Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Assignees
Member
University of Nevada, Las VegasThe University of Nevada, Las Vegas is a public research university offering comprehensive undergraduate, graduate, and professional programs. The institution is recognized for research initiatives, interdisciplinary curriculum, community partnerships, and diverse student support. UNLV provides resources spanning financial assistance, technology, career development, outreach, and research, advancing individual achievement and community engagement in a multicultural environment.
The University of Nevada, Las Vegas is a public research university offering comprehensive undergraduate, graduate, and professional programs. The institution is recognized for research initiatives, interdisciplinary curriculum, community partnerships, and diverse student support. UNLV provides resources spanning financial assistance, technology, career development, outreach, and research, advancing individual achievement and community engagement in a multicultural environment.
Publication Number
US-9509682-B2
Publication Date
2016-11-29
Expiration Date
Abstract
In general, the subject matter described in this document can be embodied in methods, systems, and program products. A computing system receives a token that was specified during a process for logging into an account. The computing system determines whether the token matches any of a plurality of tokens that are assigned to a respective plurality of accounts. The computing system identifies, in response to determining that the token matches a particular token that is assigned to a particular one of the plurality of accounts, a username for the particular one of the plurality of accounts. The computing system provides information to cause a computer display to present the username and multiple other usernames in an obscured manner. The computing system receives an indication that user input selected the username. The computing system receives a password. The computing system provides authorization to log into the account.
Core Innovation
A computing system receives a token specified by first user input during a process for logging into a user account. The system determines whether the token matches any of a plurality of tokens that are assigned to a respective plurality of user accounts, and in response to determining that the token matches a particular token assigned to a particular user account, identifies a username for that particular user account.
The system provides information to cause a computer display to present, for user selection, the identified username with a part of the username obscured. The system also presents multiple other usernames, each having a part obscured, and at least one of the multiple other usernames includes a fake username, which obscures a connection between the token and the username.
The system receives an indication that second user input selected, during the process for logging into the user account, the username with the part of the username obscured. The system also receives a particular password specified by third user input during the process for logging into the user account, and provides authorization to log into the user account in response to determining that the selected obscured username matches the username assigned to the particular user account associated with the token, and that the particular password matches a password assigned to that particular user account.
Claims Coverage
The document includes two independent claims: a computer-implemented method and a corresponding system. Across the independent claims, the coverage centers on token-to-account determination, username presentation with obscuring including fake usernames, user selection of an obscured username, password receipt, and authorization only when both username and password match the credentials associated with the token.
Token-based account identification and credential authorization
Receiving a token specified by first user input during a process for logging into a user account; determining whether the token matches any of a plurality of tokens assigned to a respective plurality of user accounts; identifying, in response to a match, a username for the particular user account; and providing authorization to log into the user account in response to the selected obscured username matching the username assigned to the particular user account associated with the token and the particular password matching a password assigned to that particular user account.
Obscured username selection with fake username to obscure token-to-username connection
Providing information to cause a computer display to present, for user selection, the username with a part of the username obscured and multiple other usernames with a part of each obscured, at least one of the multiple other usernames including a fake username to obscure a connection between the token and the username; and receiving an indication that second user input selected the username with the part of the username obscured in distinction to the multiple other usernames.
Together, the independent claims require token matching to identify an account and username, presenting the username and multiple obscured alternatives including at least one fake username, receiving selection plus a password, and granting authorization only when the selected username and the password both match the credentials associated with the token.
Stated Advantages
Obscures a connection between the token and the username by presenting the username with obscured parts alongside multiple other obscured usernames including a fake username.
Avoids indicating which credential failed to match when a selected username or specified password does not match stored credentials.
Documented Applications
No documented applications found
Interested in licensing this patent?