Authentication Apparatus Input Field Logic for Password Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems inadvertently display passwords in the account field when users mistakenly input passwords there, allowing third parties to access the password.
Innovation Solution
An authentication apparatus and program that inhibit input in the account field until the password field is filled, mask password inputs, and restrict the same letter string from being inputted in the account field, preventing password display and ensuring correct input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If the account field displays input letters without masking to allow user confirmation, then the user can confirm the account input, but the password may be mistakenly input and displayed in the account field, allowing third parties to acquire the password
Solution Approach 1:
The system performs preliminary masking of the account field when the password field is detected to be in focus or when password input is anticipated. This preliminary action prevents the harmful effect (password exposure) before it can occur, while still allowing the user to confirm the account input through the masking mechanism.
Solution Approach 2:
The masking behavior is applied locally and dynamically: the account field is masked only when there is a risk of password misinput (e.g., when password field is active), and remains unmasked otherwise. This local quality adjustment resolves the contradiction by applying different display properties to the same field under different conditions.
2Ease of operation
If the system allows free input in the account field before password input to improve operation flexibility, then the user can input account information freely, but the password may be mistakenly input and displayed
Solution Approach 1:
The input restriction mechanism dynamically adjusts based on the state of the password field. When the password field is in focus or password input is detected, the account field automatically enters a restricted state that prevents password-like inputs. This dynamic adjustment maintains operational flexibility while ensuring password security.
Solution Approach 2:
The system provides feedback by monitoring the password field state and automatically applying input restrictions to the account field when necessary. This feedback mechanism ensures that the system responds to potential password exposure risks in real-time, maintaining both ease of operation and password security.
3Object-affected harmful factors
If the system masks password input letters to prevent password theft, then the password is protected from third-party acquisition, but the user cannot confirm the password input
Solution Approach 1:
The system allows users to self-verify password input through alternative methods such as keyboard echo (displaying letters on the keyboard itself), tactile feedback, or by temporarily unmasking upon explicit user request. This self-service approach maintains password protection while providing confirmation capability.
Data Source
AI summary
An authentication apparatus in a multifunction peripheral is configured to display, in a screen, an account field and a password field so as to allow an input, inhibit an input in the account field before an input is made in the password field, mask a letter inputted in the password field, and restrict a letter string including a same letter that has been inputted in the password field, from being inputted in the account field.