Augmented Reality Authentication Using Gaze-Based Passcodes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods, including alphanumeric and graphical passwords, suffer from issues such as memorability, usability, and security threats like shoulder-surfing attacks, and existing AR-based systems fail to leverage the potential of augmented reality for easy recall and enhanced security.
Innovation Solution
An augmented reality (AR) authentication method and system that displays an AR environment, allowing users to interact with real-world objects and virtual icons to define a passcode, utilizing context-based and episodic memory for improved memorability and security, with the interaction process determining access to content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If alphanumeric passwords are used for authentication, then security can be maintained through complexity, but memorability and usability deteriorate due to length and complexity requirements
Solution Approach 1:
The patent replaces traditional alphanumeric password input (mechanical typing) with gaze-based interaction in an augmented reality environment. Users authenticate by gazing at and selecting virtual objects displayed in AR, eliminating the need to manually type complex passwords while maintaining security through multi-dimensional passcode generation based on gaze patterns and interaction sequences.
2Reliability
If alphanumeric passwords are used for authentication, then access control can be implemented, but memorability deteriorates after long periods of time
Solution Approach 1:
The patent transitions from two-dimensional alphanumeric character sequences to multi-dimensional passcodes formed by gaze patterns, spatial relationships, and interaction sequences in an augmented reality environment. This dimensional expansion creates more robust authentication that is both more memorable and resistant to should er-surfing attacks, as the passcode exists in multiple dimensions simultaneously.
3Ease of operation
If graphical passwords are used instead of alphanumeric passwords, then memorability improves due to visual recognition, but security deteriorates due to susceptibility to shoulder-surfing attacks
Solution Approach 1:
The patent introduces augmented reality as an intermediary layer between the user and the authentication system. Virtual objects are displayed in AR space, allowing users to interact through gaze and selection rather than direct visual display on a screen. This intermediary AR environment protects against should er-surfing attacks while maintaining the memorability benefits of visual interaction.
4Object-affected harmful factors
If traditional AR authentication systems are used, then security against shoulder-surfing is improved, but memorability deteriorates due to failure to leverage episodic and context-based memory
Solution Approach 1:
The patent applies local quality by associating specific virtual objects in the AR environment with the user's personal context and episodic memories. The system presents objects and scenarios that have personal significance to the user, making the authentication process more memorable while maintaining security through the AR medium that prevents should er-surfing observation.
Data Source
AI summary
An augmented reality (AR) authentication method and system provides an AR environment that is presented on a display. The AR environment combines real-world object images captured by a camera with computer generated virtual icons. The virtual icons may be “mapped” to the real-world objects, whereupon the real-world objects take on the characteristics of the mapped images. During an authentication process, a user interacts with the AR environment by a variety of techniques to enter their passcode. Such interaction may include physically moving objects in the real-world so that such movement is reflected in the AR environment; controlling the “mapped” real-world objects through user interaction with the AR environment via an input device; and controlling the virtual icons through user interaction with the AR environment via the input device. Accordingly, if the user interacts with the AR environment in a manner that matches their previously “set” passcode the user is authenticated.