Picture gesture authentication.

(54) Title: AUTHENTIFICATION OF IMAGE GESTURE.

(54) Title: PICTURE GESTURE AUTHENTICATION.

(57) Summary

In one embodiment, an image signing password system can use an image signing password to determine access to a computing device or service. A display screen 172 may display a personalized digital image 310. A user input device 160 may receive a user delineation group executed by the user through personalized digital images 310. N processor 120 can authenticate access to the user session if the user delineation group matches a library delineation group associated with the user.

(57) Abstract

In one embodiment, a picture signature password system may use a picture signature password to determine access to a computing device or Service. A display screen 172 may display a personalized digital image 310. A user input device 160 may receive a user drawing set executed by a user over the personalized digital image 310. A processor 120 may authenticate access to the user session if the user drawing set matches a library drawing set associated with the user.

<img file="MX348331B_D0001.tif" />

PATENT TITLE No. 348331

<td>Headlines):</td><td>MICROSOFT TECHNOLOGY LICENSING, LLC</td>

<td>Home:</td><td>One Microsoft Way, Redmond, Washington, 98052, USA</td>

<td>Denomination:</td><td>AUTHENTIFIED IMAGE GESTURE.</td>

<td>Classification:</td><td>CIP: G06F21 / 36; G06F3 / 01 CPC: G06F21 / 36; G06F3 / 01; H04L9 / 3226</td>

<td>Inventor (s):</td><td>JEFF JOHNSON; STEVE SEIXEIRO; ZACHARY PACE; GILES VAN DER BOGERT; SEAN GILMOUR; LEVI SIEBENS; KEN TUBBS</td>

Number:

MX / a / 2013/013742

REQUEST

International Presentation Date:

October 2011

PRIORITY

<td>Country:</td><td>Date:</td><td>Number:</td>

<td>AU</td><td>May 24, 2011</td><td> 2011202415</td>

<td>US</td><td>June 17, 2011</td><td> 13/163,201</td>

Validity: Twenty years

Expiration Date: October 9, 2031

Issue Date: June 7, 2017

<img file="MX348331B_D0002.tif" />

.Industrial Property Law.

In accordance with article 23 of Law 6 · te Industrial Property, this patent has a validity of twenty irrevocable arts, counted from the filing date of the Application and will be subject to the payment of the fee to keep the rights in force.

Whoever signs this title does so based on the provisions of articles 6, sections III and 7⁰bis 2 of the Industrial Property Law (Official Gazette of the Federation (0 OF) 06/27/1991, amended on 08/02/1994, 10/25/1999, 12/26/1997, 05/17/1999 , 01/26/2004, 06/16/2005, 01/25/2006, 05/06/2009, 06/01/2010, 06/18/2010, 06/28/2010, 01/27/2012 and 09 / 04/2012), 'articles 1^or, 3 * fractophi V part a), 4^or and 12th sections i and lll of the Regulations of the Mexican Institute of Industrial Property (DOF 12/14/1999, amended on 07/01/2002, 07/07/2004, 07/28/2004 and 09/07/2007) ; items 1^or, 3^or, 4^or, 5^or Section V subsection a), 16 sections I and III and 30 of the Organic Statute of the Mexican Institute of Industrial Property (DOF 12/27/1999, amended on 10/10/2002, 07/29/2004, 08/04/2004 and 09/13/2007), 1^or, 3 * and 5 'Iflúso a) of the Agreement that delegates powers to the Deputy General Directors, Coordinator, Divisional Directors. Titular of the Reoterial Offices, Divisional Deputy Directors, Departmental Coordinators and other subordinates of the Mexican Institute of Property ln «testnal. (DOF 12/15/1999, amended on 02/04/2000, 07/29/2004, 08/04/2004 and 09/13/2007).

This document is signed with an advanced electronic signature (FIEL), based on articles 7 BIS 2 of the Industrial Property Law; 3 of its Regulations, and 1 fraction lll, 2 fraction V, 26 BIS and 26 TER of the Agreement establishing the guidelines for the use of the Payment and Electronic Services Portal (PASE) of the Mexican Institute of Industrial Property, in the procedures indicated.

THE DIVISIONAL DIRECTOR OF PATENTS

NAHANNY CANAL REYES

<img file="MX348331B_D0003.tif" />

Original string:

NAHANNY MARISOL CANAL REYES | 00001000000403252793 | Administration Service

Tax | 1695 || MX / 2017/44572 | MX / a / 2013/013742 | PCT patent title | 1027 | RGZ | Page (s) 1 | 7qpABF1KaQkdzy1 + d / L1QzLkfT4 =

Digital stamp:

VAn3Wb / F9EWFxL93zS6J7aQzvJ4DDQijiUpgzxr4vhXsvKxoyCuXiyuYgDs5n93nKkCRwJd84SjZBOTcetMkhUGROT j2ayFeT dAYVtvlx9G1pvU7 + + + aR6T6aqlMDZGpXDDC92ASVIFYVfrp9RFxxOy2C0h372nF3cvel Ta3HroRSFKWXbvn

HN / p4 / UxuuUES82j2Wff7VlkzAgwTot7VUZIXvF5M5ILozvZEoCk1cprTqNr7ftbHzjSHKf84YW89jmTHDWB98DRiQ ¡Y + jWpmY5i1axFU9tJDuj5M5ILozvZEoCk1cprTqNr7ftbHzjSHKf84YW89jmTHDWB98DRiQ ¡Y + jWpmY5i1axFU9tJUj5M5ILozvZEoCk1cprTqNr7ftbHzjSHKf84YW89jmTHDWB98DRiQ ¡Y + jWpmY5i1axFU9tJUJ5M5ILozvZEoCkL =

Arei¡al No 550 Floor 1. Pueblo Santa Mana Tepepan, Xochimilco, 16020, Mexico City (55) 53340700 www.gob.mx/impi lll lllllllllllll

ΜΧ / 2017/44572

<img file="MX348331B_D0004.tif" />

<img file="MX348331B_D0005.tif" />

<img file="MX348331B_D0006.tif" />

AUTHENTIFICATION OF IMAGE GESTURE

BACKGROUND

A computing device, such as a laptop, desktop computer, tablet, handheld device, or server, may contain sensitive data that a user does not wish to disseminate to the general public. Similarly, a service, such as an email account, bank service, social network, or remote work computer access, can contain data that can be harmful in malicious hands. In that way, a computing device or service can use password protection to restrict access only to users who can authenticate a right to access a user session. A login inferry can query the user for a password that has a series of characters, such as letters, numbers, and signs. An authentication service can deny user access if the characters are in the wrong order, if the letters are in the wrong case, or if the password fails to match the stored password in any way.

The authentication service may give the user a set number of attempts by providing the password before the user is blocked from further attempts to access the computing device or service. The user can then contact an administrator to access the service or device

IMPIAS

ΓΝΓΠΤυΤΟ MUCAMO

Μ THE FRONTOAD

COMPUTER INDUSTRIAL, after providing some proof of identification. Such proof of identification may be a government identification or a pre-registered set of questions that presumably only the user can solve. Alternatively, if the user fails to provide the appropriate password, a computing device or service can erase any important data.

A password protection problem may be that a password that is complex enough to provide an appropriate level of protection may be difficult for a user to remember. Most users can frequently use easily determined passwords such as "Guest", a user's name, or other passwords that can be easily guessed. Users who use an appropriately complex password can frequently forget the password, leading to a very frustrating user experience.

BRIEF DESCRIPTION OF THE INVENTION

This brief description is provided to introduce a selection of concepts in a simplified form that is further described in the Detailed Description below. This brief description is not intended to identify key features or essential characteristics of the claimed subject matter, nor is it intended to be used to limit the scope of the claimed subject matter.

The modalities discussed below refer to an image signing password system that can use an image signing password to determine access to a computing device or service. A splash screen can present a personalized digital image. A user input device may receive a user offense group executed by a user on the personalized digital image. A processor can authenticate access to the user session if the user outline group matches a library outline group associated with the user.

DRAWINGS

In order to describe the way in which the aforementioned and other advantages and features can be obtained, a more particular description is set forth and will be presented by reference to specific embodiments thereof which are illustrated in the accompanying drawings. Understanding that these drawings illustrate typical embodiments only and therefore are not to be construed as limiting their scope, implementations will be described and explained in further specificity and detail through the use of the accompanying drawings.

Figure 1 illustrates a block diagram of an illustrative computing device.

Figure 2 illustrates, in a block diagram, a service of

<img file="MX348331B_D0007.tif" />

authentication.

<img file="MX348331B_D0008.tif" />

imduttual

Figures 3a-b illustrate, in diagrams Ha b I or L | ulj, J'— image signature passwords.

Figures 4a-d illustrate, in block diagrams, a library delineation group record.

Figure 5 illustrates, in a flow chart, one embodiment of an administrative preparation method for an authentication service.

Figure 6 illustrates, in a flow chart, one embodiment of a method for creating a library delineation group.

Figure 7 illustrates, in a flow chart, one embodiment of a method for executing an authentication session.

Figure 8 illustrates, in a flow chart, one embodiment of a method for matching a patron library equipment to a library delineation group on an individual member basis.

Figure 9 illustrates, in a flow chart, one embodiment of a method for matching a patron library equipment to a library delineation group on an aggregate basis.

DETAILED DESCRIPTION

Modalities are discussed in detail below. Although specific implementations are discussed, it should be understood that this is done for illustration purposes only. An expert in

<img file="MX348331B_D0009.tif" />

^{5 1}μ ρ ι relevant technique will recognize that you caniT 'components and configurations without departing from the spirit v aim' ?? of the subject of this description. Implementations can be a machine-implemented method, a tangible machine-readable medium that has a set of instructions detailing a method stored in it for at least one processor, or an image signature password system for a computing device. .

An image signing password system can increase the complexity of the authentication procedure while improving usability by implementing an image signing password. An image signature password combines a digital image with a series of user-selected drawings made through the digital image. The digital image can further become ingrained in the user's memory by allowing the user to supply a personalized digital image from the user's own digital image library. Alternatively, the user can select the digital image from a library of predetermined digital images provided with the authentication service. Although a presentation with an integrated touch screen can increase ease of use by allowing the user to directly apply drawings with one finger, a user can also apply more traditional input methods such as a mouse, interactive stylus, or cursor control of the mouse. keyboard. Once authenticated, the user can use the computing device or service in a "user session," or a period of authenticated use.

<img file="MX348331B_D0010.tif" />

.

A simple image signing password can apply a series of “touch points to the digital image. The word "point of contact" refers to the selection of the position in the digital image, either through a touch on a touch screen or by clicking with a mouse or other input. A more complex image signature password can incorporate a gesture, which combines selecting a group of positions with a movement. A gesture can include a simple shape, such as a circle gesture or a straight line gesture, or even more complex freestyle shape gestures. A drawing is either a point of contact or a gesture. A gesture group can have one or more gestures, while an outline group can have one or more gestures or touch points. Neither gesture group nor the delineation group is a null group.

The image signing password system can enhance the usefulness of an image signing password by visual rendering, or 'tracing', the delineation group is received on top of the digital image as the user enters the group delineation. That way, the user can check that the delineation group is being received as desired. The image signing password system can compare the user entered delineation group, or "user delineation group", against a previously entered delineation group stored in the system, or "library delineation group".

In one embodiment, a signature password system

<img file="MX348331B_D0011.tif" />

<img file="MX348331B_D0012.tif" />

Image can use an image signing password to determine access to a computing device or service. A splash screen can present a personalized digital image. A user input device can receive a user delineation group executed by a user through the personalized digital image. A processor can authenticate access to a user session if the user outline group matches a library outline group associated with the user.

Figure 1 illustrates a block diagram of an illustrative computing device 100 that can act as an image signing password system. The computing device 100 may include a common conductor 110, a processor 120, a memory 130, a read-only memory (ROM) 140, a storage device 150, a user input device 160, an output device 170, and a communication infería 180. Common conductor 110 may allow communication between components of computing device 100.

Processor 120 may include at least one conventional processor or microprocessor that interprets and executes a group of instructions. Memory 130 can be a random access memory (RAM) or other type of dynamic storage device that stores information and instructions for execution by processor 120. Memory 130 can also store temporary variables or other intermediate information used during

<img file="MX348331B_D0013.tif" />

execution of instructions by processor 120. ROM 140 can include a conventional ROM device or other type of static storage device that stores static information and instructions for processor 120. Storage device 150 can include any type of tangible machine-readable medium , such as, for example, magnetic or optical recording medium and its corresponding unit. The storage device 150 can store a group of instructions detailing a method that when executed by one or more processors causes one or more processors to predict the method. Storage device 150 may also be a database or a database interface to store an image signing password for the user.

User input device 160 may include one or more conventional mechanisms that allow a user to enter information into computing device 100, such as a keyboard, mouse 162, interactive stylus 164, touch screen 166, input device Direct Motion 168, a voice recognition device, a microphone, a headset, etc. An interactive stylus 164 is a stylus, such as a laser pen, that interacts with a display screen that allows a user to select or enter data. A touch screen 166 is a display that interacts with a finger of a user to allow the user to directly select or enter data. A direct motion input 168 is a camera or other capture device

<img file="MX348331B_D0014.tif" />

<img file="MX348331B_D0015.tif" />

image or motion image that can read a motion made by a user. The output device 170 may include one or more conventional mechanisms that send information to the user, including a display screen 172, a printer, one or more speakers, an earphone, or a medium, such as a memory, magnetic disk, or optical and a corresponding disk drive. Display screen 172 may have an integrated interactive touch screen 166, which allows users to select representations of data on display screen 172 by touching them. Communication interface 180 may include any transistor-like mechanism that allows processing device 100 to communicate with other devices or networks. Communication interface 180 may include a network interface or a rover receiver interface. Communication interface 180 can be a wireless, wired, or optical interface. In one embodiment, the communication interface 180 may include a universal serial common conductor (USB) interface, a Bluetooth® interface, or another such interface that can be used to set up peripheral devices or pair other computing devices.

The computing device 100 can perform such functions in response to a processor 120 executing sequences of instructions contained in a computer-readable medium, such as, for example, memory 130, a magnetic disk, or an optical disk. Such instructions can be read from memory 130 on another computer-readable medium, such as the device.

<img file="MX348331B_D0016.tif" />

storage 150, or a gpnaradn a-.uum or dl device ¹ trr communication interface 180.

Figure 2 illustrates, in a block diagram, an authentication service 200 executed by an image signing password system 5. The first time a user accesses a computing device or service, the user can provide a set of authentication information. A file manager user procedure 210 may implement an image password enrollment user experience (UX) 212 to collect a text password, an image path, and a delineation group. The text password is a standard text password that the user selects to access a user session such as a computing device or service. The image path identifies a user-selected digital image as a push for the image password. The digital image may be selected from a library of predetermined digital images and / or it may be a custom digital image selected from a user-supplied digital image library. The delineation group is a unique series of one or more 20 points of contact or gestures performed on the digital image to uniquely identify the user.

The image password enrollment user experience 212 can send the text password, image path, and delineation group to a local procedure of image password enrollment 220 running a class of

<img file="MX348331B_D0017.tif" />

<img file="MX348331B_D0018.tif" />

Image enrollment 222. Image enrollment class 222 may process the delineation and digital imaging group to create the image signing password. Image enrollment class 222 may send the image signature password and the text password to a system vault 230 that securely stores this data.

The next time a user seeks to authenticate a session, a local login user interface (Ul) procedure 240 may execute an image verification class 242 to receive the authentication information from the user. Image verification class 242 can receive image signature password and text password from vault and system 230. Image verification class 242 may prompt the user to complete the image signature password when presenting the digital image to the user. The user can enter a user delineation group to apply to the digital image to create the image signing password. If the user fails to properly fill in the image signing password, then the image verification class 242 can prompt the user for the text password.

An image signing password system may implement the authentication service 200. Figure 3a illustrates, in a block diagram, one embodiment of a first image signing password 300. The image signing password system can prompt the user with a digital image 310 to provide the image signing password. Service

<img file="MX348331B_D0019.tif" />

Authentication may present a digital image 310 on a display screen 172 or a touch screen 166. The digital image 310 may be a personalized digital image 310 to increase user familiarity. The user can enter an outline group through touch screen 166, direct motion input 168, mouse 162, interactive stylus 164, or other input device 160.

The delineation group can be overlaid on the custom digital image. The outline group may include a series of one or more points of contact 320 or gestures. A contact point 320 is a contact on a touch screen 166 or a cursor click from another input device 160 at a point on the personalized digital image 310. A contact point 320 has position but no motion vector. Conversely, a gesture has a position and a movement vector. A gesture can be a 330 line gesture, a 340 circle gesture, or a freestyle shape gesture.

For example, as shown in Figure 3a, a custom digital image 310 can show three people. A user can apply contact points to a person on the shoulder, hand, and foot. The user can draw two 330 line gestures down on the second person, creating a cross on the chest. The user can draw a circle gesture 340 on the hand of the third person in a clockwise motion.

<img file="MX348331B_D0020.tif" />

<img file="MX348331B_D0021.tif" />

A second example of another image signing password 350 is shown in Figure 3b. The custom 360 digital image, in the second example, may have a person next to a car under a crescent moon. A user can draw a circle gesture 340 on the person's head in a counter-clockwise motion. The user can draw two ascending line gestures 330 to cross out of the crescent moon. The user can draw a freestyle shape gesture 370 by tracing the underside of the car.

A library outline group is an outline group stored with the image signing password system after initial input by the user when creating an account with a computing device or service. Additionally, a user outline group is an outline group entered to access a session once an account has been created. The library outline group may be stored in the system vault 230 as a library outline group record.

Whether it is a library outline group or a user outline group, each member of an outline group can be identified by a group of position data. The position data group indicates where the user has touched or clicked. For a touch screen, the group of position data may include all the points touched by the user's finger, or a representative point, such as the center of the finger.

<img file="MX348331B_D0022.tif" />

₁₄ IMPI&gt; MEXICAN INSTITUTE

BE IA MIOFIEIMD inbustmal

Similarly, each gesture can be identified by a group of position data and a group of vector data. The vector data group indicates the direction in which the user moves to touch and click. For a touch point, the vector data group is empty, since no motion occurs.

Additionally, each member of a delineation group can be associated with a group of time data. For a point of contact, the time data group can indicate the input duration of the point of contact. For a gesture, the time data group can indicate the input speed of the gesture.

For specific types of drawing, the image signing password can use a specific data storage format to represent a member of the library delineation group. For example, a touchpoint 320 may be represented by a touchpoint library delineation group record 400, as shown in Figure 4a. Furthermore, a gesture may be represented by a general library gesture group record 420, as shown in FIG. 4b. Alternatively, a line gesture 330 may be represented by a line library gesture group record 440, as shown in Figure 4c. A circle gesture 340 may be represented by a circle library gesture group record 460, as shown in Figure 4d.

The library delineation group record may have a user identification (ID) 402 to identify the user

<img file="MX348331B_D0023.tif" />

<img file="MX348331B_D0024.tif" />

IMPI associated with library delineation group delineation group can library. The registry has a user configuration identifier 404 that allows different image signature passwords or different tolerances for different configurations. User settings describe the user's location, such as a home location, work location, or a public location. For example, the image signing password system may cause a user to more strictly recreate the library delineation group if the illusory is accessing the system from a public location as opposed to a home location. The library delineation group record may have an image identifier 406 to identify the digital image that acts as a push to the user.

The library outline group record may have a library outline group member (LDSM) field 408 that identifies a member of the library outline group. The library outline group record may have a field of type 410 that identifies the library outline group member 408 as a touch point 320, line gesture 330, circle gesture 340, or free-style shape gesture 370.

A touch point library delineation group record 400 or a general library gesture group record 420 can have a Library Position Group (LPS) field

<img file="MX348331B_D0025.tif" />

¹⁶

412 associated with the graphical coordinates déF¹®aij ^ J5 * db ^ Hüpü of library delineation. The library position group field 412 may indicate points on a pixel or sensor level. The library position group field 412 may have an associated position tolerance (PT) field 414 that represents a position tolerance value. The position tolerance value indicates how far the user position group associated with a user delineation group can be from the library position group while still considering it to match the library position group.

The library outline group record may be a time data group field 416 associated with the entry rate or entry duration of the library outline group member. For a touchpoint library delineation group record, the time data group field 416 can indicate the duration for which a touchpoint is maintained. For a general library delineation group record 420, the time data group field 416 may indicate the speed at which a gesture was entered. Time data group field 416 may also be used to indicate whether to enter a first delineation group member concurrent with a second delineation group member. For example, a user can hold a 320 touch point while entering a 340 circle gesture.

General library gesture group record 420 can

<img file="MX348331B_D0026.tif" />

have a library vector group (LVS) field 422 associated with the address of the library delineation group member.

The library vector group field 422 may have an associated vector tolerance (VT) field 424 that represents a vector tolerance value. The vector tolerance value indicates how far the user vector group associated with a user delineation group can be from the library vector group while still being considered to match the library vector group. The general library gesture group record 420 can be used to indicate a point of contact 320 by setting the library vector group field 422 to zero.

For a line 330 gesture, a line library gesture group record 440 can store a start point field 442 that indicates the start of the 330 line gesture and an end point field 444 that indicates the end of the gesture. line 330, with intermediate points involved. The start point field 442 may have an associated start point tolerance (SPT) field 446 that represents a start point tolerance value and the end point field 444 may have an end point tolerance field (EPT ) 448 associated that represents an endpoint tolerance value. The start point tolerance value and the end point tolerance value indicate how far the user start point and user end point associated with a user line gesture 330 can be from the library line gesture 330 while it is still considered to match the 330 library line gesture.

<img file="MX348331B_D0027.tif" />

¹⁸

For circle gestures 340, the circle library group register 460 can store an LLIIUJT point 462 rampr that indicates the gesture center of circle 340. The center point field 462 can have a tolerance field center point (EPT) 464 that represents a center point tolerance value. The center point tolerance value indicates how far the user center point associated with a user circle gesture 340 can be from the library circle gesture 340 while still being considered to match the library circle gesture 340. The Circle library gesture group record 460 can store a radius field 466 indicating the radius of the library circle gesture 340. Radius field 466 may have an associated Radius Tolerance (RT) field 468 that represents a radius tolerance value. The radius tolerance value indicates how far the user radius associated with a user circle gesture 340 can be from the library circle gesture 340 while still being considered to match the library circle gesture 340. The circle library gesture group register 460 can store a direction field (DIR) 470 that indicates the direction in which the circle gesture 340 was drawn, such as clockwise or counterclockwise. watch.

Figure 5 illustrates, in a flow chart, one embodiment of an administrative preparation method 400 for an authentication service. The image signing password system can¹⁹ ιμρι ^ 3 administratively set predef ^ i ^ ados ~ parameters that the user can follow when using the dumHUflfeacíori 200 seniciu. The image signing password system can set a minimum library team size for an associated library delineation group with the user (Block 502). The minimum library team size indicates the minimum number of library delineation group members that the user enters to create a viable image signing password. For example, a service administrator can have the user enter at least three unique delineation group members. The image signing password system may establish a minimum level of complexity for a library delineation group associated with the user (Block 504). The minimum complexity level indicates the complexity of the library delineation group. The complexity can be finished by drawing repetition and individual drawing complexity, with a point of contact 320 being the simplest gesture 370 and free-style form being the most complex. For example, the service manager can have the user enter a line gesture 330, a circle gesture 340, and a freestyle shape gesture 370, with minimal pattern type repetition. The image signing password system may set a default position tolerance value to associate with a library delineation group member (Block 506). The image signing password system can set a default vector binding value to associate with a member

<img file="MX348331B_D0028.tif" />

library delineation group (Block 5

The

Figure 6 illustrates, in a fl

<img file="MX348331B_D0029.tif" />

Method 600 to create a library outline group. The image signing password system may receive a user profile from the user (Block 602). The user profile can indicate whether a person is an adult or a child. The image signing password system can receive a digital image from a custom digital image library provided by the user (Block

604). The image signing password system may receive an initial library delineation group entry from the user (Block 606). The image signing password system may receive a confirmation library delineation group entry from the user (Block 608). The user enters the confirmation library delineation group entry to demonstrate the ability to enter a delineation group with some degree of consistency. If the confirmation library delineation group entry does not match the initial library delineation group entry (Block 610), the image signing password system can map a training library delineation group to the user (Block 612). The training library outline group is the initial library outline group entry displayed or "drawn" over the top of the digital image. The image signing password system can present a re-entry request to the user after plotting the delineation group of

<img file="MX348331B_D0030.tif" />

training library (Block 614).

<img file="MX348331B_D0031.tif" />

If your confirmation delineation group entry matches the initial library delineation group entry (Block 610), the image signing password system can create a library delineation group from the library delineation group entry. initial library (Block 616). The image signing password system may associate a library delineation group member with a library location group (Block 618). The image signing password system may associate a library delineation group member with a library vector group (Block 620). The image signing password system can adjust the position tolerance value for the library position group and the vector tolerance value for this can library vector based on the user profile (Block 622). For example, a child can be given greater tolerance than an adult when recreating the outline group as a user outline group.

Figure 7 illustrates, in a flow chart, one embodiment of a method 700 for executing an authentication session. The image signing password system may determine a user configuration, such as determining whether the user is accessing the authentication service 200 from a work location, public location, home location (Block 702). Image signing password system can adjust position tolerance values ​​and vector tolerance values

<img file="MX348331B_D0032.tif" />

<img file="MX348331B_D0033.tif" />

IMPI instituto mlxicano OF LA H * OHEDA £&gt; INWUJTMAL based on user configuration (Block 704). The image signing password can initiate a counter at a zero login attempt (LIA) (Block 706). The image signing password system may present a personalized digital image on a display screen 172 (Block 708). The image signing password system may receive a user delineation group executed by a user on the personalized digital image (Block 710).

The user outline group can include a user touch point, a user circle gesture, a user line gesture, or a user freestyle shape gesture. To increase complexity, the image signing password system can make the user delineation group have at least one user gesture. The user gesture can be a user circle gesture, a user line gesture, or a user frees tyle shape gesture. Even for higher complexity, the image signing password system can receive a user gesture kit executed by a user on a digital image. The user gesture equipment may include a user circle gesture, a user line gesture, or a user freestyle shape gesture.

The image signing password system may trace the user delineation group onto the personalized digital image, to illustrate to the user where the user is drawing (Block 712). If user delineation group matches²³ IMPI • ατπυτ · MiXICAN with a library delineation group associated with ^ 3 @ 3 ^ el &lt;BWM4K (Block 714), then the image signature password system can authenticate access to the user session (Block 716). If the user delineation group does not match a library delineation group associated with the user (Block 714), the login attempt counter is implemented (Block 718). If the login attempt counter is less than the maximum number of attempts allowed (MAXA) (Block 720), the image signing password system may request re-entry of the user delineation group (Block 722). If the login attempt counter exceeds the maximum number of attempts allowed (Block 720), the image signing password system may request a text password (Block 724). If the text password matches the library text password associated with the user (Block 726), then the image signing password system can authenticate access to the user session (Block 716). If the text password does not match the library text password associated with the user (Block 726), then the image signing password system may deny access to the user session (Block 728).

Figure 8 illustrates, in a flow chart, one embodiment of a method 800 for matching a user delineation group to a library delineation group on an individual member base. The image signing password system can start a member ID (M) to zero and a member score

<img file="MX348331B_D0034.tif" />

IMPI tWTTTUTO MEXICANO M LA r * OH £ »AD INtUSTMAl (M Score) to zero (Block 802).

The image signing password system can identify the type of drawing that best matches a user drafting group member to determine which library drafting group member best matches that user drafting group member (Block 804). The image signing password system may associate the user delineation group member with a user position equipment (Block 806). The image signing password system may associate the user delineation group member with a user vector equipment (Block 808). If the user possession equipment is not within the position tolerance value of the library position equipment (Block 810) or the user vector equipment is not within the vector tolerance value of the library vector equipment (Block 812), and the member ID is less than the library team size (M size) (Block 814), the image signing password system increments the member identifier to the next user delineation group member (Block 816). If the member ID is greater than or equal to the library team size (Block 814), the image signing password system determines that no match has occurred (Block 818). If the user position equipment is within the position tolerance value of the library position equipment (Block 810) and the user vector equipment is within the vector tolerance value of the library vector equipment (Block 812) ,

<img file="MX348331B_D0035.tif" />

the signing password system

IMPI

IKJflTUTO MEXICANO DE LA nt * REDAX&gt;. . Image INDUSTRIAL increments member score to indicate that user delineation group ΉΙΰΙΝ'ΒΤδ and library delineation group member match (Block 820).

If the member's score equals a matching score (MS) (Block 822), the image signing password system can determine the matching user delineation group and library delineation group (Block 824). Matching punctuation may not indicate that every number in a user outline group matches, as the image signing password system may determine that the user outline group matches the library drawing with a majority of group members user outline groups that match a majority of library outline group members. That way, for example, if a user actually enters three out of four user outline group members, the user can be given more freedom in the fourth and last user outline group member. The last user delineation group member can be ignored or have the tolerance values ​​for this user delineation group member increased. The image signing password system can measure user accuracy when using the authentication service (Block 826). The image signature password system can adjust the position tolerance value and the vector tolerance value based on the user's precision (Block 828). Of that

IMPI

INSTITUTO MEXICANO Di LA PROPIEDAD INDUSTRIAL form, if a user is consistently displayed to be highly accurate when entering the user's delineation group, the tolerance values ​​for that user may decrease over time to improve security.

Alternatively, an image signing password system may calculate an individual comparison score for a user delineation group member based on proximity to the library delineation group member. The image signing password system can add the individual comparison score for each user delineation group member into an aggregate comparison score. The aggregated comparison score represents the total deviation of the user outline group from the library outline group. If the aggregated comparison score exceeds a maximum limit for deviation, then the image signing password system may determine that the user delineation group matches the library delineation group. That way the image signing password can determine that the user delineation group matches the library delineation group based on an aggregated comparison score for the entire user delineation group, rather than on a member base of individual user delineation group.

Figure 9 illustrates, in a flow chart, one embodiment of a method 900 for matching user drawing equipment with group of

<img file="MX348331B_D0036.tif" />

<img file="MX348331B_D0037.tif" />

library delineation on an aggregate basis. The image signing password system can set a member identifier, an individual comparison score (ICS), and an aggregate comparison score (ACS) to zero (Block 902). The image signing password system may associate a user delineation group member, a user position team (Block 904). The image signing password system may associate a user delineation group member with a user vector equipment (Block 906). The image signature password system may calculate an individual comparison score for the user delineation group member based on vector and position distance of the corresponding library delineation group member (Block 908). The image signing password system can add the individual comparison score to the aggregate comparison score (Block 910). If the member ID is smaller than the library team size (Block 912), the image signing password system would increment the member ID to the next member of the user delineation group (Block 914). If the member identifier is greater than or equal to the library team size (Block 912), the aggregated comparison score is compared to a matching limit (ML) that indicates the maximum allowable limit between the user delineation group and the library delineation group. If the aggregated comparison score is greater than or equal to the matching limit

<img file="MX348331B_D0038.tif" />

(Block 916), the image signing password system can determine the user delineation group and library delineation group that do not match (Block 918). If the aggregate comparison score is less than the matching limit (Block 916), the image signing password system can determine that the user delineation group and the library drawing equipment match (Block 920).

Although the subject has been described in language specific to structural features and / or methodological acts, it should be understood that the subject matter in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are described as illustrative ways to implement the claims.

Modalities within the scope of the present invention may also include non-transient computer-readable storage media for transporting or having computer-executable instructions or data structures stored therein. Such non-transient computer-readable storage media can be any available medium that can be accessed by a general-purpose or special-purpose computer. By way of example, and not limitation, such non-transient computer-readable storage media may comprise RAM, ROM, EEPROM, CD-ROM, or other optical disk storage, magnetic disk storage

<img file="MX348331B_D0039.tif" />

or other magnetic storage devices, or any other medium that can be used to transport or store desired program code media in the form of computer-executable instructions or data structures. Combinations of the above should also be included within the scope of non-transient computer-readable storage media.

The modalities can also be practiced in distributed computing environments where tasks are performed by local and remote processing devices that are linked (either by wired links, wireless links, or a combination thereof) through a network of communications.

Computer-executable instructions include, for example, instructions and data that cause a general-purpose computer, special-purpose computer, or special-purpose processing device to perform a certain function or group of functions. Computer-executable instructions also include data modules that are executed by computers in standalone or networked environments. Generally, program modules include routines, programs, objects, components, and data structures, etc. that perform particular tasks or implement particular abstract data types. Computer executable instructions, associated data structures, and program modules represent examples of the means of program code for executing steps of the methods described herein. The particular sequence of such instructions³⁰ IMPI ^

USTTFUTO MEXICANO fT—

OF THE CURRENCY »CnmAA executables or associated data structures repres ^ nT ^ axisVrrpTs corresponding data to implement IcTg · furiU'IUIIHü Utíyuiltys in such steps.

Although the above description may contain specific details, they should not be construed as limiting the claims in any way. Other configurations of the described modes are part of the scope of the description. For example, the principles of the description can be applied to each individual user where each user can individually deploy such a system. This allows each user to use the benefits of the description even if any one of a large number of possible applications does not use the functionality described here. Multiple instances of each of the electronic devices can process the content in various possible ways. The implementations are not necessarily on a system used by all end users. Accordingly, the appended claims and their legal equivalents should only define the invention, rather than any of the specific examples given.

<img file="MX348331B_D0040.tif" />

IMPI rn uto Mexican

OCLA CURRENCY IMOUSTREAE