Authentication Methods and Systems

Abstract

The invention provides a solution for secure authentication of an individual. The invention comprises methods and apparatus for secure input of a user's identifier e.g. PIN. An image of a keypad is superimposed over a scrambled, operable keypad within a display zone of a screen associated with an electronic device. The keypad image depicts a non-scrambled keypad, in that the keys depicted in the image are in an expected or standardised formal or order. The difference in positions of the keys depicted in the image, and those in the operable keypad, provides a mapping which enables an encoded form of the identifier to be generated, such that the un-encoded version is never stored in the device's memory. Preferably, the image depicts a keypad which is standard for the device which it is being shown on. The device may be a mobile phone, a tablet computer, laptop, PC, payment terminal or any other electronic computing device with a screen. The underlying keypad, which is at least partially obscured from the user's view by the image, may be generated at run time by a procedure call. Preferably, this procedure is native to the device ie part of a library which is provided as standard with the device.

1 .- 16 . (canceled) 
     
     
         17 . A user verification method comprising:
 presenting a keypad image on a display screen of an electronic device, wherein the keypad image includes a plurality of display zones or hot spots corresponding to a first plurality of keys; and   generating an encoded version of a user identifier on or at the electronic device for verification of a user based on i) user interaction with the display zones or hots spots of the keypad image and ii) a mapping between the display zones or hot spots of the keypad image and a second plurality of keys, wherein the first plurality of keys and the second plurality of keys are scrambled relative to one another.   
     
     
         18 . The user verification method according to  claim 17 , wherein:
 in generating the encoded version of the user identifier, the mapping is used to identify a keypad symbol or character or digit or value associated with a particular key of the second plurality of keys, wherein the particular key corresponds to a particular display zone or hot spot of the keypad image selected by user interaction with the keypad image.   
     
     
         19 . The user verification method according to  claim 18 , wherein:
 the encoded version of the user identifier includes a number of keypad symbols or characters or digits or values corresponding to a number of detected keystrokes made by the user interacting with the keypad image.   
     
     
         20 . The user verification method according to  claim 17 , further comprising:
 communicating the encoded version of the user identifier to a computing resource that decodes the user identifier.   
     
     
         21 . The user verification method according to  claim 20 , wherein:
 the computing resource comprises a remote system that is in communication with the electronic device.   
     
     
         22 . The user verification method according to  claim 20 , wherein:
 the computing resource decodes the user identifier based on a configuration of the second plurality of keys and configuration of the first plurality of keys.   
     
     
         23 . The user verification method according to  claim 22 , further comprising:
 communicating the configuration of the second plurality of keys and the configuration of the first plurality of keys to the computing resource.   
     
     
         24 . The user verification method according to  claim 17 , wherein:
 the user identifier comprises a PIN or PIC assigned to the user.   
     
     
         25 . The user verification method according to  claim 17 , wherein:
 the user identifier comprises a password assigned to the user.   
     
     
         26 . The user verification method according to  claim 17 , wherein:
 the electronic device comprises a portable electronic device selected from group consisting of mobile phone, tablet computer, payment terminal, laptop computer, portable computing device, or personal computer.   
     
     
         27 . The user verification method according to  claim 17 , wherein
 configuration of the first plurality of keys is generated on or at the electronic device.   
     
     
         28 . The user verification method according to  claim 17 , wherein
 the first plurality of keys of the keypad image are arranged in a standard format or configuration.   
     
     
         29 . The user verification method according to  claim 17 , wherein
 the first plurality of keys of the keypad image are arranged in a scrambled configuration.   
     
     
         30 . The user verification method according to  claim 29 , wherein:
 the scrambled configuration of the first plurality of keys is generated on or at the electronic device using at least one keypad configuration.   
     
     
         31 . The user verification method according to  claim 30 , wherein:
 the at least one keypad configuration is based on data generated by a random number generator.   
     
     
         32 . The user verification method according to  claim 30 , wherein:
 the at least one keypad configuration based on biometric data of the user derived from a biometric capture process.   
     
     
         33 . The user verification method according to  claim 29 , wherein:
 the scrambled configuration of the first plurality of keys is based on data generated by a random number generator.   
     
     
         34 . The user verification method according to  claim 17 , wherein:
 the second plurality of keys is based on least one virtual operable keypad.   
     
     
         35 . The user verification method according to  claim 17 , wherein:
 the second plurality of keys is based on a plurality of virtual operable keypads.   
     
     
         36 . The user verification method according to  claim 33 , wherein:
 the plurality of virtual operable keypads is arranged or ordered in a series, stack, queue, or other data structure.   
     
     
         37 . The user verification method according to  claim 33 , further comprising:
 selecting or designating one virtual operable keypad in the plurality of virtual operable keypads as an active virtual operable keypad.   
     
     
         38 . The user verification method according to  claim 33 , further comprising:
 re-ordering or altering the plurality of virtual operable keypads after receiving user input.   
     
     
         39 . The user verification method according to  claim 17 , wherein:
 the verification of the user is used to authenticate the user for a financial transaction.