Multi-factor authentication using symbols
In some implementations, a server device may receive, from a first device, a credential and a request to access a resource. The server device may transmit, to a second device associated with the credential, an image that includes a first symbol composed of a set of elements. The server device may receive, from the first device, information associated with a second symbol formed via user interaction with a user interface of the first device. The second symbol may be formed by dragging elements, presented via the user interface, to an area of the user interface in which the second symbol is to be formed, or drawing elements in the area of the user interface in which the second symbol is to be formed. The server device may grant or denying access to the resource based on the first symbol and the information associated with the second symbol.
1. A system for authenticating a user for access to a network resource using multi-factor authentication, the system comprising:
memory; and
one or more processors, coupled to the memory, configured to:
transmit, to a user device associated with a request to access the network resource, an image, or a link to the image, wherein the image is composed of a set of visual elements that each have a particular visual attribute;
transmit, to a client device, information to cause the client device to present an interface indicating instructions to recreate the image by inputting one or more visual elements to form an input image of an authentication symbol with reference to the image presented to the user device, the input image being formed via input of a set of one or more visual elements via the interface; and
grant or deny access to the network resource based on comparing information indicative of the input image to authentication symbol information, wherein the authentication symbol information is associated with the authentication symbol.
2. The system of claim 1 , wherein the input image is formed using a drag and drop input mechanism.
3. The system of claim 1 , wherein the one or more processors are further configured to:
receive, from the client device, a login credential and the request to access the network resource, wherein transmitting the image, or the link to the image, is based on receiving the login credential and the request to access the network resource.
4. The system of claim 1 , wherein the one or more processors are further configured to:
receive position information that identifies respective positions of the set of one or more visual elements within the interface,
wherein the one or more processors, when granting or denying access to the network resource, are configured to:
determine whether the set of one or more visual elements match the set of visual elements from which the image is composed; and
determine, based on the position information, whether the respective positions of the set of one or more visual elements satisfy a threshold with respect to positions of the set of visual elements from which the image is composed.
5. The system of claim 1 , wherein the one or more processors, when granting or denying access to the network resource, are configured to:
compare the input image and the image;
calculate a similarity score based on comparing the input image and the image; and
determine whether the similarity score satisfies a threshold.
6. The system of claim 1 , wherein a plurality of visual elements, identified in the information transmitted to the client device, are determined based on the set of visual elements from which the image is composed.
7. The system of claim 1 , wherein a plurality of visual elements, identified in the information transmitted to the client device, include one or more visual elements that are not components of the image.
8. The system of claim 7 , further comprising identifying the one or more visual elements that are not components of the image based on the set of visual elements from which the image is composed and using a data structure that stores information that identifies associations between visual elements.
9. A method for multi-factor authentication, comprising:
transmitting, by a server device and to a first device associated with a request to access a resource, an image, or a link to the image, wherein the image is composed of a set of visual elements that each have a particular visual attribute;
transmitting, by the server device and to a second device, information to cause the second device to present an interface indicating instructions to recreate the image by inputting one or more visual elements to form an input image of an authentication symbol with reference to the image presented to the first device, the input image being formed via input of a set of one or more visual elements via the interface; and
granting or denying access to the resource based on the image and information indicative of the input image.
10. The method of claim 9 , wherein the information causes a plurality of visual elements to be presented via the interface of the second device and enables visual elements, of the plurality of visual elements, to be input to form the input image.
11. The method of claim 9 , wherein the input image is formed via at least one of:
selecting the set of one or more visual elements, presented via the interface, to form the input image, or
drawing the set of one or more visual elements via the interface.
12. The method of claim 9 , wherein the input image is formed via:
separately dragging one or more first visual elements, and
drawing one or more second visual elements.
13. The method of claim 9 , further comprising:
randomly selecting a first visual element to be included in the image; and
identifying a second visual element to be included in the image based on the first visual element.
14. The method of claim 9 , wherein granting or denying access to the resource comprises:
comparing the input image and the image;
calculating a similarity score based on comparing the input image and the image; and
determining whether the similarity score satisfies a threshold.
15. The method of claim 9 , wherein the input image is formed using an input mechanism that enables intersection or overlapping of at least two visual elements of the set of one or more visual elements.
16. A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a client device, cause the client device to:
receive, from a server device, information that identifies an interface to be presented by the client device in association with a request to access a network resource;
present, via the interface:
an indication that includes instructions to recreate an image presented to a user device by inputting one or more visual elements to form, with reference to the image presented to the user device, an input image of an authentication symbol via input of a set of one or more visual elements, wherein the image is composed of a set of visual elements that each have a particular visual attribute; and
receive, from the server device, a message indicating whether access to the network resource is granted or denied based on transmitting input symbol information indicative of the input image.
17. The non-transitory computer-readable medium of claim 16 , wherein the input symbol information includes the input image.
18. The non-transitory computer-readable medium of claim 16 , wherein the input symbol information includes at least one of:
the input image,
information that identifies the set of one or more visual elements used to form the input image, or
position information that identifies respective positions of the set of one or more visual elements.
19. The non-transitory computer-readable medium of claim 16 , wherein the input symbol information includes information that identifies a sequence in which the set of one or more visual elements were input to form the input image.
20. The non-transitory computer-readable medium of claim 16 , wherein the input image is formed by drawing or by using a selecting mechanism.