Confidential Data Input Resistant to Capture

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Data input in electronic devices is vulnerable to capture by observers through methods like shoulder surfing, video surveillance, and keylogging, as existing solutions do not effectively obscure the actual input characters from attackers.

Innovation Solution

A computer system that differentiates between actual and dummy characters by receiving additional input signals, obscuring the actual characters and limiting the ability of observers to capture the input string, using various methods such as touchscreen interactions or camera inputs to signal mode changes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If traditional data input methods are used, then ease of operation is improved, but security against data capture deteriorates

Engineering Contradiction:
Improveease of data inputVSAvoidvulnerability to data capture
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The input data is segmented into actual characters and dummy characters. The system divides the character stream by introducing dummy characters that are interspersed with actual characters, making it difficult for observers to distinguish which characters are real. This segmentation obscures the input data while maintaining the same input interface.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

An intermediary signal mechanism is introduced between the user input and the system processing. This signal indicates whether each character is actual or dummy, acting as a mediator that allows the system to filter characters while presenting an obscured character stream to observers. The intermediary signal can be provided through various modalities such as touchscreen pressure, camera detection, or audio input.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If dummy characters are introduced to obscure actual characters, then security against shoulder surfing is improved, but device complexity increases

Engineering Contradiction:
Improveresistance to shoulder surfingVSAvoidcomplexity of input processing
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The system uses multi-functional input mechanisms that can serve both as character input and as signal transmission. For example, the touchscreen serves both for character selection and for detecting pressure signals that indicate actual versus dummy characters. The camera and microphone can also serve dual purposes of user interface interaction and signal detection, reducing the need for separate dedicated hardware.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Object-affected harmful factors

If additional input signals are required to distinguish actual from dummy characters, then data capture resistance is improved, but ease of operation deteriorates

Engineering Contradiction:
Improveprotection against data captureVSAvoidconvenience of data input
Core Design Contradiction:
Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The signal input mechanisms are merged with the existing user interface. The touchscreen pressure detection is combined with the character selection process, so users naturally provide both character input and signaling information through the same interaction. The camera and microphone are integrated into the device housing, allowing users to provide signals through natural gestures or speech without requiring separate actions.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentEP3451225B1System and method for data input resistant to capture
Publication Date: 2020.10.07 BLACKBERRY LTD
  • EP3451225B1 patent drawingFigure 1
  • EP3451225B1 patent drawingFigure 2~3
  • EP3451225B1 patent drawingFigure 4

AI summary

A computer-implemented method of confidential data input resilient against data capture includes receiving input concurrently from first and second input devices. The input from the first input device corresponds to characters. An input mode indication is determined based on the input received at the second input device and indicates at least a first character of the plurality of characters being input in a first input mode and at least a second character of the plurality of characters being input in a second input mode. An input string is formed by extracting the at least a first character input in the first input mode. An action is initiated based on the input string. The first input device may be a keyboard. The second input device may be a sensor such as a portion of a touchscreen or a fingerprint sensor. Related systems and computer-readable media are also disclosed.