WO2002044872A3 - Anti-spoofing password protection - Google Patents

Anti-spoofing password protection Download PDF

Info

Publication number
WO2002044872A3
WO2002044872A3 PCT/US2001/043476 US0143476W WO0244872A3 WO 2002044872 A3 WO2002044872 A3 WO 2002044872A3 US 0143476 W US0143476 W US 0143476W WO 0244872 A3 WO0244872 A3 WO 0244872A3
Authority
WO
WIPO (PCT)
Prior art keywords
password
user
input
applications
prevents
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2001/043476
Other languages
French (fr)
Other versions
WO2002044872A2 (en
Inventor
Paul W Dent
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Ericsson Inc
Original Assignee
Ericsson Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ericsson Inc filed Critical Ericsson Inc
Priority to KR10-2003-7007283A priority Critical patent/KR20030057565A/en
Priority to EP01998202A priority patent/EP1377891A2/en
Priority to AU2002217791A priority patent/AU2002217791A1/en
Publication of WO2002044872A2 publication Critical patent/WO2002044872A2/en
Anticipated expiration legal-status Critical
Publication of WO2002044872A3 publication Critical patent/WO2002044872A3/en
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F1/00—Details not covered by groups G06F3/00 - G06F13/00 and G06F21/00
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Storage Device Security (AREA)

Abstract

A system and method to prevent the inadvertent disclosure of a password. A valid password input request results in a password entry screen being displayed to a user that includes authentication indicia known to the user. Failure to see the authentication indicia causes the user to know that the request is a spoof. The invention may further include a method and system of limiting the applications that operate after a password input request is received. Only the applications necessary for inputting the password operate, as the other applications are set as inoperable until the password has been input. This prevents a remote source from obtaining the password has been input. This prevents a remote source from obtaining the password through fraudulent means such as a screen capture or trojan horse program.
PCT/US2001/043476 2000-11-30 2001-11-21 Anti-spoofing password protection Ceased WO2002044872A2 (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
KR10-2003-7007283A KR20030057565A (en) 2000-11-30 2001-11-21 Anti-spoofing password protection
EP01998202A EP1377891A2 (en) 2000-11-30 2001-11-21 Anti-spoofing password protection
AU2002217791A AU2002217791A1 (en) 2000-11-30 2001-11-21 Anti-spoofing password protection

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US09/727,062 2000-11-30
US09/727,062 US20020066039A1 (en) 2000-11-30 2000-11-30 Anti-spoofing password protection

Publications (2)

Publication Number Publication Date
WO2002044872A2 WO2002044872A2 (en) 2002-06-06
WO2002044872A3 true WO2002044872A3 (en) 2003-11-06

Family

ID=24921177

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2001/043476 Ceased WO2002044872A2 (en) 2000-11-30 2001-11-21 Anti-spoofing password protection

Country Status (5)

Country Link
US (1) US20020066039A1 (en)
EP (1) EP1377891A2 (en)
KR (1) KR20030057565A (en)
AU (1) AU2002217791A1 (en)
WO (1) WO2002044872A2 (en)

Families Citing this family (53)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CA2370934C (en) 2001-02-23 2004-06-22 Navaho Networks Inc. Secure electronic commerce
US8347104B2 (en) * 2001-12-26 2013-01-01 Research In Motion Limited Security interface for a mobile device
US7136490B2 (en) * 2002-02-21 2006-11-14 International Business Machines Corporation Electronic password wallet
WO2003090052A2 (en) * 2002-04-18 2003-10-30 Advanced Micro Devices Inc. A computer system including a secure execution mode - capable cpu and a security services processor connected via a secure communication path
US7966492B1 (en) 2002-05-10 2011-06-21 Emc Corporation System and method for allowing an e-mail message recipient to authenticate the message
US7730321B2 (en) * 2003-05-09 2010-06-01 Emc Corporation System and method for authentication of users and communications received from computer systems
US7562222B2 (en) 2002-05-10 2009-07-14 Rsa Security Inc. System and method for authenticating entities to users
US20040078422A1 (en) * 2002-10-17 2004-04-22 Toomey Christopher Newell Detecting and blocking spoofed Web login pages
AU2005283167B8 (en) * 2004-02-04 2009-11-26 Rsa Security Inc. Method and apparatus for authentication of users and communications received from computer systems
JP4475634B2 (en) * 2004-03-26 2010-06-09 キヤノン株式会社 Information processing apparatus and method
US20050289353A1 (en) * 2004-06-24 2005-12-29 Mikael Dahlke Non-intrusive trusted user interface
EP1779248A4 (en) 2004-07-30 2008-02-27 Research In Motion Ltd Method and system for coordinating client and host security modules
US7784088B2 (en) * 2004-07-30 2010-08-24 Research In Motion Limited Method and system for managing delayed user authentication
US8914309B2 (en) * 2004-08-20 2014-12-16 Ebay Inc. Method and system for tracking fraudulent activity
FR2877171B1 (en) * 2004-10-22 2006-12-29 Credit Lyonnais Sa METHOD FOR SECURING REMOTE TRANSACTIONS OVER AN OPEN COMMUNICATION NETWORK
US7437767B2 (en) * 2004-11-04 2008-10-14 International Business Machines Corporation Method for enabling a trusted dialog for collection of sensitive data
WO2006062838A1 (en) * 2004-12-04 2006-06-15 Indiana University Research And Technology Corporation Anti-phising logon authentication object oriented system and method
CN100349159C (en) * 2005-01-18 2007-11-14 北京北大方正电子有限公司 Method for attaching label in page rasterizing
KR100699942B1 (en) * 2005-02-28 2007-03-26 한상섭 Unmanned automatic spreader
EP1882229B1 (en) * 2005-04-27 2014-07-23 Privasys, Inc. Electronic cards and methods for making same
WO2006130619A2 (en) * 2005-05-31 2006-12-07 Tricipher, Inc. Secure login using augmented single factor split key asymmetric cryptography
US7831915B2 (en) * 2005-11-10 2010-11-09 Microsoft Corporation Dynamically protecting against web resources associated with undesirable activities
US8353029B2 (en) 2005-11-10 2013-01-08 Microsoft Corporation On demand protection against web resources associated with undesirable activities
US8825728B2 (en) * 2006-06-15 2014-09-02 Microsoft Corporation Entering confidential information on an untrusted machine
US20070300080A1 (en) * 2006-06-22 2007-12-27 Research In Motion Limited Two-Factor Content Protection
US7832004B2 (en) * 2006-08-10 2010-11-09 Microsoft Corporation Secure privilege elevation by way of secure desktop on computing device
US20080172750A1 (en) * 2007-01-16 2008-07-17 Keithley Craig J Self validation of user authentication requests
US9596250B2 (en) * 2009-04-22 2017-03-14 Trusted Knight Corporation System and method for protecting against point of sale malware using memory scraping
US20090281949A1 (en) * 2008-05-12 2009-11-12 Appsware Wireless, Llc Method and system for securing a payment transaction
KR101040381B1 (en) * 2009-01-23 2011-06-10 한국도로공사 Snow removal device that can spray snow removal material using central separator
US20100250441A1 (en) * 2009-03-30 2010-09-30 Appsware Wireless, Llc Method and system for securing a payment transaction with trusted code base on a removable system module
US20100250442A1 (en) * 2009-03-30 2010-09-30 Appsware Wireless, Llc Method and system for securing a payment transaction with a trusted code base
US20110307695A1 (en) * 2010-06-14 2011-12-15 Salesforce.Com, Inc. Methods and systems for providing a secure online feed in a multi-tenant database environment
US9547861B2 (en) 2011-05-11 2017-01-17 Mark Itwaru System and method for wireless communication with an IC chip for submission of pin data
US8616453B2 (en) 2012-02-15 2013-12-31 Mark Itwaru System and method for processing funds transfer between entities based on received optical machine readable image information
US9734498B2 (en) 2011-05-11 2017-08-15 Riavera Corp Mobile image payment system using short codes
US9715704B2 (en) 2011-05-11 2017-07-25 Riavera Corp Merchant ordering system using optical machine readable image representation of invoice information
US9721243B2 (en) 2011-05-11 2017-08-01 Riavera Corp. Mobile payment system using subaccounts of account holder
US10223674B2 (en) 2011-05-11 2019-03-05 Riavera Corp. Customized transaction flow for multiple transaction types using encoded image representation of transaction information
MX2013013166A (en) 2011-05-11 2014-09-01 Mark Itwaru DIVIDED MOBILE PAYMENT SYSTEM.
US9785935B2 (en) 2011-05-11 2017-10-10 Riavera Corp. Split mobile payment system
US9588595B2 (en) * 2011-09-12 2017-03-07 Microsoft Technology Licensing, Llc Password reveal selector
US9069973B2 (en) * 2012-03-30 2015-06-30 Aetherpal Inc. Password protect feature for application in mobile device during a remote session
US20140304649A1 (en) * 2012-04-16 2014-10-09 Vinay Phegade Trusted user interaction
CN104205144A (en) * 2012-04-17 2014-12-10 英特尔公司 Trusted service interaction
US10185957B2 (en) 2012-06-12 2019-01-22 Square, Inc. Software pin entry
EP2706769A1 (en) * 2012-08-01 2014-03-12 Secunet Security Networks Aktiengesellschaft Method and apparatus for secure access to a service
CN103440442A (en) * 2013-08-28 2013-12-11 苏凯 Anti-theft password card and corresponding password management method
US9613356B2 (en) 2013-09-30 2017-04-04 Square, Inc. Secure passcode entry user interface
US9928501B1 (en) 2013-10-09 2018-03-27 Square, Inc. Secure passcode entry docking station
CN105260681B (en) * 2015-11-23 2019-03-22 Oppo广东移动通信有限公司 Password protection method and device
US12602457B2 (en) * 2023-06-30 2026-04-14 International Business Machines Corporation Preventing accidental password disclosure
US20250245316A1 (en) * 2024-01-25 2025-07-31 International Business Machines Corporation Reducing system attack surface by selectively restricting functionality

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4479112A (en) * 1980-05-05 1984-10-23 Secure Keyboards Limited Secure input system
EP0443423A2 (en) * 1990-02-13 1991-08-28 Digital Equipment Corporation Method for executing trust-path commands
US5664099A (en) * 1995-12-28 1997-09-02 Lotus Development Corporation Method and apparatus for establishing a protected channel between a user and a computer system
EP1046976A2 (en) * 1999-04-20 2000-10-25 Sun Microsystems, Inc. Method and apparatus for enabling a user to authenticate a system prior to providing any user-privileged information

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5465084A (en) * 1990-03-27 1995-11-07 Cottrell; Stephen R. Method to provide security for a computer and a device therefor
US5652890A (en) * 1991-05-17 1997-07-29 Vantus Technologies, Inc. Interrupt for a protected mode microprocessor which facilitates transparent entry to and exit from suspend mode
DE4142964C2 (en) * 1991-12-24 2003-05-08 Gao Ges Automation Org Data exchange system with verification of the device for authentication status
AU671986B2 (en) * 1992-03-30 1996-09-19 Telstra Corporation Limited A cryptographic communications method and system
DE69332889T2 (en) * 1992-10-26 2004-03-04 Intellect Australia Pty. Ltd. HOST USER TRANSACTION SYSTEM
US6006328A (en) * 1995-07-14 1999-12-21 Christopher N. Drake Computer software authentication, protection, and security system
US6510520B1 (en) * 1998-06-26 2003-01-21 Fotonation, Inc. Secure storage device for transfer of digital camera data
US6106460A (en) * 1998-03-26 2000-08-22 Scimed Life Systems, Inc. Interface for controlling the display of images of diagnostic or therapeutic instruments in interior body regions and related data
US6598032B1 (en) * 2000-03-10 2003-07-22 International Business Machines Corporation Systems and method for hiding from a computer system entry of a personal identification number (pin) to a smart card
US6769062B1 (en) * 2000-10-25 2004-07-27 Ericsson Inc. Method and system of using an insecure crypto-accelerator

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4479112A (en) * 1980-05-05 1984-10-23 Secure Keyboards Limited Secure input system
EP0443423A2 (en) * 1990-02-13 1991-08-28 Digital Equipment Corporation Method for executing trust-path commands
US5664099A (en) * 1995-12-28 1997-09-02 Lotus Development Corporation Method and apparatus for establishing a protected channel between a user and a computer system
EP1046976A2 (en) * 1999-04-20 2000-10-25 Sun Microsystems, Inc. Method and apparatus for enabling a user to authenticate a system prior to providing any user-privileged information

Also Published As

Publication number Publication date
AU2002217791A1 (en) 2002-06-11
US20020066039A1 (en) 2002-05-30
EP1377891A2 (en) 2004-01-07
KR20030057565A (en) 2003-07-04
WO2002044872A2 (en) 2002-06-06

Similar Documents

Publication Publication Date Title
KR100884376B1 (en) Disposable password system and method using interrogator
ES2265466T3 (en) DOWNLOAD DATA.
TWI268688B (en) System and method for acoustic two factor authentication
AU2002338954A1 (en) Secure electronic voting method and the cryptographic protocols and computer programs used
CN102415103A (en) CATV Security Communication System for One-way Restricted Access
GB0600609D0 (en) An anti-phising system
TWI365654B (en) Method and system for verifying binding of an initial trusted device to a secured processing system
WO2002065697A3 (en) Apparatus and method for authenticating access to a network resource
WO2006015145A3 (en) Methods and apparatus for rfid device authentication
FR2821225B1 (en) REMOTE ELECTRONIC PAYMENT SYSTEM
EP1043862A3 (en) Generation of repeatable cryptographic key based on varying parameters
WO2004114048A3 (en) An apparatus, system, method and computer program product for implementing remote client integrity verification
CN1446015A (en) Systme for preventing altering electronic memory
SG127734A1 (en) Consumables validation chip
WO2007005919A3 (en) System and method for security in global computer transactions that enable reverse-authentication of a server by a client
EP2224368A3 (en) An electronic data vault providing biometrically protected electronic signatures
BR0315078A (en) Tamper-resistant security device, user terminal, and network server
WO2008105779A3 (en) Secure id checking
CN109598104A (en) Soft ware authorization based on timestamp and secret authentication file protects system and method
EP1445917A3 (en) Identification system for admission into protected area by means of an additional password
DE60042786D1 (en) TECHNOLOGY FOR THE SAFE REMOTE CONFIGURATION OF A SYSTEM
EP1841181A3 (en) Methods, apparatus and computer program for remote authorization of secure operations via an access key
WO2003093923A3 (en) System and apparatus for authenticating to a system or network
FR2800220B1 (en) SECURE ELECTRONIC TRANSACTION PROCESS
CN107743179B (en) Information processing method, mobile terminal and operating system

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ OM PH PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG US UZ VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
121 Ep: the epo has been informed by wipo that ep was designated in this application
WWE Wipo information: entry into national phase

Ref document number: 1020037007283

Country of ref document: KR

WWE Wipo information: entry into national phase

Ref document number: 2001998202

Country of ref document: EP

WWP Wipo information: published in national office

Ref document number: 1020037007283

Country of ref document: KR

REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

WWP Wipo information: published in national office

Ref document number: 2001998202

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: JP

WWW Wipo information: withdrawn in national office

Country of ref document: JP