Visual image authentication
Methods and systems described herein authenticate a user and help secure transaction. A display screen presents images that are difficult for malware to recognize but a person can recognize. In at least one embodiment, a person communicates transaction information using visual images received from the service provider system. In at least one embodiment, a user selects a sequence of visual images as a means of authenticating the user and logging into a financial account or other corporate account. In some embodiments, methods and systems are provided for determining whether to grant access, by generating and displaying visual images on a screen that the user can recognize, and select. In an embodiment, a user presses his or her finger or fingers on a display screen to select images as a method for authenticating and protecting communication from malware. In an embodiment, non-determinism in hardware helps unpredictably vary the image selected, the image location, generate noise in the image, or change the shape or texture of the image. In some embodiments, visual image authentication helps Alice and Bob detect if Eve has launched a man-in-the-middle attack on their key exchange.
1. A machine-implemented method for determining whether to grant access to a secure entity comprising: a user using a receiving device that receives one or more visual images;
the receiving device containing a processor system, having at least one processor, a communications system, and a memory system;
for each visual image received, the user selects an image on a display screen of a selecting device,
corresponding to the visual image received by the receiving device;
wherein each display screen contains more than one visual image;
the selecting device containing a processor system, having at least one processor, a communications system, and a memory system;
wherein at least one of the visual images is modified by one or more of the following transformations:
translating parts of the image;
rotating the image or rotating parts of the image;
reordering parts of the image;
changing the shape of the image or parts of the image;
overlapping objects in the image;
adding distracting objects in the image:
or adding noise to the image.
2. The machine-implemented method of claim 1 further comprising: the receiving device receives the visual images at an email address.
3. The machine-implemented method of claim 1 further comprising: the user selecting a visual image by pressing one or more fingers on the display screen.
4. The machine-implemented method of claim 1 further comprising: wherein the secure entity is a financial account or bank account.
5. The machine-implemented method of claim 1 further comprising: the selecting device is a mobile device.
6. The machine-implemented method of claim 5 further comprising: the mobile device is a mobile phone or tablet or a laptop computer.
7. The machine-implemented method of claim 1 further comprising: the receiving device is a mobile device.
8. The machine-implemented method of claim 1 further comprising: the receiving device or the selecting device is a desktop computer.
9. The machine-implemented method of claim 1 further comprising: the receiving device and the selecting device are the same device.
10. The machine-implemented method of claim 1 further comprising: the receiving device and the selecting device are distinct devices.
11. A system for determining whether to grant access to a secure entity comprising: a user using a receiving device that receives one or more visual images;
the receiving device containing a processor system, having at least one processor, a communications system, and a memory system;
for each visual image received, the user selects an image on a display screen of a selecting device,
corresponding to the visual image received by the receiving device;
wherein each display screen contains more than one visual image;
the selecting device containing a processor system, having at least one processor, a communications system, and a memory system;
wherein at least one of the visual images is modified by one or more of the following transformations;
translating parts of the image;
rotating the image or rotating parts of the image;
reordering parts of the image;
changing the shape of the image or parts of the image;
overlapping objects in the image;
adding distracting objects in the image;
or adding noise to the image.
12. The system of claim 11 further comprising:
the receiving device receives the visual images at an email address.
13. The system of claim 11 further comprising:
the user selecting a visual image by pressing one or more fingers on the display screen.
14. The system of claim 11 further comprising:
wherein the secure entity is a financial account or bank account.
15. The system of claim 11 further comprising: the selecting device is a mobile device.
16. The system of claim 15 further comprising:
the mobile device is a mobile phone or tablet or a laptop computer.
17. The system of claim 11 further comprising: the receiving device is a mobile device.
18. The system of claim 11 further comprising:
the receiving device or the selecting device is a desktop computer.
19. The system of claim 11 further comprising:
the receiving device and the selecting device are the same device.
20. The system of claim 11 further comprising:
the receiving device and the selecting device are distinct devices.
21. A machine-implemented method for determining whether to grant access to a secure entity comprising: a user using a receiving device that receives one or more words; the receiving device containing a processor system, having at least one processor, a communications system, and a memory system;
for each word received, the user selects an image on a display screen of a selecting device, corresponding to the word received at the receiving device; wherein each display screen contains more than one visual image;
the selecting device containing a processor system, having at least one processor, a communications system, and a memory system;
wherein at least one of the visual images is modified by one or more of the following transformations;
translating parts of the image;
rotating the image or rotating parts of the image;
reordering parts of the image;
changing the shape of the image or parts of the image;
overlapping objects in the image;
adding distracting objects in the image;
or adding noise to the image.
22. The machine-implemented method of claim 21 :
wherein the one or more words are received in an SMS text message, by the receiving device.
23. The machine-implemented method of claim 21 :
wherein the one or more words are received in an email, by the receiving device.