Cognitive Behavioral Security Controls via Graphical Interaction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security controls, particularly password-based systems, are vulnerable to breaches due to their inherent weaknesses, including brute force attacks, phishing, and social engineering, and require additional hardware for biometric controls which may not be adoptable in all environments.
Innovation Solution
A cognitive behavioral security control (CBSC) system that uses skill-based graphical controls, where users are challenged with interactive tasks that can only be completed with a behavioral match acquired during a training process, offering more secure access to secure resources by comparing observed responses to stored authentic responses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password-based security controls are used, then ease of operation is improved, but reliability is worsened due to vulnerabilities to breaches
Solution Approach 1:
The patent replaces traditional password-based authentication (mechanical system of typing characters) with a graphical interaction system where users manipulate visual elements through drag-and-drop actions. This substitution maintains ease of operation through intuitive graphical interfaces while significantly improving reliability by creating authentication credentials that cannot be easily compromised through traditional hacking methods
Solution Approach 2:
The patent creates visual copies of authentication elements (graphical objects representing users, resources, and actions) that are manipulated in a sandbox environment. These graphical copies serve as the basis for generating authentication tokens, providing a more secure alternative to text-based passwords while maintaining user-friendly interaction
2Reliability
If biometric controls are used, then reliability is improved, but device complexity is worsened due to additional hardware requirements
Solution Approach 1:
The patent replaces physical biometric hardware (fingerprint scanners, retina scanners) with a software-based graphical interaction system that uses standard input devices like mice or touchscreens. This substitution eliminates the need for additional specialized hardware while maintaining high reliability through unique behavioral pattern recognition
Solution Approach 2:
The graphical authentication system can be deployed across multiple platforms and devices using standard interfaces, making it universally applicable without requiring device-specific biometric hardware. The same system can authenticate users on different operating systems and device types
3Ease of operation
If pattern-based authentication is used, then ease of operation is improved, but reliability is worsened because patterns can be copied and shared
Solution Approach 1:
The patent replaces static pattern drawing (mechanical system of tracing lines) with dynamic graphical object manipulation involving dragging, dropping, and spatial arrangement of multiple elements. This substitution maintains ease of operation through intuitive graphical interactions while improving reliability by creating multi-dimensional authentication data that is much harder to copy or share
Solution Approach 2:
The patent transitions from two-dimensional pattern drawing to a multi-dimensional graphical space where objects have position, size, orientation, and hierarchical relationships. This addition of dimensional complexity makes the authentication credential significantly more secure while maintaining user-friendly interaction
Data Source
AI summary
A system, method and program product for providing cognitive behavior security control (CBSC). A system is disclosed that includes: a repository having a plurality of challenges each including an interactive graphical task; a user interface for graphically presenting challenges to users; an enrollment system for assigning challenges to users and determining an authentic response for each user; an authentication system that collects an observed response from a user presented with an assigned challenge and determines a security control result based on a closeness of the observed response with the authentic response of the user.