Graphical authentication for a portable device and methods for use therewith
A portable device includes a touch screen that includes a display screen and that generates touch screen data in response to a user's interaction with the touch screen. A processor executes a security application for authenticating the user to the portable device that provides first display data to the touch screen for displaying a security prompt on the display screen. Touch screen data is received from the touch screen in response to the user's interaction with the touch screen and is processed to determine when an authentication shape is recognized as being indicated by the touch screen data. The user is authenticated to the portable device when the authentication shape is recognized as being indicated by the touch screen data.
1. A portable device comprising:
a touch screen that includes a display screen and that generates touch screen data in response to a user's interaction with the touch screen;
a processor for executing a security application for authenticating the user to the portable device, wherein the security application includes a plurality of security levels including a first security level and a second security level, the security application including:
providing first display data to the touch screen for displaying a security prompt on the display screen;
receiving the touch screen data from the touch screen in response to the user's interaction with the touch screen;
processing the touch screen data to determine when an authentication shape is recognized as being indicated by the touch screen data, wherein, for the first security level, the authentication shape is recognized based on the at least one of: the size independent shape descriptor and the orientation independent shape descriptor, and wherein, for the second security level, the authentication shape is recognized based on at least one of: a size dependent shape descriptor and an orientation dependent shape descriptor; and
authenticating the user to the portable device at the first security level when the authentication shape is recognized based on at least one of: the size independent shape descriptor and the orientation independent shape descriptor;
authenticating the user to the portable device at the second security level when the authentication shape is recognized based on at least one of: the size dependent shape descriptor and the orientation dependent shape descriptor;
wherein the user's interaction with the touch screen includes a line drawing corresponding to the authentication shape that includes at least one point of self intersection.
2. The portable device of claim 1 wherein the authentication shape includes a non-alphanumeric shape.
3. The portable device of claim 1 further comprising providing second display data to the touch screen for displaying the line drawing on the display screen.
4. The portable device of claim 1 wherein the touch screen displays the line drawing with limited persistence so as to display only a portion of the line drawing at a time.
5. The portable device of claim 1 further comprising suppressing a display of the line drawing on the display screen.
6. The portable device of claim 1 wherein the security application further includes:
processing the touch screen data to extract a velocity profile associated with the user's interaction with the touch screen; and
determining when the velocity profile associated with the user's interaction with the touch screen compares favorably to a stored velocity profile;
wherein authenticating the user to the portable device includes authenticating the user to the portable device further when the velocity profile associated with the user's interaction with the touch screen compares favorably to the stored velocity profile.
7. The portable device of claim 1 wherein the security prompt includes a text entry box.
8. The portable device of claim 7 wherein authenticating wherein authenticating the user to the portable device includes authenticating the user to the portable device when a valid security password is entered in the text entry box.
9. The portable device of claim 7 wherein the text entry box can accept text input that is ignored when authenticating the user to the portable device.
10. The portable device of claim 1 wherein the plurality of security levels correspond to a plurality of modes of the at least one security application.
11. A portable device comprising:
a touch screen that includes a display screen and that generates touch screen data in response to a user's interaction with the touch screen;
a processor for executing at least one application that includes at least one security application for authenticating the user to the portable device, the security application including:
providing first display data to the touch screen for displaying a security prompt on the display screen;
receiving the touch screen data from the touch screen in response to the user's interaction with the touch screen, wherein the user's interaction with the touch screen includes a line drawing corresponding to an authentication shape that is non-alphanumeric and includes at least one point of self intersection;
processing the touch screen data to determine when the authentication shape is recognized as being indicated by the touch screen data, wherein the authentication shape is recognized based on a size dependent and an orientation dependent shape descriptor;
authenticating the user to the portable device when the authentication shape is recognized as being indicated by the touch screen data.
12. A portable device comprising:
a touch screen that includes a display screen and that generates touch screen data in response to a user's interaction with the touch screen;
a processor for executing at least one application that includes at least one security application for authenticating the user to the portable device, the at least one security application including:
providing first display data to the touch screen for displaying a security prompt on the display screen;
receiving the touch screen data from the touch screen in response to the user's interaction with the touch screen;
processing the touch screen data to extract a velocity profile associated with the user's interaction with the touch screen; and
determining when the velocity profile associated with the user's interaction with the touch screen compares favorably to a stored velocity profile;
wherein authenticating the user to the portable device includes authenticating the user to the portable device when the velocity profile associated with the user's interaction with the touch screen compares favorably to the stored velocity profile;
wherein the at least one security application further includes processing the touch screen data to:
authenticate the user at a first security level when an authentication shape is recognized based on the at least one of: a size independent shape descriptor and an orientation independent shape descriptor; and
authenticate the user at a second security level when the authentication shape is recognized based on the at least one of: a size dependent shape descriptor and an orientation dependent shape descriptor.
13. The portable device of claim 12 wherein the user's interaction with the touch screen includes a line drawing corresponding to the authentication shape.
14. The portable device of claim 13 further comprising providing second display data to the touch screen for displaying the line drawing on the display screen.
15. The portable device of claim 13 wherein the touch screen displays the line drawing with limited persistence so as to display only a portion of the line drawing at a time.
16. The portable device of claim 13 further comprising suppressing a display of the line drawing on the display screen.
17. The portable device of claim 13 wherein line drawing includes at least one point of self intersection.
18. The portable device of claim 12 wherein the authentication shape includes a non- alphanumeric shape.
19. The portable device of claim 12 wherein the authentication shape includes an alphanumeric shape.
20. The portable device of claim 12 wherein the plurality of security levels correspond to a plurality of modes of the at least one security application.