| US 7,484,173 B2 | ||
| Alternative key pad layout for enhanced security | ||
| Jie Jenie Gao, Sugar Land, Tex. (US); Charles Ray Johns, Austin, Tex. (US); and Michael Fan Wang, Austin, Tex. (US) | ||
| Assigned to International Business Machines Corporation, Armonk, N.Y. (US) | ||
| Filed on Oct. 18, 2005, as Appl. No. 11/252,513. | ||
| Prior Publication US 2007/0089164 A1, Apr. 19, 2007 | ||
| Int. Cl. G06F 15/00 (2006.01); G06F 17/00 (2006.01) | ||
| U.S. Cl. 715—741 [715/773] | 1 Claim |

| 1. A computer-implemented method comprising:
receiving a request from a user, wherein the user previously configured a predetermined alternate keypad arrangement that
determines where a plurality of virtual keys are are placed on a virtual keyboard layout, wherein each of the virtual keys
is assigned a visual label, and wherein the user previously registered one or more values that correspond with one or more
of the virtual keys, wherein at least one of the registered values corresponding to one of the virtual keys is not equal to
the visible label assigned to the virtual key;
retrieving, in response to the request, the predetermined alternate keypad arrangement that corresponds to the user and the
user-registered values that correspond to one or more of the virtual keys, wherein the alternate keypad arrangement includes
the visual labels placed on the virtual keys that are included in the virtual keyboard layout;
displaying the retrieved predetermined alternate keypad arrangement that includes the plurality of virtual keys and their
respective visual labels on a display screen;
selecting, by the user, a plurality of the displayed virtual keys;
generating an authentication data based on the values registered for each of the displayed virtual keys selected by the user,
wherein one or more of the registered values are not equal to the visual label displayed on the corresponding virtual key
selected by the user;
retrieving account information corresponding to the user, the account information including a stored authentication data;
comparing the generated authentication data with the stored authentication data;
authorizing the request in response to the received authentication data matching the stored authentication data; and
denying the request in response to the received authentication data not matching the stored authentication data.
|