NETWORK ACCESS SECURITY SYSTEM AND METHOD
A method of providing for access to a computer resource, the method including the steps of: (a) providing an initial registration process including the identification and downloading of a user selected candidate image; (b) creating a first derived identifier from the candidate image; (c) upon a user requesting access to the computer resource, requesting from the user a second candidate image, and deriving a second derived identifier from the second candidate image; and (d) comparing the first and second derived identifier and where they are equivalent, granting the user access to the computer resource.
1 . A method of providing access to a server via a network, the method including:
a) providing a registration process including identification of a user selected data structure;
b) distributing a one-time use data structure to a user device and the computer resource server;
c) modulating the user selected data structure with the one-time use data structure and applying a cryptographic hashing function to the modulated user selected data structure to derive a first derived identifier and a current modulation key;
d) transmitting the first derived identifier and the current modulation key to the server; and
e) upon a user requesting access to the server, (a) requesting the first derived identifier and the current modulation key, (b) utilizing (i) the one-time use data structure, (ii) the current modulation key, and (iii) a copy of the user selected data structure to derive a second derived identifier, and (c) comparing the first derived identifier and second derived identifier, and, if the first derived identifier matches the second derived identifier, granting access to the server.
2 . The method of claim 1 , wherein the user selected data structure is broken up into a plurality of parts and each of the plurality of parts is used to derive the first derived identifier.
3 . The method of claim 1 , wherein the user selected data structure is broken up into a plurality of parts and each of the plurality of parts is used to derive the second derived identifier.
4 . The method of claim 1 , wherein the user selected data structure is broken up into a plurality of parts and each of the plurality of parts is used to derive the first derived identifier and the second derived identifier.
5 . The method of claim 1 , wherein the user selected data structure includes an image.
6 . The method of claim 5 , wherein the image is broken up into a plurality of parts and each of the plurality of parts is used to derive the first derived identifier.
7 . The method of claim 5 , wherein the image is broken up into a plurality of parts and each of the plurality of parts is used to derive the second derived identifier.
8 . The method of claim 5 , wherein the image is broken up into a plurality of parts and each of the plurality of parts is used to derive the first derived identifier and the second derived identifier.
9 . The method of claim 1 , wherein the one-time use data structure includes a one-time password.
10 . The method of claim 1 , wherein the cryptographic hashing function includes an asymmetric hashing function.
11 . An apparatus for providing access to a server via a network, the apparatus including:
at least one processor;
a computer system operatively coupled to the at least one processor; and
a network environment operatively coupled to the at least one processor, wherein the at least one processor includes instructions to carry out,
a) providing a registration process including identification of a user selected data structure;
b) distributing a one-time use data structure to a user device and the computer resource server;
c) modulating the user selected data structure with the one-time use data structure and applying a cryptographic hashing function to the modulated user selected data structure to produce a first derived identifier and a current modulation key;
d) transmitting the first derived identifier and the current modulation key to the server; and
e) upon a user requesting access to the server, (a) requesting the first derived identifier and the current modulation key, (b) utilizing (i) the one-time use data structure, (ii) the current modulation key, and (iii) a copy of the user selected data structure to derive a second derived identifier, and (c) comparing the first derived identifier and second derived identifier, and, if the first derived identifier matches the second derived identifier, granting access to the server.
12 . The apparatus of claim 11 , wherein the user selected data structure is broken up into a plurality of parts and each of the plurality of parts is used to derive the first derived identifier.
13 . The apparatus of claim 11 , wherein the user selected data structure is broken up into a plurality of parts and each of the plurality of parts is used to derive the second derived identifier.
14 . The apparatus of claim 11 , wherein the user selected data structure is broken up into a plurality of parts and each of the plurality of parts is used to derive the first derived identifier and the second derived identifier.
15 . The apparatus of claim 11 , wherein the user selected data structure includes an image.
16 . The apparatus of claim 15 , wherein the image is broken up into a plurality of parts and each of the plurality of parts is used to derive the first derived identifier.
17 . The apparatus of claim 15 , wherein the image is broken up into a plurality of parts and each of the plurality of parts is used to derive the second derived identifier.
18 . The apparatus of claim 15 , wherein the image is broken up into a plurality of parts and each of the plurality of parts is used to derive the first derived identifier and the second derived identifier.
19 . The apparatus of claim 1 , wherein the one-time use data structure includes a one-time password.
20 . The apparatus of claim 1 , wherein the cryptographic hashing function includes an asymmetric hashing function.