Virtual keyboard

DESCRIPTION

VIRTUAL KEYBOARD

Field of the Invention

The invention in particular use the same keyboards.

belongs to terminal machines. Another invention relates to terminal machines, which on the screen and a method of using the

Background of the Invention

Due to the increasing predominance of computers in everyday life, it is evident that in the near future the business will be traded mostly on the electronic superhighway or on the Internet. The convenience of shopping on the Internet and the use of e-commerce has begun to penetrate our lives. Credit card transactions and product orders on the Internet are now commonplace. However, associated with this newfound convenience, system security, user ID, and user ID validation remain the primary and legitimate concerns for users of current systems.

Automatic teller machines (ATMs) and Internet banking enable a bank's customers to conduct bank transactions with financial institutions from remote locations anywhere in the world. A bank's customers access their accounts through various technologies (including ATM and Online Banking terminals) for the purpose of doing business and obtaining exclusive information about their accounts. As a security measure, the financial institution assigns each bank customer a personal identification number or PIN. The bank customer enters the PIN on a numeric keypad operably connected to a card reader or other device that reads magnetically encoded user identification information on the ATM check or card, credit card or the like. Then, the PIN and user information are communicated to the financial institution's network, which then verifies the accuracy of the information. After verifying bank customer PIN information and user information, the bank customer is allowed to conduct business with the financial institution.

In the current market, four requirements are paramount in granting access to a protected resource to an authorized user: (1) authorized user identification, (2) verification of authorized user identification, (3) rejection of unauthorized user access, and (4) an appropriate level of security to protect the resource from unauthorized use. For example, when a user (authorized or unauthorized) wishes to withdraw money from an ATM, a card issued by the bank is inserted into the ATM identified by the magnetically transferred data or an electronic integrated circuit within the card to a database system. To verify that the user is the authorized user of the card issued by the bank inserted in the ATM, ATM asks the user to enter a Personal Identification Number (PIN), which is only available to the card and is from a user band authorized by the bank. bank card managing authority. If the PIN entered by the user is identical to the PIN made available to the authorized user and also stored in the database system memory, the user is considered as the authorized user and allowed to continue the transaction. The security provided by this transaction involves the user's possession of the bank issued card, knowledge of the PIN code, an upper withdrawal limit and card deactivation if a consecutive series of incorrect PINs are entered into the ATM system. Theoretically, this security system is adequate to prevent an unauthorized user from being able to access an account, but unfortunately protecting resources from unauthorized access has become a $ 1 billion problem. The solution to this problem lies in understanding the weaknesses of current systems and how to effectively eliminate these weaknesses while maintaining simplicity, safety and efficiency.

As the PIN security system becomes the norm for an authorized user to verify either the card-based system or the non-card-based system, authorized users are required to memorize a plurality of PIN codes in order to gain access. to protected resources and services. This problem of excessive memorization has been solved at user level by writing down PIN codes and carrying a copy in your wallet or suitcase for easy reference. However, this is a direct compromise with the security perspective provided by the PIN system, and can result in easy, unauthorized access to related accounts if your wallet or bag is stolen. 0 The memorization issue has been resolved at the managing authority level by allowing the use of custom PINs, for example various PINs, fully dynamic PINs, and other overlapping security measures. In this way an authorized user can eliminate the memorization of a multitude of PIN codes by making all PIN codes identical. In other words, custom PINs allow an authorized user to use a single PIN code for all their protected features, and additionally one PIN of their choice. However, if the personalized PIN is easy to guess, such as the authorized user's date of birth or telephone number, an informed unauthorized user can gain access to all protected resources with a single smart guess. Today, the biggest disadvantage of custom PINs is the requirement for identical code sizes with constant and invariant characters, usually digits. If, by observing an authorized user's PIN, unauthorized use of a feature is obtained, that unauthorized user instantly obtains access to all features protected by said custom PINs. In this way, custom PINs diminish the authorized user's personal security due to the possible occurrence associated with unlawfully obtaining possession of the user's wallet or bag and subsequent access to all resources protected by custom PINs. Gaining access to the Internet and e-commerce environments with an enhanced level of security has changed the passcode requirements for code size and the alphanumeric mix of code characters. Since many websites now require access codes of eight or more characters with a minimum of two digits, or.

instead, it offers a code of your choice of varying sizes, custom PINs only solve the problem of PIN over-memory for a short time.

There are numerous well-known methods for protecting the privacy of a bank customer's PIN. For example, in addition to fixed numeric keypads, advances in graphical user interface (GUI) technology allow a bank customer to enter their PIN on a numeric keypad or touchscreen. A bank customer is able to shield a potential scammer from appropriating the PIN. Typically, terminal keyboards, which are known in the art, are always displayed on terminals in the same position and with keys in the same arrangement. As a result, a scammer can see a customer's movements made by a bank while writing the PIN and thus recognizes dialed numbers as the keys and numbers are always displayed in the same position on the ATM terminal screen.

In addition, some con artists use the trick of cleaning up the ATM terminal touch screen before a bank customer uses it. Such a device allows the identification of a user's PIN through their fingerprints, which, once written, remain printed on the touchscreen. After the user leaves the ATM, the scammer checks the fingerprints, discovering the numbers pressed by the user, as the keys and numbers are always displayed in the same position on the ATM terminal.

The virtual keyboard of the present invention solves this and other limitations of the prior art by using a virtual keyboard that provides an image of a compact keyboard on an ATM terminal screen for the purpose of preventing fraud after writing the security password as described. in the previous paragraphs.

The available prior art reference documents do not describe, or even suggest, the solution to a fraud-proof keyboard such as the present invention.

WO 98/27518 A describes a fraud-proof keyboard for an appropriate automated banking terminal to prevent keys pressed on the keyboard by the person using the terminal during banking from being detected and used to discover personal identification code or other confidential user data. 0 The keypad comprises means that automatically and randomly vary between two successive banking operations, the number and / or symbol associated with each key.

DE 4129202 A1 describes a protection circuit for a personally identifiable numeric keypad which uses a number of keys for entering the PIN value, wherein the indicated values ​​vary in a pseudorandom manner.

The keyboards of both WO 98/27518 and DE 4129202 A1 teach that in any new user access to the electronic terminal, the location of each number relative to each key will be different. Such a solution does not prevent an observer from identifying the digits of the user's access code when observing the keypad from a sufficiently close position to be able to see the characters displayed on it.

WO 02/101531 A describes a keypad for a pocket electronic device comprising a row of keys, each of said keys representing at least two alphanumeric characters and the characters of each key being positioned relative to the characters on adjacent keys. , to form a QWERTY or DVORAK configuration.

In WO 02/101531 A, more than one value is assigned to each keyboard key. The objectives of such an assignment are to minimize production costs and facilitate typing. According to this document, the configuration and the characters associated with each key remain constant. Thus, an observer only needs to identify the sequence of keys pressed by the user to know the user's access code to electronic services.

With this keypad setup, it is not necessary to know the numbers that make up the user's access code, but only the keystroke pressed by the user to gain access to the user's electronic services.

EP 0844778 A describes a radiotelephone comprising a user interface and a controller unit connected to the user interface, the user interface comprising a screen and a keyboard having at least one operation key whose function is controlled by the user. controller button and is displayed in a predetermined area of ​​the screen. The radiotelephone is capable of assuming a plurality of states in which a predetermined group of actions associated with the state in question may be performed by said at least one operation key. The controller unit displays an action of said action group as a default function in the predetermined screen area.

EP 0844778 A describes a smart key whose functionality varies according to the state of the radiotelephone. Consequently, the result from pressing the key while the phone is in a call is different from the result from, for example, pressing the key while the phone is idle.

However, for a given phone state, the functionality associated with the keypad key remains unchanged. Since there is only one feature associated with each key, an observer watching the keyboard at a sufficiently close position is able to identify the value associated with the key pressed by the user.

Summary of the Invention

According to one embodiment of the invention, a method has been provided for providing access to electronic services via a secure access code. The method comprises the step of providing a keypad comprising a predetermined number of keys which are used to enter a secure access code, the method further comprising the following steps: associating at least two variables with each key where the value of one or more of said variables may change from one access to another; present the variables to the user; select by the user each key corresponding to each variable of his access code; compare the values ​​associated with each selected key with a code stored in a database; and allowing the user to access electronic services if the values ​​associated with the keys as selected by the user in a sequential manner match the stored access code. 0 The keyboard of the present invention can be either virtual, viewed through a graphical user interface, or physical.

According to another embodiment of the invention there is provided a keypad comprising a predetermined number of keys for entering an access code; characterized in that at least two variables are associated with each key, wherein the user selects keys based on the variables corresponding to some part of the user's access code, the variables being capable of switching from one access to another. 0 The keyboard can be either virtual, viewed through a graphical user interface, or physical.

According to another embodiment of the invention, there is provided a secure access terminal for providing access to electronic services via a secure access code, the terminal comprising a graphical user interface which allows a user to access information. secure electronics, and a keyboard, characterized in that each keyboard key has at least two variables associated with it; and because the variables are assigned from a group of possible combinations of variables and these variables are associated with each key, so that the user gets the right to perform certain transactions by selecting keys, which have assigned variables that match to a secret code.

Brief Description of Drawings

In the accompanying drawings which form part of the document and are to be read in conjunction therewith, the present invention is illustrated by way of example and is not limited thereto, with like reference numerals referring to like elements, wherein:

Figure 1 illustrates an example of a virtual keyboard, according to an embodiment of the invention;

Figure 2 illustrates another example of a virtual keyboard according to an embodiment of the invention;

Figure 3 illustrates yet another example of a virtual keyboard according to one embodiment of the invention;

Figure 4 is another illustration of a virtual keyboard in accordance with an embodiment of the invention;

Figure 5 is another embodiment of a virtual keyboard according to an embodiment of the invention;

<td>Figure 6</td><td>illustrates a</td><td>flow chart</td><td colspan="2">of a method</td>

<td>exemplary</td><td>according</td><td>a form</td><td>of achievement</td><td>gives</td>

<td>invention; and</td><td></td><td></td><td></td><td></td>

<td>Figure 6 (a) is</td><td>an illustration</td><td>from the list</td><td>of characters,</td><td>in</td>

according to one embodiment of the invention.

Detailed Description of the Invention

In the following detailed description, numerous specific details are given in order to provide a complete understanding of the invention. However, it will be apparent to one skilled in the art that these specific details need not be used to practice the invention. In other examples, well-known structures, interfaces, and processes have not been shown in detail so as not to unnecessarily minimize the invention.

The method of the present invention, which may be implemented by software, is to create a virtual keyboard, as illustrated preferably in Figures 1 to 6, at an ATM terminal or any other computer terminal, for example a computer. person or a laptop.

Fig. 1 illustrates a virtual keyboard 100 according to an embodiment of the invention. The virtual keyboard 100 provides five keys 105-125, however, one skilled in the art can easily understand that the figure is not intended to limit the scope of the invention and that any number of keys may be used. Associated with each key 105-125 on the virtual keyboard 100 is a number of alphanumeric characters which are displayed in relative proximity between each key 105-125. These characters are preferably numbers as illustrated in the figure, but one skilled in the art may understand that these may also be combinations of letters, numbers or symbols. Also, one skilled in the art can understand that while the figure illustrates two characters associated with each key, this is not intended to limit the invention but is for illustrative purposes only.

As shown in Figure 1, alphanumeric characters 7 and 4 are assigned to the first key 105, alphanumeric characters 2 and 9 are assigned to the second key 110, alphanumeric characters 1 and 3 are assigned to the third key 115, alphanumeric characters 6 and 5 are assigned to the fourth key 120 and alphanumeric characters 8 and 0 are assigned to the fifth key 125. Accordingly, in order to enter the password (e.g. 723604), the user presses the first key 105 through the fifth key 125, and presses the first key 105. The skilled artisan may appreciate that there may be various value permutations. based on the keys pressed.

As illustrated in the figure, there is more than one number assigned to each key. Thus, when a user presses the keys, which are associated with password elements, there is a process for determining which of the possible values ​​entered is the correct password. For example, if the user presses the keys to enter 723604, numerous possible password combinations appear (eg, 491587). The system determines the possible password either by using the stored password or by an encrypted password. For example, consider that a user's secret password is 723604, and the keyboard is configured as shown in Fig. 1. If the password is stored on a central computer, then a comparison is made between the password stored password and the values ​​entered by the user. The system knows that the user has pressed the first key indicating that either 7 or 4 is the first value of the password. The value 7 and then the value 4 are compared to the stored password and the value corresponding to the password is retained. A decision is made for each digit of the password, thereby resolving the distinction between possible different passwords. If there is no match, then an incorrect password has been entered and the user is notified. Another technique involves the possibility of a central computer not having access to the password. When you open an account with a financial institution, they choose a password that is encrypted and the encrypted password value is stored by the financial institution. When you press the keys, which are associated with the password, the system tests all possible character combinations using the same encryption method (for example, Triple DES) and compares the results of the encrypted value stored with the combinations. of encrypted values.

These alphanumeric characters can be displayed around each key to make it easier to see them, however, the skilled artisan can select other key positions, for example, being represented within each key 105-. 125 virtual ones.

According to the invention, the system includes multiple keys and various characters assigned to the keys. These features allow a user to have multiple layers of protection against observers or other types of fraud. For example, with several characters assigned to each key, the number of combinations, which must be observed, is considerable.

If a user types each key during the process of entering his PIN number, then the observer must determine which number the customer wants to enter, but also the correct sequence of buttons, since the combination of numbers by The key will be changed when the scammer accesses the terminal twice. Thus, the invention provides protection against fraudulent activity.

When a user uses the electronic terminal, the virtual keyboard 100 is displayed on a touch screen (not shown). One skilled in the art will recognize that there are numerous methods of displaying information to a user and that the type of screen is not intended to limit the invention.

The user identifies the generated characters, which are assigned to each of the five keys, and presses the keys that correspond to the PIN values ​​to gain access to electronic transactions.

Together, keys 105-125 and associated characters are referred to as a screen. The screen may vary from user to user or after a predetermined period of time. A screen may be assigned to a user for certain periods of time. The skilled artisan can appreciate the various types of scenarios that may be proposed. The only variable on each screen is the character values ​​assigned to each key. As shown in Figs. 1 and 2, the only difference between the figures is the values ​​assigned to each key. Each screen has a total of ten characters assigned to the keys. A central computer in a financial institution can store all possible ten-character combinations that do not have repeated characters (for example, not having two 3's, as this would cause a lot of confusion between users and password decryption). An example of value combinations is illustrated in Fig. 6th (The) . After a card assigned by a bank to a user has been authenticated, a screen appears.

<td colspan="2">assigned to that user predetermined.</td><td>for one</td><td>period</td><td>of time</td>

<td>Typically,</td><td>when a new</td><td>user</td><td>uses</td><td>the terminal</td>

<td>a new screen</td><td>with a new</td><td>combination</td><td colspan="2">of characters is</td>

<td>displayed, the</td><td>virtual keys</td><td colspan="2">always remain</td><td>in the same</td>

position. Fig. 2 illustrates a new virtual keyboard 200 with a new character combination according to an embodiment of the invention. Virtual keyboard 200 provides five keys 205 - 225, however, the skilled artisan can readily appreciate that the figure is not intended to limit the scope of the invention and that any number of keys may be used.

As will be shown in Figures 3 and 4, the arrangement of the virtual keyboard keys 200 on a touchscreen may not be rigid. The keyboard 200 can be customized to the preferences of most users. As illustrated, the only difference between figure 1 and figure 2 is the character combination assigned to each of the five keys. For example, in figure 1, the virtual keys 105-125, which show a one-hand figure following the text you press here, are displayed in the same position, however, the numbers displayed around each of the virtual keys vary from one to another. user to user as illustrated in Figure 2, where the key layout is the same but the number combination is different. Accordingly, Figures 1 and 2 show examples of virtual keyboards that can be viewed by two distinct users.

Figure 3 illustrates a virtual keyboard 300, according to an embodiment of the invention. Virtual keyboard 300 provides five keys 305-325, however, one skilled in the art may readily appreciate that the figure is not intended to limit the scope of the invention and that any number of keys may be used. Associated with each key 305-325 on keyboard 300 are pairs of characters, which are displayed around or within each key 305-325. These characters are preferably numbers, as illustrated in the figure, the skilled artisan may appreciate that they may also be combinations of letters or letters and numbers. As shown in the figure, keys 305-325 are displayed in a horizontal configuration across the screen.

Figure 4 also illustrates a horizontal configuration of the keyboard 400. However, figure 4 illustrates a keyboard 400 in which the characters assigned to each key 405-425 have been configured to be displayed to a new user.

Figure 5 illustrates an alternative embodiment of the invention. The figure illustrates a keyboard 500 which has the keys off the screen. The screen illustrates several characters, which represent elements of a personal identification number (PIN) and a box, which shows the selected characters. The keys are arranged in a line such that they are associated with multiple characters. For example the first key (at the top left) is associated with the characters A, C and D. The characters A, C and D are shown on the screen. The screen illustrates the characters and a box that should indicate the number of characters that have been pressed. A user must select the button that corresponds to the PIN element and either the number or character should appear in the box.

Figure 6 illustrates a flowchart of a secure terminal access method 600 according to an embodiment of the invention. At step 605, a user approaches the terminal, decides to perform at least one bank transaction through the terminal and inserts a bank-assigned card into the terminal machine.

At step 610, the terminal reads the card information assigned by the bank and transmits it to the bank computer (not shown). Typically, information is encrypted according to a well known encryption method. The bank computer determines that the user who is associated with the bank card is using a terminal machine

At step 615, the system determines which numeric keypad will be displayed to the user. Because the user selects a key, which is at least two characters long, there are a number of values ​​that can be associated with each key. For example, there are two characters associated with each key (as shown in Fig. 1). The computer stores predetermined character lists so that no individual number is assigned twice to the same key. Each screen contains two columns of numbers between 0-9. There are 945 possible screen combinations.

In step 620, the bank computer selects a random screen and displays the screen to the user, similar to Figs. 1 and 2 .

In step 625, the user enters the secret password. The user presses the keys, which have numbers associated with the secret passwords.

At step 630, the terminal machine encrypts the data associated with the secret password and transmits it to the bank computer. The data is encrypted in a manner known to the person skilled in the art.

At step 635, the bank computer verifies the secret password information and allows the user to perform predetermined bank transactions with the bank.