IP Library Granted Patent US 9,537,847
Granted Patent B2
US 9,537,847 · App. 14/304,488 · Granted Jan 3, 2017

Image based key derivation function

Inventors: Selim Aissi (Menlo Park, CA); Taeho Kgil (Foster City, CA); Ajit Gaddam (Foster City, CA)
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
H04L63/08G06F21/36G09C5/00H04L9/0861G06F2221/2107H04L63/0428H04L63/06H04L2463/061H04L2463/062
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,537,847
App. No.
14/304,488
Granted
Jan 3, 2017
Kind
B2
Abstract

Embodiments of the invention relate to methods of generating and using an image-based derived key. In various embodiments, the image-based derived key may be used to facilitate user authentication and data encryption. For some embodiments, a method is disclosed comprising determining an image-based derived key, wherein the image-based derived key is generated from a selection of authentication images chosen by a user, encrypting data using the image-based derived key, and transmitting the encrypted data.

Claims (56)

1. A computing device comprising:

a processor; and

a non-transitory computer-readable medium comprising code executable by the processor for implementing a method comprising:

determining an image-based derived key using an image-based derived key function,

wherein the image-based derived key is generated from a selection of authentication images displayed on a user interface and chosen by a user, and image identifiers of the authentication images are concatenated to form an image value that is used as an image input value to the image-based derived key function,

wherein each image identifier is unique to the corresponding authentication image, and each image identifier being concatenated has a value that is independent of where the corresponding authentication image is displayed on the user interface, and

wherein the image-based derived key is further generated based on:

an adjustable iteration count value being an input to the image-based derived key function indicating a number of repetitions that the image-based derived key function is performed to generate the image-based derived key;

an adjustable key length indicating a length of the image-based derived key; and

a salt value that includes a user identifier identifying the user;

encrypting data using the image-based derived key; and

transmitting the encrypted data.

2. The computing device of claim 1 , wherein the method further comprises:

displaying a plurality of images, wherein the authentication images is a subset of the plurality of images being displayed.

3. The computing device of claim 2 , wherein the method further comprises:

receiving a plurality of image identifiers of the plurality of images being displayed.

4. The computing device of claim 2 , wherein the plurality of images being displayed are randomly arranged in a grid.

5. The computing device of claim 1 , wherein the encrypted data is transmitted to a second computing device, and the image-based derived key is used by the second computing device to decrypt the encrypted data.

6. The computing device of claim 5 , wherein the method further comprises:

sending the image-based derived key to the second computing device, wherein the image-based derived key is operable to decrypt the encrypted data.

7. The computing device of claim 1 , wherein the method further comprises:

receiving encrypted data from the second computing device; and

decrypting the encrypted data using the image based derived key.

8. The computing device of claim 1 , wherein a number of characters of the image input value inputted to the image-based derived key function is equal to a sum of a number of characters of each image identifier of the authentication images.

9. A system comprising:

the computing device of claim 1 ; and

a second computing device comprising:

a second processor; and

a second non-transitory computer-readable medium comprising code executable by the second processor for implementing a second method comprising:

receiving, from the computing device, the encrypted data;

determining an image-based derived key associated with the encrypted data; and

decrypting, using the image-based derived key, the encrypted data.

10. A computer-implemented method comprising:

determining, by a processor, an image-based derived key using an image-based derived key function,

wherein the image-based derived key is generated from a selection of authentication images displayed on a user interface and chosen by a user, and image identifiers of the authentication images are concatenated to form an image value that is used as an input value to the image-based derived key function,

wherein each image identifier is unique to the corresponding authentication image, and each image identifier being concatenated has a value that is independent of where the corresponding authentication image is displayed on the user interface, and

wherein the image-based derived key is further generated based on:

an adjustable iteration count value being an input to the image-based derived key function indicating a number of repetitions that the image-based derived key function is performed to generate the image-based derived key;

an adjustable key length indicating a length of the image-based derived key; and

a salt value that includes a user identifier identifying the user;

encrypting, by the processor, data using the image-based derived key; and

transmitting, by the processor, the encrypted data.

11. The method of claim 10 further comprising:

displaying a plurality of images, wherein the authentication images is a subset of the plurality of images being displayed.

12. The method of claim 10 further comprising:

receiving, by the processor, a plurality of image identifiers of the plurality of images being displayed.

13. The method of claim 11 , wherein the plurality of images being displayed are randomly arranged in a grid.

14. The method of claim 10 , wherein the encrypted data is transmitted to a computing device, and the image-based derived key is used by the computing device to decrypt the encrypted data.

15. The method of claim 14 further comprising:

sending, by the processor, the selection of authentication images to the computing device, wherein the selection of authentication images is used by the computing device to determine the image-based derived key.

16. The computer of claim 14 , wherein the method comprises:

sending, by the processor, the image-based derived key to the computing device, wherein the image-based derived key is operable to decrypt the encrypted data.

17. The method of claim 10 further comprising:

receiving encrypted data from the computing device; and

decrypting the encrypted data using the image based derived key.

18. The method of claim 10 , wherein a number of characters of the image input value inputted to the image-based derived key function is equal to a sum of a number of characters of each image identifier of the authentication images.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 14, 2014
From: AISSI, SELIM; KGIL, TAEHO; GADDAM, AJIT
To: VISA INTERNATIONAL SERVICE ASSOCIATION
Reel/Frame 033318/0621 →
Continuity (2)
Provisional Application 61834765 · Jun 13, 2013
Related Publication 20140372754A1 · Dec 18, 2014