Multi-factor Authentication Using Entry Timing Patterns
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional password authentication methods are vulnerable to attacks like shoulder surfing due to the reliance on human input, which can be observed and replicated, undermining encryption efforts.
Innovation Solution
Incorporating elapsed time measurements between character entries into the authentication process, using a combination of credential strings and timing events to generate an authentication result, providing a secondary factor for secure user authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password authentication is used, then simplicity and ease of operation are maintained, but security is compromised due to vulnerability to shoulder surfing attacks
Solution Approach 1:
The patent changes the parameters of authentication by incorporating timing information (elapsed time between character entries) as an additional authentication factor. This transforms the authentication process from solely credential-based to a multi-parameter system that includes temporal characteristics, thereby improving security without significantly complicating user interaction
Solution Approach 2:
The authentication process is segmented into multiple independent factors: the credential string itself and the elapsed time measurements between character entries. This segmentation allows each factor to be evaluated separately and combined for final authentication, improving security while maintaining operational simplicity
2Reliability
If multi-factor authentication with timing measurements is implemented, then authentication security is improved, but device complexity increases
Solution Approach 1:
The system achieves multi-functionality by using the existing user interface and processor to perform both credential input and timing measurement functions. The same hardware components that handle character entry are also used to measure elapsed time, eliminating the need for separate dedicated timing devices and reducing overall system complexity
Solution Approach 2:
The system uses its own internal clock and existing input processing mechanisms to measure timing characteristics. The processor that handles credential validation also performs timing measurements, and the user interface that receives character input also captures timing data, allowing the system to authenticate itself without external assistance
Data Source
AI summary
A method of performing operations on an account server processor includes receiving authentication query messaging through a network interface from a user terminal. The authentication query messaging contains an account identifier and a credential string of characters. An elapsed time associated with the user entering characters of the credential string through a user interface of the user terminal is determined responsive to the authentication query messaging. A combination of the account identifier, the credential string, and the elapsed time is authenticated to generate an authentication result. The operations further include selectively communicating through the network interface toward the user terminal based on the authentication result, information that is fetched from a memory of an accounts database using the account identifier. Related account server processors and methods by user terminals are disclosed.