Kill switch security method and system
The present invention provides, in at least one embodiment, a system and method to bolster website and mobile authentication providing an additional security layer for access to password protected information. An authorized user is asked to select a kill switch, including one or more image categories or alphanumeric characters that the authorized user would never select while inputting their password. If the kill switch is entered once or too many times, as defined and specified ahead of time by a set of rules and conditions, during password entry, the kill switch kills the password entry operation. User input can be evaluated at the time of entry according to these rules by a rule processing decision engine. Killing the operation can include taking one or more actions, such as locking out the user, sending a notification of breach, and cataloging information about the source of the breach.
1. A method for preventing access to a computer system, the method comprising the steps of:
selecting, by an authorized user of the computer system, a kill switch image category comprising an image category that an authorized user of a computer system would not input during an image based authentication session on the computer system;
displaying, by the computer system, during the image based authentication session, a plurality of images including an image corresponding to the kill switch image category;
receiving, by the computer system, during the image based authentication session, an input corresponding to an image from the plurality of displayed images from a non-authorized user;
determining, by the computer system, that the input is associated with the image corresponding to the kill switch image category; and
locking out the non-authorized user from the computer system.
2. The method of claim 1 , wherein the input comprises an alphanumeric character associated with the image corresponding to kill switch image category.
3. The method of claim 1 , further comprising the step of sending a discrete notification of breach to the authorized user or a security professional.
4. The method of claim 1 , wherein the image based authentication session is implemented on a computer or smartphone.
5. A method for preventing access to a computer system, the method comprising the steps of:
pre-selecting, by an authorized user of the computer system, an image category to prevent unauthorized access to the computer system;
storing, at a computer, the pre-selected image category that an authorized user of a computer system would not input during an image based authentication session;
displaying, by the computer system, during the image based authentication session, a plurality of images including an image corresponding to the pre-selected image category;
receiving, at the computer system, a selection of an image from the plurality of images;
receiving, at the computer system, an indication that a non-authorized user attempting authentication to the computer system has selected an image corresponding to the pre-selected image category during the image based authentication session; and
locking out the non-authorized user from the computer system.
6. The method of claim 5 , wherein the indication is received from a computer or smartphone.
7. The method of claim 1 , wherein the kill switch image category is selected to prevent brute force attacks and dictionary attacks.
8. The method of claim 5 , wherein the pre-selected image category to prevents brute force attacks and dictionary attacks.
9. A method for preventing access to a computer system, the method comprising the steps of:
selecting, by a human user of the computer system, a kill switch image category comprising an image category that a human user of the computer system would not enter during a CAPTCHA test;
displaying, at the computer system during a CAPTCHA test, a plurality of images including an image corresponding to the kill switch image category;
receiving, by the computer system, during the CAPTCHA test, an input corresponding to an image from the plurality of displayed images;
receiving, by the computer system, during the CAPTCHA test, an indication that the image corresponding to the kill switch image category has been selected; and
locking the computer system.