System, device, and method of visual login and stochastic cryptography
Devices, systems, and methods of detecting user identity, differentiating between users of a computerized service, and detecting a possible attacker. A log-in process or a user-authentication process, is augmented or enriched by one or more incidental tasks, which force the user to perform additional on-screen interactions or input-unit interactions, which in turn enrich and augment the pool of user interactions from which the system extracts one or more user-specific features. The extracted user-specific features are used as part of the user authentication process, and are further used to differentiate among users.
1. A method comprising:
(a) generating an interactions-enriched log-in process for authenticating a user of an electronic device, by generating a log-in process that requires the user: (i) to enter at least a password, and (ii) to perform an on-screen incidental task that enriches an ability of a user-interactions tracker to extract a user-specific feature from user interactions while performing said on-screen incidental task;
(b) tracking the user interactions while the user performs said on-screen incidental task of said interactions-enriched log-in process, and extracting from said user interactions a user-specific feature;
(c) determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches a pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from other interactions of said user.
2. The method of claim 1 , wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches a pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.
3. The method of claim 1 , wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches a pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous usage sessions in which said user was already authenticated as a logged-in user.
4. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform an on-screen drag-and-drop operation;
extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen drag-and-drop operation of said interactions-enriched log-in process;
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen drag-and-drop operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.
5. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform a set of multiple on-screen drag-and-drop operations;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen drag-and-drop operation of said interactions-enriched log-in process, wherein the user-specific feature reflects at least an order in which said user chooses to perform said set of multiple on-screen drag-and-drop operations;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from the order in which the user performs said set of multiple on-screen drag-and-drop operations as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.
6. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform an on-screen operation having an on-screen route that corresponds to at least a part of a circle;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen operation of said interactions-enriched log-in process;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.
7. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform an on-screen operation having an on-screen route that corresponds to at least a part of a circle;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen operation of said interactions-enriched log-in process, wherein said user-specific feature indicates whether said user performs either (i) a clockwise movement to achieve said at least part of the circle, or (ii) a counter-clockwise movement to achieve said at least part of the circle;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.
8. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform an on-screen task of drawing an on-screen shape;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen operation of said interactions-enriched log-in process, wherein said user-specific feature indicates whether said user performs either (i) a generally-clockwise movement to draw said on-screen shape, or (ii) a generally counter-clockwise movement to draw said on-screen shape;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.
9. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform an on-screen task of drawing an on-screen shape;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen operation of said interactions-enriched log-in process, wherein said user-specific feature indicates whether said user performs either (i) a single on-screen stroke in which the user continuously draws an entirety of said on-screen shape without a non-drawing interaction, or (ii) a multiple-stroke interaction in which the user draws said on-screen shape by performing at least two separate input-unit strokes;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen operation as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.
10. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform an on-screen task of on-screen tracing of an on-screen shape;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen tracing of said on-screen shape as part of said interactions-enriched log-in process;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen tracing as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.
11. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform on-screen hand-writing a pre-defined string of characters;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen hand-writing of said pre-defined string of characters;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen hand-writing of said pre-defined string of characters as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.
12. The method of claim 1 , wherein step (a) comprises:
generating said interactions-enriched log-in process which requires the user to perform an on-screen task of on-screen drawing using at least two fingers of the user on a touch-screen of an electronic device;
wherein step (b) comprises: extracting said user-specific feature from tracked interactions of the user while the user performs said on-screen drawing using at least two fingers as part of said interactions-enriched log-in process, wherein said user-specific feature reflects at least a user-specific feature that is extractable due to utilization of two fingers on said touch-screen and that is non-extractable from a corresponding on-screen interaction performed with a single finger;
wherein step (c) comprises:
determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches the pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen drawing using at least two fingers as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from one or more previous log-in interactions that said user performed in one or more previous usage sessions of said interactions-enriched log-in process.
13. The method of claim 1 , comprising:
distinguishing between said user, and one or more other users, based on said user-specific feature that is extracted from said interactions-enriched log-in process.
14. The method of claim 1 , comprising:
generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted.
15. The method of claim 1 , comprising:
generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted;
wherein injecting the abnormality comprises:
causing an on-screen pointer to temporarily disappear during said interactions-enriched log-in process.
16. The method of claim 1 , comprising:
generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted;
wherein injecting the abnormality comprises:
causing an on-screen graphical user interface (GUI) element to temporarily disappear during said interactions-enriched log-in process.
17. The method of claim 1 , comprising:
generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted;
wherein injecting the abnormality comprises:
causing an on-screen pointer to perform an abnormal on-screen jump during said interactions-enriched log-in process, by causing said on-screen pointer to disappear from a first, regular, on-screen location thereof and to re-appear at a second, irregular, on-screen location.
18. The method of claim 1 , comprising:
generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted;
wherein injecting the abnormality comprises:
causing an on-screen pointer that is being moved by the user via said input unit, to travel in a deviated on-screen route that deviates relative to a regular on-screen route of said on-screen pointer.
19. The method of claim 1 , comprising:
generating said interactions-enriched log-in process by injecting an abnormality to a manner in which input unit interactions are reflected on a display unit, wherein said abnormality causes the user to perform one or more corrective input-unit interactions which are utilized to further enrich a set of interactions from which said user-specific feature is extracted;
wherein injecting the abnormality comprises:
causing an on-screen pointer that is being moved by the user via said input unit, to travel at an irregular on-screen speed that is different from a regular on-screen speed of said on-screen pointer.
20. A system comprising at least a hardware processor which is configured to perform:
(a) generating an interactions-enriched log-in process for authenticating a user of an electronic device, by generating a log-in process that requires the user: (i) to enter at least a password, and (ii) to perform an on-screen incidental task that enriches an ability of a user-interactions tracker to extract a user-specific feature from user interactions while performing said on-screen incidental task;
(b) tracking the user interactions while the user performs said on-screen incidental task of said interactions-enriched log-in process, and extracting from said user interactions a user-specific feature;
(c) determining that said user is authenticated, based on a combination of both:
(I) whether the password entered by the user matches a pre-defined reference password,
and also
(II) whether the user-specific feature that was extracted from a manner in which the user performs said on-screen incidental task as part of said interactions-enriched log-in process, matches a previously-extracted user-specific characteristic that was previously extracted from other interactions of said user.