Authentication Apparatus Feedback for Brute Force Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing apparatuses face challenges in authenticating users, as users cannot confirm correct input of authentication codes due to obscured display, leading to repeated incorrect attempts and reduced opportunities to input different codes, potentially causing unnecessary authentication failures.
Innovation Solution
The apparatus determines authentication success or failure and stores unsuccessful codes, executing a predetermined process when the number of unsuccessful attempts exceeds a limit, including prohibiting further input and notifying administrators, thereby preventing unauthorized access and data loss.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the authentication code input is obscured for security reasons, then security is improved, but the user cannot confirm correct input leading to repeated incorrect attempts
Solution Approach 1:
The system provides feedback by detecting repeated authentication failures and responding with appropriate messages or actions. When the same incorrect authentication code is entered multiple times, the system identifies this pattern and provides feedback through error messages, warnings, or account locking mechanisms, allowing the user to understand their input is incorrect without revealing the correct code.
Solution Approach 2:
The patent converts the harmful effect of obscured input (which causes user frustration and repeated attempts) into a beneficial security feature. By monitoring and detecting repeated failure patterns, the system transforms what could be a user experience problem into an active security measure that identifies and responds to potential unauthorized access attempts.
2Reliability
If the number of authentication attempts is limited to prevent brute force attacks, then security is improved, but legitimate users may be locked out due to input errors
Solution Approach 1:
The system dynamically adjusts its response based on the pattern of authentication attempts. Rather than applying a fixed limit, the system monitors whether failures are due to repeated identical inputs (suggesting malicious activity) or varied inputs (suggesting user error). This dynamic behavior allows the system to adapt its security measures to the specific situation, locking out persistent identical failures while accommodating legitimate users who make different input errors.
Solution Approach 2:
The patent segments the authentication failure analysis by examining individual attempt patterns. Instead of treating all failures uniformly, the system analyzes each failure independently to determine if it's part of a repeated pattern. This segmentation allows differentiated responses: strict limits on repeated identical failures versus more lenient handling of varied input errors, thereby accommodating both security needs and user mistakes.
3Reliability
If the system deletes data after excessive failed attempts, then security is improved, but legitimate user data may be lost
Solution Approach 1:
The system provides feedback by monitoring authentication patterns and responding appropriately before data loss occurs. When detecting repeated failures with identical authentication codes, the system issues warnings and alerts to notify users of potential security issues. This feedback mechanism allows legitimate users to correct their input errors before the system takes protective measures like data deletion, thereby preventing false positives from causing data loss.
Solution Approach 2:
The patent implements preliminary actions before data deletion is considered. The system first detects repeated failure patterns, then issues warnings and notifications to users, and only after these preliminary measures fail to prevent continued unauthorized attempts does it consider data deletion. This staged approach ensures that legitimate users have multiple opportunities to correct their errors before facing data loss, while still protecting against determined attackers.
Data Source
AI summary
An information processing apparatus includes a reception processing portion, an authentication determining portion, a presence/absence determining portion, a storage processing portion, and a process executing portion. The reception processing portion receives an authentication code input via an operation portion. The authentication determining portion determines whether an authentication is successful or unsuccessful based on the authentication code. The presence/absence determining portion determines whether the authentication code by which the authentication was determined to be unsuccessful is present or absent in a first storage portion. The storage processing portion stores the unsuccessful authentication code in the first storage portion after a determination of the presence/absence determining portion. The process executing portion executes a predetermined process when a number of times that the presence/absence determining portion determined that the authentication code was absent has exceeded a predetermined upper limit number of times.


