US 8,065,525 B2Grant
Device with built-in user authentication and method for user authentication and identity theft protection
Issue Date:2011-11-22
•23 Claims
•18 Drawing Sheets
Abstract
A typing typeprint is used to validate users for access to a computer system. The typeprint may also include a timestamp or voice stamp for further security. Multi-modal biometric protection is provided by supplementing keystroke-scan methods with fingerprint, voice-scan, signature-scan and/or mouse-scan verification. The authentication program may be built into a keyboard.
Metadata
Assignee
- Bekad Mgmt. II, LLC
Inventor
- Arkady G. Zilberman
Application Information
Application Number:US 11/232,601
Filing Date:2005-09-22
Priority Date:2004-09-22
Art Unit:2436
Classifications
IPC:
H04L9/32
Patent Drawings (18 sheets)
Description
Related Application
[0001] This application claims the benefit of U.S. Provisional Application No. 60/612,193, filed on Sep. 22, 2004 which is expressly incorporated herein.
Background
[0002] The need for people to have passwords that are easy to remember goes contrary to what makes up a good password. People are not very rigorous when insuring the randomness of passwords. Furthermore, people usually have several passwords to keep track of and therefore are less tempted to create random and difficult-to-remember passwords. The preferred defense is to make passwords nearly impossible to guess, but such strength requires that the password be selected in a totally random fashion. That's a tall order for humans, because humans are not very good at making up randomness. Furthermore, because people usually have several passwords to keep track of, locking user accounts with random, but difficult-to-remember, strings of characters such as “wX%95qd!” is a recipe for a support headache.
[0003] Bending the wrists sideways or up and down while using the keyboard or mouse can cause musculoskeletal disorders such as carpal tunnel syndrome. Numerous studies have shown that the split keyboard design gives the operator a more neutral forearm position compared to a traditional keyboard. Carpal tunnel syndrome (CTS) is a condition that can cause pain, tingling, numbness, and weakness in the fingers and thumb. CTS from work causes is highest between the ages of 20 and 40.
[0004] In accessing a secure computer system most of us use a username and password. The combination of a username and a password does not constitute strong authentication. That has traditionally been a weak point in authentication systems. In the modern world of global computerization we need a shift from a simple ID and password authentication that is easily intercepted to using a two-factor authentication, which requires people to identify themselves using two unique factors, such as a password along with either a digital certificate, a smart card, or a biometric proof.
Summary
[0005] The proposed method for password authentication of the present invention uses keystroke-scan characteristics that are unique for each individual. Accordingly, the password authentication method of the present invention is unobtrusive, reliable and could be used on any data input device that could measure typing intervals with accuracy better than one millisecond.
[0006] While typing or working at a computer keyboard and performing regularly 10,000 keystrokes per hour users must have a keyboard that will alleviate the stress by improved allocation of keys and decreased force during typing. Split keyboards are designed to straighten the wrist. This can be done in two ways: by increasing the distance between the right and left sides of the keyboard or by rotating each half of the keyboard so that each half is aligned with the forearm. The proposed design uses these two methods. It also uses negative slope and concave well keyboard, elements of which could be found in special expensive keyboards offered on the current market.
[0007] The combination of advanced ergonomic design and multimodal biometric security protection provides a user-friendly solution that is easy to implement and gives maximum access, communication and transaction security, accompanied by increased functionality and comfort of use. Naturally, the user authentication method described in the current invention could be also implemented on computers with conventional keyboards as a software-only solution. Furthermore, the ergonomic design of the present invention may also be implemented without the advanced authentication method of the present invention.
[0008] A keyboard-embedded microchip or keyboard microcontroller with the capability of recording time events with the resolution from 30 millisecond down to 30 microseconds is used for static and dynamic password and user authentication according to the proposed algorithm. The proposed statistical processing of measured keystroke-scan characteristics results in creating a digital signature that contains unique typing characteristics of a person who types the password during login procedure. The same algorithm creates a unique digital signature irrespective of the input text, which could be used for dynamic unobtrusive verification of the user who is currently working at the keyboard.
[0009] The example of implementation described below incorporates elements of artificial intelligence in helping customers to select a random password that is hardened by an additional digital signature. The password created during first login procedure with an input from a customer becomes a password-for-life. The ultimate keyboard provides also multimodal biometric protection, supplementing keystroke-scan method with fingerprint, voice-scan, and signature-scan or mouse-scan verification. Signature-scan authentication is performed through modified touchpad or Tablet PC and does not require special hardware. Voice-scan verification and/or authentication is performed through two or more microphones embedded in the keyboard. External microphones could be also used for identity verification purpose.
[0010] The proposed voice-scan module allows to record the low- and high-frequency characteristics of voice input and to use them along with the time characteristics of a recorded input for hardening the user's password and/or for protection against identity theft.
[0011] In one embodiment of the invention, training of the user is required before a strong random password is created and tested. A short self-training program is included in the first login procedure. The algorithm-created password could be used as a single sign-on password for multiple applications.
[0012] The proposed keystroke-scan and signature-scan authentication may be used in physical keyboards and/or virtual (on screen) keyboards, in USB tokens and USB Flash drives, and/or projection keyboards.
[0013] The ultimate keyboard has a great potential in becoming the first choice for OEM manufacturers since it allows tailoring keyboard during ordering according to customers needs and personal preferences. One of the key strengths of the ultimate keyboard is versatility. For example, instead of two Enter keys in the middle of a keyboard along left and right side of the Touchpad, a customer may select Enter and Space functions for these two keys. Or instead of a RollerBall in the middle or at the top or at the bottom of the keyboard, users could select a Trackbar, a Trackball, a reversed optical mouse, or any other pointing device for manipulating the movements of the cursor. And to give another example, a Touchpad or a Trackball could be placed at the bottom of the keyboard; this solution might be preferable for laptop users who have developed the habit of using their thumbs for mouse navigation.
[0014] The attached drawings of ergonomic keyboards do not limit the number of modules that could be incorporated in a keyboard of customers' choice. The included figures serve only as an example of choices users have in configuration of their keyboards that ensure comfort of use and security in the modern world of global computerization but do not limit the scope of applications of the proposed ultimate keyboard with built-in security protection.
[0015] Customization of keyboards during ordering will provide unparalleled functionality, comfort of use and unobtrusive and reliable security in financial and business transactions along with identity theft protection.
Brief Description of the Drawings
[0016] Novel features and advantages of the present invention, in addition to those mentioned above, will become apparent to those skilled in the art from a reading of the following detailed description in conjunction with the accompanying drawings wherein similar reference characters refer to similar parts and in which:
[0017] FIG. 1 illustrates one example of an ultimate keyboard of the present invention;
[0018] FIG. 2 illustrates another example of an ultimate keyboard of the present invention;
[0019] FIG. 3 illustrates another example of an ultimate keyboard of the present invention;
[0020] FIG. 4 illustrates another example of an ultimate keyboard of the present invention;
[0021] FIG. 5 illustrates another example of an ultimate keyboard of the present invention;
[0022] FIG. 6 illustrates another example of an ultimate keyboard of the present invention;
[0023] FIG. 7 illustrates one example of a well section of the keyboard of the present invention;
[0024] FIG. 8 illustrates one example of a rollerball section;
[0025] FIGS. 9A-9B illustrate one example of an integral mouse grid for recording cursor movements;
[0026] FIG. 10 illustrates one example of a mouse grid section showing straight cursor movement;
[0027] FIGS. 11A-11C illustrate an example integral typing matrix of the present invention; and
[0028] FIG. 12 illustrates one example of a typeprint of the present invention.
Detailed Description
[0029] Use of a keyboard-embedded microchip or keyboard microcontroller with the capability of recording time events with the resolution, preferably, better than 30 millisecond for static and dynamic password and user authentication according to the proposed algorithm is described below. A computer keyboard having built-in user authentication is described in U.S. Pat. No. 6,442,692 incorporated herein by reference.
[0030] A customer's unique password hardened by keystroke-scan dynamics could be used as a single sign-on for various applications and does not require changing the password at certain time intervals. It allows the inclusion of “water marks” (hidden numbers or symbols) into the password.
[0031] Watermarks consist of keystrokes hidden in the passwords, which are not displayed in the password text window, but the computer remembers and waits for them. Since there is never a record of the extra keystrokes, a password thief would not be able to identify them. For example, clicking on any key—such as Home, Insert or Shift—will create a Digital Watermark. When entering your password, the watermark symbols or keystrokes should be typed in exactly the same manner and position to allow authentication of the password. At the end of the password (js57gww14), press the backspace key twice and delete the symbols 14. The final password is: js57gww. The last two digits (14) plus two backspaces constitute the Digital Watermarks. Digital Watermarks can be added to the password at any time and can appear at the beginning, the middle, or at the end.
[0032] Password created according to ePassguard algorithm allows dynamic real-time user verification without keeping track of the input text. It is attained using statistical processing of one and two-key combinations even in systems that typically do not have real time capabilities. The Integral Typeprint created irrespective of input text and transparent to the user can be used for dynamic unobtrusive verification of users and for file tagging or prioritized management of folders.
[0033] The digital signature created during login protects the customer's identity not by what they know (password) or by what they have (smart card) but by who they are: the keystroke-scan characteristics unique to each individual.
[0034] In the preferred embodiment, the keyboard-embedded microchip or keyboard microcontroller measures the dwell time on any key and flight time between two consecutive keys with a time resolution from 30 milliseconds down to 30 microseconds. A protocol is used for transferring the measured data to CPU for further statistical processing, using the latter as a multi-channel analyzer (MCA). MCA records the typing information received from the microchip or microcontroller into the Integral Typing Matrix (ITM) that consists of approx. 2500 cells. The number of cells may be decreased or increased to incorporate additional symbols or languages.
[0035] The Individual Typeprint Digital Signature (ITDS) is created irrespective of input text in a transparent-to-user fashion while the user performs his/her usual typing work.
[0036] When used for dynamic unobtrusive verification of who is typing on the computer, the algorithm has a self-learning feature and becomes independent of deviation from normal typing behavior since only inputs with the smallest deviation from the average values are recorded in the Integral Typing matrix and they are permanently updated during the user typing or working at the keyboard. When the user creates a document or email it could automatically save the unique ITDS that could be attached to the document as a digital signature thus making the document legally binding for business or personal applications.
[0037] The email that incorporates the ITDS could be used as a safeguard against spam or phishing. The email server could be set up in such a way that only emails with attached or incorporated ITDS that matches ITDS data base on the given computer or device would pass the filtering process. Another example, incorporates matching of ITDS during email filtering process the ITDS kept on third party secure server with encrypted communication.
[0038] In one embodiment, ITDS could be used to ensure ownership of digital media and authentication in specially designed systems, for example data witness systems, as a tool to collaborate, execute, and archive legally binding contracts and agreements on-line.
[0039] The ITDS is preferably stored both at the microchip embedded in the keyboard and/or in the CPU of the workstation or terminal for validation reference purposes. Thus, in the preferred embodiment, validation of the ITDS is performed at both ends: the user's end and at the processing system, e.g., network server.
[0040] Each cell in the ITM acts as a channel of the multichannel analyzer. Each channel incorporates two registers with five cells for storing typing information in a predetermined fashion. For example, if a user types the letter “s”—the dwell time ts in reversed time units 1/t (RTU) is measured and stored in cell/channel 920 of the ITM of FIG. 11 . FIGS. 11A-11C illustrate an example integral typing matrix of the present invention. The flight time between s and h is designated as fsh and is stored in cell/channel 909.
[0041] The cell's number is calculated according to the formula: Fik=50·(i−1)+k, where i is the number of the first key for which the dwell time was measured and k is the number of the second key the flight time to which was measured.
[0042] The i number is selected from the first vertical column of FIG. 11 , the k number is selected from the second horizontal row of the table. For the sake of an example the cell numbers for dwell ti and flight fik times for password shendli are shown in the Table 1.
[0043] The cell numbers in Typing Matrix for dwell times ti and flight times fik for password shendli is shown below.
[0044]
Summation of dwell and flight times shown in the above table will give the total time Tp needed to type the password Tp=Σ(ti+fik).
| s | H | e | n | d | l | i | ||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 920 | 909 | 359 | 356 | 206 | 215 | 665 | 655 | 155 | 163 | 563 | 560 | 410 |
| ts | fsh | th | fhe | te | fen | tn | fnd | td | fdl | tl | fli | ti |
Summation of dwell and flight times shown in the above table will give the total time Tp needed to type the password Tp=Σ(ti+fik).
[0045] Microchip/microcontroller clock could be used to determine independently Tp by measuring the start time for the letter s and the finish time for the letter i. The difference ΔT′p between Tp and T′p is due to the existence of debounce time (dbT), which is a characteristic of keyboard design. dbT depends also on the force and velocity applied during typing. dbT for a given individual and his/her password is a pretty constant value that could be used as an additional attribute for password authentication.
[0046] More specifically, when a user types the first letter s the dwell time ts is stored in the first cell of Register-1 of channel 920. When a user types the letter “s” for the second time—the ts is measured and stored in the second cell of Register-1 of channel 920 (third time—stored in the third cell, etc.). Once the first four cells of Register-1 are filled, the algorithm calculates the average RTU of the first four inputs ts of the letter “s” and stores the value in the last cell of Register-1 (e.g., the fifth cell in this example). This last cell is labeled “average”.
[0047] In addition to calculating the average, the microcontroller preferably calculates the deviation from the average for each of the four previous RTU inputs and stores the results of the calculations in the respective cells of Register-2.
[0048] The average of the two stored values of Register-i with the smallest deviations from average is stored in the last cell of Register-2. This average value is then added to the average value of the fifth cell in Register-1, and its median replaces the ts of the fifth cell of Register-1. This value is used as the reference value in the established ITDS.
[0049] With the fifth input of the letter “s” the above described loop of measuring, storing and processing is repeated in a similar fashion. Thus, for the example above, with each entry of dwell time ts and flight time fik, shown in the matrix, the processing loop is repeated and the average ts and fik, obtained in the course of processing the last batch of four inputs, is used for upgrading the average ts and fik in the corresponding channel of the ITM.
[0050] The above described processing algorithm is equally applicable for obtaining the individual's Typeprint based on password input (e.g., the Password Typeprint) or for obtaining the ITDS based on input of any text, i.e. in the case of “transparent overseeing” or dynamical verification of user's activity in a security critical environment.
[0051] In the course of keystroke-scan measuring and processing ts and fik, as described in the above example, the values of two cells with highest deviation from an average are preferably ignored and have no effect on average value of the considered channel. The number of fields in a Password Typeprint is determined by the formula: 2n−1, where n is the number of symbols in a password (for password shendli n=7 and the number of fields is 13). However, the number of fields in the password Typeprint could be arbitrarily increased by inserting and then deleting the symbols into the password. Inserted and then deleted symbols act as hidden watermark symbols: they are not included in a transmitted password, but they are included in the Password Typeprint—the digital signature attached to the password for authentication purpose.
[0052] During the first login procedure or primary authentication (e.g., to establish the Password Typeprint) the user is asked to input his or her password a few times (for example five times). The measured ts and fik values are then used to determine the reproducibility of the Password Typeprint of the current user. The algorithm incorporates a control filter that cuts-off keystroke dynamics with the ts and fik values less than 500 and data with the deviation values more than a preset value (default value—30%).
[0053] In cases when the ITM is used for “transparent overseeing”, the reference or established ITDS, measured and stored in the database at the CPU, may contain some units or channels which were not produced during the current “transparent overseeing”. In such a case, the verification is conducted based on a comparison of those channel values which are present both in the established (reference) ITDS and the currently generated ITDS.
[0054] In the preferred embodiment, the algorithm supports the most common standard communication protocols for client—server connection, and provides solutions for alternative protocols.
[0055] The first login procedure preferably includes three screens.
[0056] Screen One: Creating ePassguard Password
[0057] Enter your first and last name.
[0058] Type your pin number.
[0059] Type your favorite phrase.
(Pressing the submenu button in this window opens a list of randomly generated short citations or favorite phrases. For example: never go the supermarket when you are hungry.)
[0060] Next Window: Recommended Password.
[0061] The program creates a password according to recommendations by selecting symbols from the above four windows and then dispersing the selected symbols with the pin numbers. The suggested password contains not less than 6 characters and symbols and is not found in a dictionary. For example: for Arkady Zilberman (PIN number 5714) and above given favorite phrase the suggested password is: az57ngs14. The window with a suggested password has next to it two buttons: accept and edit.
[0062] Next Window:
[0063] The window asks the user to type the new password at least ten times before using it. The window instructs the user to pay special attention to typing consistency when using the password. The user should not change fingers or typing style since passwords contain only about ten keys to determine uniqueness of the password. This preferably becomes a permanent password: the user does not need to change it. The user's identity and sensitive data are strongly protected.
[0064] The program measures the scatter of Typeprint characteristics and shows a green light (if the scatter is less than 30%) with caption: you may start using your new ePassguard password now. If the scatter is more than 30% the yellow light appears on the screen with the caption: Please, type your new ePassguard password with the same speed five more times.
[0065] Screen Two:
[0066] The next screen preferably has a window for a password and a caption: ePassguard password. The next caption: type the password once more. Repeat it four times. The algorithm uses five inputs for calculation of the Typeprint that is shown to the right.
[0067] Screen Three:
[0068] The next window: preferably asks the user to type the ePassguard password——Typeprint preferably appears next to it. See FIG. 12 for an example of a Typeprint displayed according to the present invention.
[0069] The Typeprint is preferably constructed immediately using ts and fik values of the password to be authenticated. The Typeprint determined only on this one entry is shown right to this window. The bottom of window is filled with green light if password Typeprint is similar and with red light if it is dissimilar.
[0070] In one embodiment, a time stamp or delay period may be inserted into the password. In other words, the user may pause before inputting the next symbol of the password. For example, before hitting the next symbol the user may pronounce a phrase (preferably not aloud): “change your thoughts and you will change your destiny”—it becomes the time mark of the typeprint for the given password. To login with this password the user should remember to say the same phrase after the same typed symbol each time on login. Accordingly, the user can insert anywhere in a password a time stamp, for example, 37 seconds and 20 milliseconds, and it will become the part of the user Typeprint.
[0071] Accordingly, the user can insert anywhere in a password the voice stamp, which is recorded by a microphone and is turned into the time stamp and the data pattern. Accordingly, the user can insert anywhere in a password the graphic stamp, which is prerecorded and turned into the data pattern by using data extraction algorithm.
[0072] In one embodiment, the password Typeprint includes watermarks and inserted time stamp but does not compare the typing characteristics. This type of application is needed, for example, if the user is ill and can't type himself but his secretary or associate or confidant may still login on his behalf and have access to the data.
[0073] In another embodiment, the password Typeprint includes watermarks and inserted voice stamp which is recorded by microphone and turned into the data pattern by using data extraction algorithm but does not compare the typing characteristics.
[0074] In another embodiment, the password Typeprint includes watermarks and inserted graphic stamp which is prerecorded or recorded by a built-in camera and turned into the data pattern by using data extraction algorithm but does not compare the typing characteristics.
[0075] In one embodiment, the ratio or pattern between dwell and flight times within the password is used as a typing characteristic or used to generate a user Typeprint. For example, the ratio between dwell times for password “s h e n d l i” for one user might be 0.9:1.01:0.87:1:0.9:0.95:0.88—which would be different from that of another user. Another example, the ratio between flight times for the user is also a stable and unique characteristic and could be used for user authentication along with the password typeprint.
[0076] When working with a mouse a user reveals certain characteristics that are as unique as his/her Typeprint produced by keystroke-scan method described above. To enhance statistical processing and retrieval of unique information exhibited by each user using a mouse device we convert the screen into a grid that contains a certain number of cells. In our example we consider a grid containing 2500 cells (table illustrated in FIG. 9 ). The number of cells in the grid could be decreased or increased depending on the used device or screen size.
[0077] The mouse movement is described by two coordinates: i and K, where i is the cell number in the grid in reference to the vertical axis and K is the cell number of the cell in the grid in reference to the horizontal axis. The black line in FIG. 10 describes the cursor movement from cell T8-5 to T8-12 The gray line in the table describes the cursor movement in the opposite direction from cell T12-8 to T5-8.
[0078] In one embodiment, the system can be programmed to generate a reference mouse characteristic for a user based on cursor movement speed. For example, the user may be shown a computer screen with alphanumeric symbols displayed on the computer screen. The user may be asked to input a password by moving the cursor (via mouse) over the screen to click on the symbols in a desired sequence. The system, preferably using the embedded microcontroller monitors the mouse movement speed and inputs and records the password and generates and stores a reference mouse characteristic for the user. This characteristic includes the numbers of cells in the grid and the movement speed between two consecutive cursor stops. Subsequently on the next login, the user again enters the password again via the mouse and a second mouse characteristic is generated. The second mouse characteristic is compared with the reference mouse characteristic and the user is only allowed access if the second mouse characteristic is sufficiently similar to the reference mouse characteristic.
[0079] FIGS. 1-6 illustrate various embodiments of the keyboard of the present invention. As illustrated, the user may configure the keyboard according to personal preferences.
[0080] The proposed ultimate keyboard has the following advantages:
-
- [0081] 1. It consists of a family of keyboards that allows customers to select one of several prefabricated keyboards during order customization.
- [0082] The family of ultimate keyboards is designed taking into account both recommendations of ergonomic experts:
- [0083] left and right parts of the keyboard are rotated and form an angle at the top of 30 degrees or less.
- [0084] left and right parts of the keyboard are shifted apart at the distance of up to four inches.
- [0082] The family of ultimate keyboards is designed taking into account both recommendations of ergonomic experts:
- [0085] 2. The keyboard meets a multitude of specific requirements of personal computers, industrial and scientific applications (lab equipment, Sun Microsystems computers, UNIX etc.).
- [0086] 3. Parallel key-columns offer an important biomechanical advantage since they require mainly one-coordinate outreaching to the keys in comparison to two-coordinate outreaching in conventional keyboards. This substantially mitigates the stress in finger muscles by simplifying the finger targeting to the next key during typing.
- [0087] 4. The trapezoid space that is formed in the middle as a result of rotating and shifting apart the left and right parts of the keyboard is delegated to the most important and/or frequently used functions, which are the Enter and Space keys and the devices for cursor movement, such as Touchpad or RollerBall. See
FIG. 8 . The option of having a Touchpad and/or RollerBall devices in the middle of the keyboard ensures a more neutral forearm and shoulder position, compared to a traditional mouse design. - [0088] 5. The advanced users have a choice of both mouse modules on one keyboard. Switching between the two modules mitigates mouse syndrome by breaking the cycle of repetitive motions.
- [0089] 6. The option of having additional 12 function keys expands keyboard functionality and provides new features: it can be used for creating macros, adapting keyboard to business and scientific applications, and using it for Favorites and more efficient Internet browsing.
- [0081] 1. It consists of a family of keyboards that allows customers to select one of several prefabricated keyboards during order customization.
Claims
Certificate of Correction present
The claims shown below may not include correction changes. Use the corrected PDF for authoritative text.
What is claimed is:
1. A computer-implemented method, comprising:
receiving, via a computer keyboard, a first plurality of inputs that comprise a first character input, a second character input, and a third character input, wherein the third character input is a third character delete input which deletes the second character input;
storing the first character input, the second character input and the third character delete input of the second character input as a password;
receiving, via the computer keyboard, a second plurality of inputs; and
determining whether the first plurality of inputs matches the second plurality of inputs.
2. The computer-implemented method according to claim 1, wherein the password comprises keystroke characteristics that are associated with the first plurality of inputs that are received via the computer keyboard.
3. The computer-implemented method according to claim 2, further comprising updating the password based on an average of the keystroke characteristics that are associated with the first plurality of inputs and additional keystroke characteristics that are associated with the second plurality of inputs.
4. The computer-implemented method according to claim 2, wherein the keystroke characteristics include a time delay between two of the first plurality of inputs.
5. The computer-implemented method according to claim 2, wherein the keystroke characteristics include dwell time durations that keys are pressed when the first plurality of inputs are received, and include flight time durations between each of the first plurality of inputs.
6. The computer-implemented method according to claim 5, wherein the wherein the keystroke characteristics are based at least in part on a ratio between the dwell time durations and the flight time durations of the first plurality of inputs.
7. The computer-implemented method according to claim 5, wherein the password comprises a total time duration that includes the flight time durations and the dwell time durations for the respective ones of the first plurality of inputs.
8. The computer-implemented method according to claim 2, further comprising measuring the keystroke characteristics with a time resolution between 30 milliseconds and 30 microseconds.
9. The computer-implemented method according to claim 1, wherein the second character input is a typed space input that is deleted by the third character input.
10. The computer-implemented method according to claim 1, wherein the second character input is an alphanumeric character that does not appear in an input display, and wherein the password comprises the alphanumeric character.
11. The computer-implemented method according to claim 1, wherein the second character input is an alphanumeric character that does not appear in a text input display.
12. The computer-implemented method according to claim 1, further comprising allowing computer access in response to the second plurality of inputs being determined to match the first plurality of inputs.
13. The computer-implemented method according to claim 1, wherein the password comprises a graphic stamp that is generated as a data pattern from a recorded image.
14. The computer-implemented method according to claim 1, wherein the password comprises a voice stamp that is generated as a data pattern from a voice recording.
15. The computer-implemented method according to claim 1, further comprising authenticating a user when the first plurality of inputs matches the second plurality of inputs.
16. The computer-implemented method according to claim 1, wherein the third character delete input is received as a typed backspace which deletes the second character input.
17. The computer-implemented method according to claim 1, further comprising attaching the password to a document as a unique digital signature.
18. The computer-implemented method according to claim 1, wherein the password comprises at least one typed input of a non-alphanumeric key that does not display as having been entered.
19. The computer-implemented method according to claim 18, wherein the non-alphanumeric key is at least one of an End key, an Insert key, or a Shift key.
20. The computer-implemented method according to claim 18, wherein the non-alphanumeric key is a Home key that does not display as having been entered and causes the password to be displayed in a non-sequential order from a sequence of the first plurality of inputs that are stored as the password.
21. A computer-implemented method, comprising:
receiving a first character input via a computer input device;
displaying a representation associated with the first character input;
receiving a second character input via the computer input device;
displaying a representation associated with the second character input;
receiving a third character input via the computer input device, wherein the third character input is a third character delete input which deletes the second character input, wherein a first plurality of inputs sequentially comprises the first character input, the second character input, and the third character input;
storing the first character input, the second character input and the third character delete input of the second character input as a password;
receiving a second plurality of inputs via the computer input device; and
determining whether the first plurality of inputs matches the second plurality of inputs.
22. The computer-implemented method according to claim 21, wherein the entry of the third character input deletes the second input.
23. The computer-implemented method according to claim 21, wherein the entry of the third character input alters a displayed position of a cursor.
Patent Citations (66)
| Patent | Date | Inventor | Cited By |
|---|---|---|---|
| US4210899(A) | 1980-07-01 | Swonger et al. | Examiner |
| US4218738(A) | 1980-08-01 | Matyas et al. | Applicant |
| US4227253(A) | 1980-10-01 | Ehrsam et al. | Applicant |
| US4264782(A) | 1981-04-01 | Konheim | Applicant |
| US4288659(A) | 1981-09-01 | Atalla | Applicant |
| US4338025(A) | 1982-07-01 | Engel | Examiner |
| US4386266(A) | 1983-05-01 | Chesarek | Applicant |
| US4430728(A) | 1984-02-01 | Beitel et al. | Applicant |
| US4499462(A) | 1985-02-01 | Stoesser et al. | Applicant |
| US4805222(A) | 1989-02-01 | Young et al. | Applicant |
| US5156475(A) | 1992-10-01 | Zilberman | Applicant |
| US5204966(A) | 1993-04-01 | Wittenberg et al. | Applicant |
| US5337043(A) | 1994-08-01 | Gokcebay | Examiner |
| US5491752(A) | 1996-02-01 | Kaufman et al. | Applicant |
| US5612691(A) | 1997-03-01 | Murmann | Applicant |
| US5638446(A) | 1997-06-01 | Rubin | Applicant |
| US5682475(A) | 1997-10-01 | Johnson et al. | Applicant |
| US5721780(A) | 1998-02-01 | Ensor et al. | Applicant |
| US5826029(A) | 1998-10-01 | Gore et al. | Examiner |
| US5875249(A) | 1999-02-01 | Mintzer et al. | Examiner |
| US5995026(A) | 1999-11-01 | Sellers | Applicant |
| US6101461(A) | 2000-08-01 | Ukigawa et al. | Examiner |
| US6442692(B1) | 2002-08-01 | Zilberman | Examiner |
| US6618806(B1) | 2003-09-01 | Brown et al. | Examiner |
| US6626358(B1) | 2003-09-01 | Breimesser et al. | Examiner |
| US6662300(B1) | 2003-12-01 | Peters | Examiner |
| US6735310(B1) | 2004-05-01 | Hsing et al. | Examiner |
| US6809722(B2) | 2004-10-01 | Mei et al. | Examiner |
| US6895514(B1) | 2005-05-01 | Kermani | Applicant |
| US6983057(B1) | 2006-01-01 | Ho et al. | Examiner |
| US7050608(B2) | 2006-05-01 | Dobasdhi | Applicant |
| US7159191(B2) | 2007-01-01 | Koivuniemi | Examiner |
| US7274804(B2) | 2007-09-01 | Hamid | Applicant |
| US7278027(B1) | 2007-10-01 | Todaka et al. | Applicant |
| US7296233(B2) | 2007-11-01 | Tan et al. | Examiner |
| US7350078(B1) | 2008-03-01 | Odom | Examiner |
| US7386731(B2) | 2008-06-01 | Sanai et al. | Examiner |
| US7395506(B2) | 2008-07-01 | Tan et al. | Examiner |
| US7502937(B2) | 2009-03-01 | McKinley et al. | Examiner |
| US7606768(B2) | 2009-10-01 | Graubart et al. | Examiner |
| US7664960(B1) | 2010-02-01 | Clubb | Examiner |
| US7701364(B1) | 2010-04-01 | Zilberman | Examiner |
| US7747868(B2) | 2010-06-01 | Park | Examiner |
| US2002/0021601(A1) | 2002-02-01 | Chornenky | Applicant |
| US2002/0109677(A1) | 2002-08-01 | Taylor | Examiner |
| US2003/0110402(A1) | 2003-06-01 | Park | Examiner |
| US2003/0192746(A1) | 2003-10-01 | Suzuki | Examiner |
| US2004/0139331(A1) | 2004-07-01 | Sanai et al. | Examiner |
| US2004/0162999(A1) | 2004-08-01 | Schreiber et al. | Applicant |
| US2004/0186725(A1) | 2004-09-01 | Maruyama | Examiner |
| US2005/0076239(A1) | 2005-04-01 | Locke et al. | Examiner |
| US2005/0160297(A1) | 2005-07-01 | Ogawa | Examiner |
| US2005/0246138(A1) | 2005-11-01 | Park | Examiner |
| US2006/0098236(A1) | 2006-05-01 | Yamashita et al. | Examiner |
| US2006/0190724(A1) | 2006-08-01 | Adams et al. | Examiner |
| US2006/0195328(A1) | 2006-08-01 | Abraham et al. | Examiner |
| US2006/0271790(A1) | 2006-11-01 | Chen | Applicant |
| US2007/0199054(A1) | 2007-08-01 | Florencio et al. | Examiner |
| US2007/0234056(A1) | 2007-10-01 | Mani et al. | Applicant |
| US2008/0071545(A1) | 2008-03-01 | Novack et al. | Applicant |
| US2008/0098222(A1) | 2008-04-01 | Zilberman | Applicant |
| US2008/0297433(A1) | 2008-12-01 | Heller et al. | Applicant |
| US2009/0134972(A1) | 2009-05-01 | Wu, Jr. et al. | Applicant |
| US2009/0240949(A9) | 2009-09-01 | Kitchens et al. | Examiner |
| US2010/0302157(A1) | 2010-12-01 | Zilberman | Applicant |
| JP2002032142(A) | 2002-01-01 | Examiner |
Non-Patent Literature (13)
- De Ru, Willem and Jen Eloff, “Enhanced Password Authenitication through Fuzzy Logic”, IEEE Expert/Intelligent Systems & Their Applications, Nov./Dec. 1997.Examiner
- De Ru, Willem and Jan Eloff, “Enhanced Password Authentication through Fuzzy Logic”, IEEE Expert/Intelligent Systems & Their Applications, Nov./Dec. 1997.Applicant
- 5.4 Security, Technology Forecast 198.Applicant
- Typing Carpal Tunnel Syndrome and ergonomic Keyboards (visited May 14, 1998) http://www.geocities.com/researchTriangel/5288/typing.html.Applicant
- Rubin, Aviel D., et al., Web Security Sourcebook, p. 73-74,147-149.Applicant
- BioPassword Undeniably Identified, Net Nanny Software International, Inc.Applicant
- BioPassword Undeniably Identified, An Overview, Net Nanny Software International, Inc.Applicant
- Net Nanny Releases Much Anticipated Alpha Version of BioPassword, Its Patentd Keystroke Dynamics Security Solution, Aug. 26, 1998.Applicant
- PC Tech (visited Jun. 14, 1999) <wysiwyg://265/http://.zdnet.com/pcmag/pctech/content/18/07/tu1807.001.html>.Applicant
- Biometric identification looms on landscape of network log-ins (visited Jun. 14, 1999) http://ww8.zdnet.com/pcweek/reviews/0324/24bio.html.Applicant
- “Notice of Allowance”, U.S. Appl. No. 11/776,440, (Dec. 3, 2009), 6 pages.Applicant
- “Non Final Office Action”, U.S. Appl. No. 11/776,440, (Jul. 24, 2009), 12 pages.Applicant
- “Supplemental NOA”, U.S. Appl. No. 11/776,440, (Mar. 25, 2010), 3 pages.Applicant