User access control based on a graphical signature
A user inputs a pattern consisting of a plurality of lines. The lines are classified by relative length, overall direction and degree of curvature. Where a line is started from a new position, the direction from the previous starting point is taken into account. The series of lines is then serialized into a key value, which may then be used to decrypt data stored on a device. This enables data to be securely stored since the key is supplied by the user at runtime and is not itself stored on the device.
1. A method of generating a cryptographic key for encryption and/or decryption of data stored locally on a device comprising a hardware processor and a screen that accepts graphical input, the method comprising the steps of:
receiving a graphical pattern from a user as input to the device;
dividing the graphical pattern into a sequence of lines, each of the lines having a direction representing the direction of the corresponding line in the graphical pattern;
deriving values for a plurality of predetermined parameters of the sequence of lines; and
generating the cryptographic key from the derived values;
wherein the plurality of predetermined parameters include the length and curvature of the lines in the sequence of lines, and the directions, defined relative to the direction of one of the lines in the sequence of lines, of a respective plurality of other lines in the sequence of lines, and
wherein the directions of the respective plurality of other ones of lines in the sequence of lines are determined relative to a first one of the lines in the sequence of lines.
2. The method of claim 1 , including encrypting and/or decrypting the data using the generated cryptographic key.
3. The method of claim 2 , including decrypting the data using the cryptographic key, and authenticating the user if the data is successfully decrypted.
4. A method of authenticating a user on a mobile device comprising
a hardware processor and a screen that accepts graphical input, the method comprising the steps of:
receiving a graphical pattern from a user as input to the device;
dividing the graphical pattern into a sequence of lines, each of the lines having a direction representing the direction of the corresponding line in the graphical pattern;
deriving values for a plurality of predetermined parameters of the sequence of lines; and
authenticating the user by the derived values;
wherein the plurality of predetermined parameters include the length and curvature of the lines in the sequence of lines, and the directions, defined relative to the direction of one of the lines in the sequence of lines, of a respective plurality of other lines in the sequence of lines, and
wherein the directions of the respective plurality of other ones of lines in the sequence of lines are determined relative to a first one of the lines in the sequence of lines.
5. The method of claim 4 , wherein the derived values are quantised to a small number of discrete values.
6. The method of claim 4 , wherein the plurality of predetermined parameters include a relative starting point of one or more of the lines.
7. The method of claim 4 , including detecting variations of the derived values between a plurality of the received graphical patterns, and storing locally on the device a record of the variations, wherein the record is used to allow variations in a subsequently received graphical pattern falling within the detected variations.
8. The method of claim 7 , wherein the record includes a mask indicating variations for selected derived values.
9. The method of claim 7 , including expanding the quantisation size for selected derived values in which variations were detected.
10. A mobile device comprising:
memory storing data,
a processor running an application, and
a graphical input device,
wherein the graphical input device is arranged to receive a graphical pattern from a user and to divide the graphical pattern into a sequence of lines, each of the lines having a direction representing the direction of the corresponding line in the graphical pattern, and an application is arranged to derive values for a plurality of predetermined parameters of the lines in the sequence of lines, and to generate a cryptographic key from the derived values, wherein the cryptographic key is operable to decrypt and/or encrypt the data, and wherein the plurality of predetermined parameters include the length and curvature of the lines in the sequence of lines, and the directions, defined relative to the direction of one of the lines in the sequence of lines, of a respective plurality of other lines in the sequence of lines, and
wherein the directions of the respective plurality of other ones of lines in the sequence of lines are determined relative to a first one of the lines in the sequence of lines.
11. A mobile device comprising;
memory storing data,
a processor running an application, and
a graphical input device, wherein the graphical input device is arranged to receive a graphical pattern from a user and to divide the graphical pattern into a sequence of lines, each of the lines having a direction representing the direction of the corresponding line in the graphical pattern, and an application is arranged to derive values for a plurality of predetermined parameters of the lines in the sequence of lines, and to authenticate the user by the derived values; and wherein the predetermined parameters include the length and curvature of the lines in the sequence of lines, and the directions, defined relative to the direction of one of the lines in the sequence of lines, of a respective plurality of other lines in the sequence of lines, and
wherein the directions of the respective plurality of other ones of lines in the sequence of lines are determined relative to a first one of the lines in the sequence of lines.