Increasing entropy for password and key generation on a mobile device

摘要

Methods, apparatus and articles of manufacture for increasing entropy for password and key generation on a mobile device are provided herein. A method includes establishing a pre-determined set of cryptographic information, wherein said pre-determined set of cryptographic information comprises one or more input elements and one or more interface input behavior metrics associated with the one or more input elements; generating a prompt via a computing device interface in connection with an authentication request to access a protected resource associated with the computing device; processing input cryptographic information entered via the computing device interface in response to the prompt against the pre-determined set of cryptographic information; and resolving the authentication request based on said processing.

主权项

1. A method comprising:
establishing a pre-determined set of cryptographic information for a computing device, wherein said pre-determined set of cryptographic information comprises two or more input elements and one or more interface input behavior metrics associated with the two or more input elements, wherein the two or more input elements are selected by a user of the computing device, in a given sequence, from a collection of multiple items of non-alpha-numeric data stored on the computing device, and wherein said one or more interface input behavior metrics comprise one or more of (i) touch pressure of input via the computing device interface, (ii) touch angle of input via the computing device interface, (iii) directionality of input via the computing device interface, (iv) a distinct number of iterations of an action in connection with input via the computing device interface, and (v) velocity of input via the computing device interface; generating a prompt via the computing device interface in connection with an authentication request to access a protected resource associated with the computing device; processing input cryptographic information entered via the computing device interface in response to the prompt against the pre-determined set of cryptographic information; and resolving the authentication request based on said processing.