Authentication Credential Mismatch Warning System

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users often mix up or enter incorrect authentication credentials due to typographical errors, leading to inadvertent disclosure of credentials for other resources or triggering password resets, which compromises security without significantly enhancing security measures.

Innovation Solution

A system that monitors user input for authentication credentials and generates a warning when an incorrect character is entered, allowing users to re-enter the credentials correctly and preventing accidental disclosure or resets, while maintaining high security by storing only a portion of the credential, such as one character, to provide an effective password mismatch warning.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the system monitors and compares user input against stored authentication credentials to detect incorrect entries, then user security is improved by preventing inadvertent credential disclosure and accidental password resets, but device complexity increases due to the need for monitoring, storing, and comparing credential data

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the authentication credential into individual characters and stores only a portion (e.g., one character) rather than the complete credential. This segmentation allows the system to perform security monitoring by comparing user input against stored character portions while minimizing the storage of sensitive data, thus reducing the security risks associated with storing complete credentials.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system performs partial monitoring by comparing only specific portions of user input against stored credential portions rather than comparing complete credentials. This partial action approach provides sufficient security warning functionality while reducing the complexity of credential management and storage requirements.

Inventive Principle:
Principle #16Partial or excessive action

2Measurement precision

If the system stores complete authentication credentials for monitoring purposes, then detection accuracy of incorrect entries is improved, but security deteriorates due to the risk of credential compromise from storage

Engineering Contradiction:
Improvedetection accuracyVSAvoidsecurity risk
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent extracts and stores only specific portions (e.g., one character) of the authentication credential rather than the complete credential. This extraction allows the system to maintain detection accuracy for identifying incorrect entries while significantly reducing the security risk associated with storing sensitive credential data.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

By segmenting the credential into individual characters and storing only a portion, the system achieves sufficient detection capability without compromising security. The segmented approach allows comparison of user input against stored portions while minimizing the exposure of sensitive credential information.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS8959599B2Password mismatch warning method and apparatus
Publication Date: 2015.02.17 AVAYA INC
  • US8959599B2 patent drawing
  • US8959599B2 patent drawing
  • US8959599B2 patent drawing

AI summary

Systems and methods for providing an authentication credential mismatch warning are disclosed. More particularly, at least one character from an authentication credential required to access a resource is recorded. When a user attempts to enter the required authentication credential, a mismatch warning can be generated if a monitored character is input incorrectly. The user can then revise the authentication credential input, prior to submitting the authentication credential to the resource.