Dismiss
InnovationQ will be updated on Sunday, Oct. 22, from 10am ET - noon. You may experience brief service interruptions during that time.
Browse Prior Art Database

Method of Preventing Unauthorized Access Using Captured Passwords

IP.com Disclosure Number: IPCOM000227982D
Publication Date: 2013-May-30
Document File: 6 page(s) / 78K

Publishing Venue

The IP.com Prior Art Database

Abstract

This invention provides a method for preventing unauthorized access to accounts using captured passwords.

This text was extracted from a PDF file.
This is the abbreviated version, containing approximately 51% of the total text.

Page 01 of 6

Method of Preventing Unauthorized Access Using Captured Passwords

When entering a password or PIN, if another person is watching, that password can be captured. Current solutions include using alternate symbols, such as asterisks, in place of the actual password characters and attempting blocking view of the keys. If, however, somebody is able to see the keys that are pressed, they can capture the password.

This invention also solves the problem of the password being intercepted by keystroke capture software. There are several methods of preventing the keystrokes from being captured, but this invention will prevent unauthorized access even if the password is captured.

This invention combines a password with a visually identifiable symbol and a spatial offset. The combination of the symbol and the offset will result in the user entering the password in a way that is inconsistent to somebody watching. If somebody were to see or capture the password, they would still be unable to enter it in the right location.

In an exemplary embodiment, a user would be presented with a 3x3 grid, each section of the grid containing multiple characters. The user would find the section of the grid that contains their predetermined symbol/character. The user would then select the section of the grid that is spatially relative to the box that contains their symbol, according to their predetermined spatial offset.

User creates account. They set their password to "Passw0rd", their character to '?', and their spatial offset to 'Down 1'

After the account is created, the user will be able to log in at this login screen

1


Page 02 of 6

The user locates the box that contains their symbol (?), and clicks on whichever box is found at the proper spatial offset (Down 1. In this case, there is no box below the box with the question mark, so the user wraps back to the top)

Regardless of whether or not the user selected the correct box, the user may enter their password into the box they selected. If either the password or the box selected is wrong, the user is denied access. To protect the account security, the user is not told whether they selected the wrong box or entered the wrong password.

2


Page 03 of 6

This example is just one embodiment of the invention. Other embodiments include...

Debit card PIN entry. The user selects their box and then is allowed to enter their PIN. This embodiment would greatly improve security of debit card PINs. In general, people don't protect their PINs well e...