Color-Sensitive Password Authentication with Dynamic Overlay
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing graphical authentication systems are vulnerable to 'shoulder surfing' where observers can determine the cursor location or pattern, compromising security.
Innovation Solution
Incorporating color selection as a critical component of the passcode, where users must choose a color matching a pre-selected color from either the overlay or base image, enhancing security by obscuring the authentication process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If graphical authentication uses cursor location or image selection, then authentication functionality is provided, but security is compromised due to shoulder surfing
Solution Approach 1:
The patent adds a temporal dimension to graphical authentication by introducing color-changing elements. The authentication code changes color over time, transforming a static 2D visual selection problem into a dynamic 4D problem (x, y, time, color). This makes shoulder surfing ineffective because observers cannot capture or predict the changing color states, thereby resolving the security vulnerability while maintaining authentication functionality.
Solution Approach 2:
The patent implements dynamic visual elements where the authentication image undergoes color changes at predetermined intervals. This dynamic transformation means the authentication target is never static, requiring users to adapt to changing visual states. The system generates multiple versions of the same authentication image with different color schemes, and randomly selects which version to display, making observation and prediction by shoulder surfers impossible.
2Reliability
If color selection is added to the passcode, then security is enhanced by obscuring authentication, but device complexity increases
Solution Approach 1:
The patent segments the authentication system into distinct functional modules: a base image layer, an overlay layer with authentication elements, and a color management system. Each layer can be independently generated and manipulated. The authentication code is separated from the background image, allowing the color-changing functionality to be applied specifically to the authentication elements without complicating the entire display system. This modular segmentation reduces overall system complexity.
Solution Approach 2:
The patent changes the visual parameters of the authentication image systematically by altering color values at predetermined time intervals. Rather than introducing entirely new authentication mechanisms, the system modifies existing graphical parameters (color hues, saturation) to create multiple authentication variants. This parameter-based approach enhances security through color differentiation while reusing the same base authentication logic, thereby limiting the increase in system complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of authenticating a user of a computing device is proposed, together with computing device on which the method is implemented. In the method a modified base image is overlaid with a modified overlay image on a display and at least one of the modified base image and modified overlay image is moved by the user. Positive authentication is indicated in response to the base image reference point on the modified base image being aligned with the overlay image reference point on the modified overlay image and selection of a color for a portion of the display that matches a pre-selected color.