 2012-09-27 Netanel Raisch Authentication System With Time Attributes
WO2013009301A1 (en) * 2011-07-12 2013-01-17 Assa Abloy Ab Event driven second factor credential authentication
CN102955908B (en) 2011-08-31 2015-08-12 国际商业机器公司 Rhythm and create a password validation method and apparatus according to the rhythm password
US8826029B2 (en) * 2011-09-30 2014-09-02 International Business Machines Corporation Providing time ratio-based password/challenge authentication
JP5852393B2 (en) * 2011-10-05 2016-02-03 株式会社日本総合研究所 Authentication device, an authentication method, and program
WO2013062777A1 (en) * 2011-10-23 2013-05-02 Nandakumar Gopal Authentication system and method
US8505079B2 (en) 2011-10-23 2013-08-06 Gopal Nandakumar Authentication system and related method
US8800014B2 (en) 2011-10-23 2014-08-05 Gopal Nandakumar Authentication method
US8713656B2 (en) 2011-10-23 2014-04-29 Gopal Nandakumar Authentication method
US8533802B2 (en) 2011-10-23 2013-09-10 Gopal Nandakumar Authentication system and related method
US8566957B2 (en) 2011-10-23 2013-10-22 Gopal Nandakumar Authentication system
US8695071B2 (en) 2011-10-23 2014-04-08 Gopal Nandakumar Authentication method
JP2013097757A (en) * 2011-11-07 2013-05-20 Spotrend:Kk Authentication system
US8911507B1 (en) * 2011-11-22 2014-12-16 Symantec Corporation Systems and methods for mitigating mobile device loss
US9213822B2 (en) 2012-01-20 2015-12-15 Apple Inc. Device, method, and graphical user interface for accessing an application in a locked device
FR2986124B1 (en) * 2012-01-25 2014-03-14 Ercom Engineering Reseaux Comm Method for authentication of a device comprising a processor and a smart card by generation of a pattern
US8769669B2 (en) * 2012-02-03 2014-07-01 Futurewei Technologies, Inc. Method and apparatus to authenticate a user to a mobile device using mnemonic based digital signatures
US8640252B2 (en) 2012-05-07 2014-01-28 International Business Machines Corporation Obfuscating entry of sensitive information
CN102693380A (en) * 2012-05-07 2012-09-26 李良 Password authentication method
US9430633B2 (en) * 2012-07-12 2016-08-30 International Business Machines Corporation Aural cuing pattern based mobile device security
US8539567B1 (en) * 2012-09-22 2013-09-17 Nest Labs, Inc. Multi-tiered authentication methods for facilitating communications amongst smart home devices and cloud-based servers
JP6074206B2 (en) * 2012-09-26 2017-02-01 京セラ株式会社 The mobile terminal device, program, and a password input method
US9390244B2 (en) 2013-03-12 2016-07-12 Eric Lynch Temporal security for controlled access systems
US20140292635A1 (en) * 2013-03-26 2014-10-02 Nokia Corporation Expected user response
US20150007292A1 (en) * 2013-07-01 2015-01-01 International Business Machines Corporation User authentication utilizing patterns
CN104283679A (en) * 2013-07-05 2015-01-14 中国电信股份有限公司 Method and system for conducting safety certification by input rhythms
US20150040193A1 (en) * 2013-08-02 2015-02-05 Datafise, LLC Physical Interaction Style Based User Authentication for Mobile Computing Devices
GB201316649D0 (en) * 2013-09-19 2013-11-06 Ibm Code verification
US20150156803A1 (en) 2013-12-01 2015-06-04 Apx Labs, Llc Systems and methods for look-initiated communication
US9147056B2 (en) 2014-01-09 2015-09-29 International Business Machines Corporation User authentication
WO2015120176A1 (en) * 2014-02-05 2015-08-13 Anchor Id, Inc. Method and system of accessing computer accounts
US9213819B2 (en) 2014-04-10 2015-12-15 Bank Of America Corporation Rhythm-based user authentication
EP2966585A1 (en) * 2014-07-11 2016-01-13 Unify GmbH & Co. KG Method and system for initiating a login of a user
CN105450405A (en) * 2014-07-18 2016-03-30 阿里巴巴集团控股有限公司 Password setting and authentication method and system
US20160050209A1 (en) * 2014-08-18 2016-02-18 Ebay Inc. Access control based on authentication
US9590808B2 (en) * 2014-12-08 2017-03-07 International Business Machines Corporation Obfuscated passwords
US9848331B2 (en) * 2015-11-20 2017-12-19 International Business Machines Corporation Augmenting mobile device access control modes with hardware buttons

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5844497A (en) * 1996-11-07 1998-12-01 Litronic, Inc. Apparatus and method for providing an authentication system
US6192478B1 (en) * 1998-03-02 2001-02-20 Micron Electronics, Inc. Securing restricted operations of a computer program using a visual key feature

Family Cites Families (27)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4621334A (en) * 1983-08-26 1986-11-04 Electronic Signature Lock Corporation Personal identification apparatus
US4805222A (en) * 1985-12-23 1989-02-14 International Bioaccess Systems Corporation Method and apparatus for verifying an individual's identity
JPH05274269A (en) * 1991-11-18 1993-10-22 Internatl Business Mach Corp <Ibm> Method and system for verifying validity of access in computer system
US5812819A (en) * 1995-06-05 1998-09-22 Shiva Corporation Remote access apparatus and method which allow dynamic internet protocol (IP) address management
US5872917A (en) * 1995-06-07 1999-02-16 America Online, Inc. Authentication using random challenges
US5821933A (en) * 1995-09-14 1998-10-13 International Business Machines Corporation Visual access to restricted functions represented on a graphical user interface
DE19548397C1 (en) * 1995-12-22 1997-01-23 Siemens Ag Access control system for shared computer programme
US5719941A (en) * 1996-01-12 1998-02-17 Microsoft Corporation Method for changing passwords on a remote computer
US6006333A (en) * 1996-03-13 1999-12-21 Sun Microsystems, Inc. Password helper using a client-side master password which automatically presents the appropriate server-side password to a particular remote server
US5684951A (en) * 1996-03-20 1997-11-04 Synopsys, Inc. Method and system for user authorization over a multi-user computer system
US5937068A (en) * 1996-03-22 1999-08-10 Activcard System and method for user authentication employing dynamic encryption variables
US5845070A (en) * 1996-12-18 1998-12-01 Auric Web Systems, Inc. Security system for internet provider transaction
WO1998052115A1 (en) 1997-05-13 1998-11-19 Passlogix, Inc. Generalized user identification and authentication system
US5944825A (en) * 1997-05-30 1999-08-31 Oracle Corporation Security and password mechanisms in a database system
US6079021A (en) * 1997-06-02 2000-06-20 Digital Equipment Corporation Method and apparatus for strengthening passwords for protection of computer systems
US6278453B1 (en) * 1997-06-13 2001-08-21 Starfish Software, Inc. Graphical password methodology for a microprocessor device accepting non-alphanumeric user input
US6151593A (en) * 1997-07-14 2000-11-21 Postech Foundation Apparatus for authenticating an individual based on a typing pattern by using a neural network system
US6141760A (en) * 1997-10-31 2000-10-31 Compaq Computer Corporation System and method for generating unique passwords
JP2001511303A (en) * 1997-12-11 2001-08-07 フィリップス エレクトロン オプティクス ビー ヴィ Particles - correcting device for correcting spherical aberration in the optical system
US6370649B1 (en) * 1998-03-02 2002-04-09 Compaq Computer Corporation Computer access via a single-use password
US6195698B1 (en) * 1998-04-13 2001-02-27 Compaq Computer Corporation Method for selectively restricting access to computer systems
US6442692B1 (en) * 1998-07-21 2002-08-27 Arkady G. Zilberman Security method and apparatus employing authentication by keystroke dynamics
US6209102B1 (en) * 1999-02-12 2001-03-27 Arcot Systems, Inc. Method and apparatus for secure entry of access codes in a computer environment
US6353891B1 (en) * 2000-03-20 2002-03-05 3Com Corporation Control channel security for realm specific internet protocol
US6720860B1 (en) * 2000-06-30 2004-04-13 International Business Machines Corporation Password protection using spatial and temporal variation in a high-resolution touch sensitive display
US7003670B2 (en) * 2001-06-08 2006-02-21 Musicrypt, Inc. Biometric rights management system
US6954862B2 (en) * 2002-08-27 2005-10-11 Michael Lawrence Serpa System and method for user authentication with enhanced passwords

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5844497A (en) * 1996-11-07 1998-12-01 Litronic, Inc. Apparatus and method for providing an authentication system
US6192478B1 (en) * 1998-03-02 2001-02-20 Micron Electronics, Inc. Securing restricted operations of a computer program using a visual key feature

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP1540869A4 *

Also Published As

Publication number Publication date Type
EP1540869A2 (en) 2005-06-15 application
EP1540869B1 (en) 2016-03-02 grant
US20040054929A1 (en) 2004-03-18 application
US6954862B2 (en) 2005-10-11 grant
US7653818B2 (en) 2010-01-26 grant
WO2004021108A2 (en) 2004-03-11 application
JP2005537574A (en) 2005-12-08 application
US20050273624A1 (en) 2005-12-08 application
EP1540869A4 (en) 2009-02-18 application

Similar Documents

Publication Publication Date Title
US4621334A (en) Personal identification apparatus
US6134661A (en) Computer network security device and method
US20070226784A1 (en) System and method for user authentication
US7275263B2 (en) Method and system and authenticating a user of a computer system that has a trusted platform module (TPM)
US20050015604A1 (en) Session authentication using temporary passwords
US20070234063A1 (en) System, method and program for off-line user authentication
US20130179681A1 (en) System And Method For Device Registration And Authentication
US20060282649A1 (en) Device pairing via voice commands
US20080148393A1 (en) Neural authenticator and method
US5857024A (en) IC card and authentication method for information processing apparatus
Shanmugapriya et al. A survey of biometric keystroke dynamics: Approaches, security and challenges
US20030048173A1 (en) Authentication method, authentication system, and authentication token
US20100263031A1 (en) Communication device and communication system
US6580815B1 (en) Page back intrusion detection device
US7043640B2 (en) Apparatus and method for protecting a computer system
US6895514B1 (en) Method and apparatus for achieving secure password access
US20060123240A1 (en) Secure biometric authentication system and method of implementation thereof
EP0817103A3 (en) System and method for on-line multimedia access
US7127088B1 (en) Method of authenticating proper access to secured site and device for implementation thereof
US8020199B2 (en) Single sign-on system, method, and access device
US20050010768A1 (en) Information hiding through time synchronization
US20060271790A1 (en) Relative latency dynamics for identity authentication
WO1992007436A1 (en) Method and apparatus for personal identification
US20050149762A1 (en) System and method for generating and authenticating a computer password
Shepherd Continuous authentication by analysis of keyboard typing characteristics

Legal Events

Date Code Title Description
AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LU MC NL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
WWE Wipo information: entry into national phase

Ref document number: 2004532951

Country of ref document: JP

WWE Wipo information: entry into national phase

Ref document number: 2003791729

Country of ref document: EP

WWP Wipo information: published in national office

Ref document number: 2003791729

Country of ref document: EP