Confidential Data Input Resistant to Capture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data input in electronic devices is vulnerable to capture by observers through methods like shoulder surfing, video surveillance, and keylogging, as existing solutions do not effectively obscure the actual input characters from attackers.
Innovation Solution
A computer system that differentiates between actual and dummy characters by receiving additional input signals, obscuring the actual characters and limiting the ability of observers to capture the input string, using various methods such as touchscreen interactions or camera inputs to signal mode changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional data input methods are used, then ease of operation is improved, but security against data capture deteriorates
Solution Approach 1:
The input data is segmented into actual characters and dummy characters. The system divides the character stream by introducing dummy characters that are interspersed with actual characters, making it difficult for observers to distinguish which characters are real. This segmentation obscures the input data while maintaining the same input interface.
Solution Approach 2:
An intermediary signal mechanism is introduced between the user input and the system processing. This signal indicates whether each character is actual or dummy, acting as a mediator that allows the system to filter characters while presenting an obscured character stream to observers. The intermediary signal can be provided through various modalities such as touchscreen pressure, camera detection, or audio input.
2Object-affected harmful factors
If dummy characters are introduced to obscure actual characters, then security against shoulder surfing is improved, but device complexity increases
Solution Approach 1:
The system uses multi-functional input mechanisms that can serve both as character input and as signal transmission. For example, the touchscreen serves both for character selection and for detecting pressure signals that indicate actual versus dummy characters. The camera and microphone can also serve dual purposes of user interface interaction and signal detection, reducing the need for separate dedicated hardware.
3Object-affected harmful factors
If additional input signals are required to distinguish actual from dummy characters, then data capture resistance is improved, but ease of operation deteriorates
Solution Approach 1:
The signal input mechanisms are merged with the existing user interface. The touchscreen pressure detection is combined with the character selection process, so users naturally provide both character input and signaling information through the same interaction. The camera and microphone are integrated into the device housing, allowing users to provide signals through natural gestures or speech without requiring separate actions.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
A computer-implemented method of confidential data input resilient against data capture includes receiving input concurrently from first and second input devices. The input from the first input device corresponds to characters. An input mode indication is determined based on the input received at the second input device and indicates at least a first character of the plurality of characters being input in a first input mode and at least a second character of the plurality of characters being input in a second input mode. An input string is formed by extracting the at least a first character input in the first input mode. An action is initiated based on the input string. The first input device may be a keyboard. The second input device may be a sensor such as a portion of a touchscreen or a fingerprint sensor. Related systems and computer-readable media are also disclosed.