IP Library Granted Patent US 10,229,260
Granted Patent B1
US 10,229,260 · App. 14/227,506 · Granted Mar 12, 2019

Authenticating by labeling

Inventors: Kevin D. Bowers (Melrose, MA); Salah Machani (Thornhill, CA); Dennis Moreau (Newton, MA); Todd A. Morneau (Sudbury, MA); Deepak Pushpakar (Bangalore, IN); Samir Saklikar (Bangalore, IN); Nikolaos Triandopoulos (Arlington, MA)
Assignee: EMC IP Holding Company LLC
G06F21/36G06F21/316H04L9/32H04L63/083
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,229,260
App. No.
14/227,506
Granted
Mar 12, 2019
Kind
B1
Abstract

Methods, apparatus and articles of manufacture for authenticating by labeling are provided herein. A method includes establishing a set of cryptographic information, wherein said set of cryptographic information comprises (i) a set of one or more graphical-based input elements and (ii) one or more graphical-based labels assigned to the set of one or more input elements in accordance with a given arrangement; generating a prompt via a computing device interface in connection with an authentication request to access a protected resource associated with the computing device; processing input cryptographic information entered via the computing device interface in response to the prompt against the set of cryptographic information; and resolving the authentication request based on said processing.

Claims (54)

1. A method comprising:

establishing a set of cryptographic information for a computing device, wherein said set of cryptographic information comprises (i) (a) a first set of multiple graphical-based input elements derived from one or more social networking sources and (b) a second set of multiple graphical-based input elements derived from a local database resident on the computing device, and (ii) (a) multiple graphical-based labels assigned to the first set of multiple graphical-based input elements, in accordance with a given arrangement, and (b) multiple graphical-based labels assigned to the second set of multiple graphical based input elements, in accordance with a given arrangement;

determining a pattern associated with input behavior information via the computing device interface over multiple iterations of said processing step, wherein said input behavior information comprises (i) velocity of a user's finger moving on the computing device interface during a response to the prompt, (ii) curvature of one or more input paths via a user's finger user's during a response to the prompt, (iii) the orientation of the computing device during a response to the prompt, and (iv) the pressure applied to the computing device interface by a user's finger during a response to the prompt; and

supplementing the set of cryptographic information, to generate an updated set of cryptographic information, by incorporating the pattern associated with the input behavior information;

generating a prompt, comprising graphical-based labels displayed within a circular arrangement of graphical-based input elements, via a computing device interface in connection with an authentication request to access a protected resource associated with the computing device, wherein the prompt comprises (i) the first set of multiple graphical-based input elements derived from the one or more social networking sources, (ii) one or more additional graphical-based input elements derived from the one or more social networking sources, (iii) the multiple graphical-based labels assigned to the first set of multiple graphical-based input elements, (iv) one or more additional graphical-based labels that are not assigned to the first set of multiple graphical-based input elements, (v) the second set of multiple graphical-based input elements derived from the local database resident on the computing device, (vi) one or more additional graphical-based input elements derived from the local database resident on the computing device, (vii) the multiple graphical-based labels assigned to the second set of multiple graphical-based input elements, and (viii) one or more additional graphical-based labels that are not assigned to the second set of multiple graphical-based input elements;

processing input cryptographic information entered via user manipulation of the computing device interface in response to the prompt against the set of updated cryptographic information, wherein said input cryptographic information comprises input behavior information, wherein said user manipulation comprises said user manipulation of the computing device interface via at least one finger of the user, and wherein said user manipulation of the computing device interface comprises at least:

selection of a first area, within the circular arrangement of graphical-based input elements, of the computing device interface corresponding with a first graphical-based label of the prompt; and

dragging of the first graphical-based label corresponding with the first area of the computing device interface within the circular arrangement (i) out to a second area, on the circular arrangement of graphical-based input elements, of the computing device interface, and then (ii) to a third area, on the circular arrangement of graphical-based input elements, of the computing device interface via rotation of the circular arrangement of graphical-based input elements, wherein the second area corresponds with one of the graphical-based input elements and the third area corresponds with a second of the graphical-based input elements, such that the respective graphical-based label is assigned to (i) the first graphical-based input element and (ii) the second graphical-based input element via a single rotary phone mechanism dragging motion on the circular arrangement of graphical-based input elements on the computing device interface; and

resolving the authentication request based on said processing.

2. The method of claim 1 , wherein said given arrangement comprises said graphical-based labels assigned to the set of multiple graphical-based input elements in a given chronological order.

3. The method of claim 1 , wherein said given arrangement comprises said graphical-based labels assigned to the set of multiple graphical-based input elements in a given chronological sequence of assignment defined relative to location.

4. The method of claim 1 , wherein said prompt comprises each of the graphical-based input elements and each of the graphical-based labels displayed on a first page of the computing device interface.

5. The method of claim 1 , wherein said prompt comprises:

a first portion of the graphical-based input elements and a first portion of the graphical-based labels displayed on a first page of the computing device interface; and

a second portion of said graphical-based input elements and a second portion of said graphical-based labels displayed on a second page of the computing device interface.

6. The method of claim 1 , wherein said resolving comprises:

granting access to the protected resource associated with the computing device if the input cryptographic information matches the set of updated cryptographic information; and

denying access to the protected resource associated with the computing device if the input cryptographic information does not match the set of updated cryptographic information.

7. The method of claim 1 , further comprising:

reordering a display of one or more of the graphical-based input elements and one or more of the graphical-based labels on the computing device interface in connection with said prompt.

8. The method of claim 1 , wherein the set of multiple graphical-based input elements are selected from a group comprising: images of objects, images of people, numbers, words, and shapes.

9. The method of claim 1 , wherein the graphical-based labels are selected from a group comprising: one or more shapes, one or more colored shapes, one or more numbers, one or more colored numbers, one or more weather symbols, and one or more colors.

10. An article of manufacture comprising a non-transitory processor-readable storage medium having processor-readable instructions tangibly embodied thereon which, when implemented, cause a processor to:

establish a set of cryptographic information for a computing device, wherein said set of cryptographic information comprises (i) (a) a first set of multiple graphical-based input elements derived from one or more social networking sources and (b) a second set of multiple graphical-based input elements derived from a local database resident on the computing device, and (ii) (a) multiple graphical-based labels assigned to the first set of multiple graphical-based input elements, in accordance with a given arrangement, and (b) multiple graphical-based labels assigned to the second set of multiple graphical based input elements, in accordance with a given arrangement;

determine a pattern associated with input behavior information via the computing device interface over multiple iterations of said processing step, wherein said input behavior information comprises (i) velocity of a user's finger moving on the computing device interface during a response to the prompt, (ii) curvature of one or more input paths via a user's finger user's during a response to the prompt, (iii) the orientation of the computing device during a response to the prompt, and (iv) the pressure applied to the computing device interface by a user's finger during a response to the prompt; and

supplement the set of cryptographic information, to generate an updated set of cryptographic information, by incorporating the pattern associated with the input behavior information;

generate a prompt, comprising graphical-based labels displayed within a circular arrangement of graphical-based input elements, via a computing device interface in connection with an authentication request to access a protected resource associated with the computing device, wherein the prompt comprises (i) the first set of multiple graphical-based input elements derived from the one or more social networking sources, (ii) one or more additional graphical-based input elements derived from the one or more social networking sources, (iii) the multiple graphical-based labels assigned to the first set of multiple graphical-based input elements, (iv) one or more additional graphical-based labels that are not assigned to the first set of multiple graphical-based input elements, (v) the second set of multiple graphical-based input elements derived from the local database resident on the computing device, (vi) one or more additional graphical-based input elements derived from the local database resident on the computing device, (vii) the multiple graphical-based labels assigned to the second set of multiple graphical-based input elements, and (viii) one or more additional graphical-based labels that are not assigned to the second set of multiple graphical-based input elements;

process input cryptographic information entered via user manipulation of the computing device interface in response to the prompt against the set of updated cryptographic information, wherein said input cryptographic information comprises input behavior information, wherein said user manipulation comprises said user manipulation of the computing device interface via at least one finger of the user, and wherein said user manipulation of the computing device interface comprises at least:

selection of a first area, within the circular arrangement of graphical-based input elements, of the computing device interface corresponding with a first graphical-based label of the prompt; and

dragging of the first graphical-based label corresponding with the first area of the computing device interface within the circular arrangement (i) out to a second area, on the circular arrangement of graphical-based input elements, of the computing device interface, and then (ii) to a third area, on the circular arrangement of graphical-based input elements, of the computing device interface via rotation of the circular arrangement of graphical-based input elements, wherein the second area corresponds with one of the graphical-based input elements and the third area corresponds with a second of the graphical-based input elements, such that the respective graphical-based label is assigned to (i) the first graphical-based input element and (ii) the second graphical-based input element via a single rotary phone mechanism dragging motion on the circular arrangement of graphical-based input elements on the computing device interface; and

resolve the authentication request based on said processing.

11. An apparatus comprising:

a memory; and

at least one processor coupled to the memory and configured to:

establish a set of cryptographic information for a computing device, wherein said set of cryptographic information comprises (i) (a) a first set of multiple graphical-based input elements derived from one or more social networking sources and (b) a second set of multiple graphical-based input elements derived from a local database resident on the computing device, and (ii) (a) multiple graphical-based labels assigned to the first set of multiple graphical-based input elements, in accordance with a given arrangement, and (b) multiple graphical-based labels assigned to the second set of multiple graphical based input elements, in accordance with a given arrangement;

determine a pattern associated with input behavior information via the computing device interface over multiple iterations of said processing step, wherein said input behavior information comprises (i) velocity of a user's finger moving on the computing device interface during a response to the prompt, (ii) curvature of one or more input paths via a user's finger user's during a response to the prompt, (iii) the orientation of the computing device during a response to the prompt, and (iv) the pressure applied to the computing device interface by a user's finger during a response to the prompt; and

supplement the set of cryptographic information, to generate an updated set of cryptographic information, by incorporating the pattern associated with the input behavior information;

generate a prompt, comprising graphical-based labels displayed within a circular arrangement of graphical-based input elements, via a computing device interface in connection with an authentication request to access a protected resource associated with the computing device, wherein the prompt comprises (i) the first set of multiple graphical-based input elements derived from the one or more social networking sources, (ii) one or more additional graphical-based input elements derived from the one or more social networking sources, (iii) the multiple graphical-based labels assigned to the first set of multiple graphical-based input elements, (iv) one or more additional graphical-based labels that are not assigned to the first set of multiple graphical-based input elements, (v) the second set of multiple graphical-based input elements derived from the local database resident on the computing device, (vi) one or more additional graphical-based input elements derived from the local database resident on the computing device, (vii) the multiple graphical-based labels assigned to the second set of multiple graphical-based input elements, and (viii) one or more additional graphical-based labels that are not assigned to the second set of multiple graphical-based input elements;

process input cryptographic information entered via user manipulation of the computing device interface in response to the prompt against the set of updated cryptographic information, wherein said input cryptographic information comprises input behavior information, wherein said user manipulation comprises said user manipulation of the computing device interface via at least one finger of the user, and wherein said user manipulation of the computing device interface comprises at least:

selection of a first area, within the circular arrangement of graphical-based input elements, of the computing device interface corresponding with a first graphical-based label of the prompt; and

dragging of the first graphical-based label corresponding with the first area of the computing device interface within the circular arrangement (i) out to a second area, on the circular arrangement of graphical-based input elements, of the computing device interface, and then (ii) to a third area, on the circular arrangement of graphical-based input elements, of the computing device interface via rotation of the circular arrangement of graphical-based input elements, wherein the second area corresponds with one of the graphical-based input elements and the third area corresponds with a second of the graphical-based input elements, such that the respective graphical-based label is assigned to (i) the first graphical-based input element and (ii) the second graphical-based input element via a single rotary phone mechanism dragging motion on the circular arrangement of graphical-based input elements on the computing device interface; and

resolve the authentication request based on said processing.

12. The apparatus of claim 11 , wherein the at least one processor is further configured to:

reorder a display of one or more of the graphical-based input elements and one or more of the graphical-based labels on the computing device interface in connection with said prompt.

13. The apparatus of claim 11 , wherein the set of multiple graphical-based input elements are selected from a group comprising: images of objects, images of people, numbers, words, and shapes.

14. The apparatus of claim 11 , wherein the graphical-based labels are selected from a group comprising: one or more shapes, one or more colored shapes, one or more numbers, one or more colored numbers, one or more weather symbols, and one or more colors.

15. The apparatus of claim 11 , wherein said prompt comprises:

a first portion of the graphical-based input elements and a first portion of the graphical-based labels displayed on a first page of the computing device interface; and

a second portion of said graphical-based input elements and a second portion of said graphical-based labels displayed on a second page of the computing device interface.

16. The apparatus of claim 11 , wherein said given arrangement comprises said graphical-based labels assigned to the set of multiple graphical-based input elements in a given chronological order.

17. The apparatus of claim 11 , wherein said given arrangement comprises said graphical-based labels assigned to the set of multiple graphical-based input elements in a given chronological sequence of assignment defined relative to location.

18. The apparatus of claim 11 , wherein said resolving comprises:

granting access to the protected resource associated with the computing device if the input cryptographic information matches the set of updated cryptographic information; and

denying access to the protected resource associated with the computing device if the input cryptographic information does not match the set of updated cryptographic information.

Assignments (20)
RELEASE OF SECURITY INTEREST RECORDED AT REEL/FRAME 56096/0525 Recorded Mar 5, 2026
From: JPMORGAN CHASE BANK, N.A.
To: RSA SECURITY LLC; RSA SECURITY USA LLC
Reel/Frame 075030/0744 →
RELEASE OF SECURITY INTEREST RECORDED AT REEL/FRAME 56098/0534 Recorded Mar 5, 2026
From: MORGAN STANLEY SENIOR FUNDING, INC.
To: RSA SECURITY LLC
Reel/Frame 075041/0175 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 23, 2024
From: RSA SECURITY LLC
To: RSA SECURITY LLC
Reel/Frame 069762/0401 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 23, 2024
From: RSA SECURITY LLC
To: RSA SECURITY USA, LLC
Reel/Frame 069762/0529 →
TERMINATION AND RELEASE OF FIRST LIEN SECURITY INTEREST IN PATENTS RECORDED AT REEL 054155, FRAME 0815 Recorded Apr 29, 2021
From: UBS AG, STAMFORD BRANCH, AS COLLATERAL AGENT
To: RSA SECURITY LLC
Reel/Frame 056104/0841 →
SECOND LIEN INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Apr 29, 2021
From: RSA SECURITY LLC
To: MORGAN STANLEY SENIOR FUNDING, INC., AS COLLATERAL AGENT
Reel/Frame 056098/0534 →
FIRST LIEN INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Apr 29, 2021
From: RSA SECURITY LLC
To: JPMORGAN CHASE BANK, N.A., AS COLLATERAL AGENT
Reel/Frame 056096/0525 →
TERMINATION AND RELEASE OF SECOND LIEN SECURITY INTEREST IN PATENTS RECORDED AT REEL 053666, FRAME 0767 Recorded Apr 29, 2021
From: JEFFERIES FINANCE LLC, AS COLLATERAL AGENT
To: RSA SECURITY LLC
Reel/Frame 056095/0574 →
PARTIAL RELEASE OF SECURITY INTEREST Recorded Nov 24, 2020
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; WYSE TECHNOLOGY L.L.C.
Reel/Frame 054510/0981 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 14, 2020
From: MACHANI, SALAH
To: EMC CORPORATION
Reel/Frame 053757/0254 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 7, 2020
From: EMC IP HOLDING COMPANY LLC
To: RSA SECURITY LLC
Reel/Frame 053717/0020 →
RELEASE OF SECURITY INTEREST IN CERTAIN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (050724/0466) Recorded Sep 3, 2020
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS AGENT
To: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; WYSE TECHNOLOGY L.L.C.
Reel/Frame 054166/0206 →
RELEASE OF SECURITY INTEREST IN CERTAIN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Sep 3, 2020
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS AGENT
To: DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; EMC IP HOLDING COMPANY LLC; WYSE TECHNOLOGY L.L.C.
Reel/Frame 054191/0287 →
SECOND LIEN PATENT SECURITY AGREEMENT Recorded Sep 1, 2020
From: RSA SECURITY LLC
To: JEFFERIES FINANCE LLC
Reel/Frame 053666/0767 →
FIRST LIEN PATENT SECURITY AGREEMENT Recorded Sep 1, 2020
From: RSA SECURITY LLC
To: UBS AG, STAMFORD BRANCH, AS COLLATERAL AGENT
Reel/Frame 054155/0815 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
PATENT SECURITY AGREEMENT (NOTES) Recorded Oct 15, 2019
From: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; WYSE TECHNOLOGY L.L.C.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
Reel/Frame 050724/0466 →
SECURITY AGREEMENT Recorded Sep 17, 2019
From: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; WYSE TECHNOLOGY L.L.C.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
Reel/Frame 050405/0534 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 7, 2019
From: EMC CORPORATION
To: EMC IP HOLDING COMPANY LLC
Reel/Frame 048019/0536 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 5, 2015
From: BOWERS, KEVIN D.; MACHANI, SALAH; MOREAU, DENNIS; MORNEAU, TODD A.; PUSHPAKAR, DEEPAK; SAKLIKAR, SAMIR; TRIANDOPOULOS, NIKOLAOS
To: EMC CORPORATION
Reel/Frame 036970/0248 →