Authentication Credential Noise Symbol Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional authentication systems require an exact match of credentials, which are vulnerable to eavesdropping attacks due to noise introduced by communication channels, exposing users to risks from shoulder surfers, keyloggers, and man-in-the-middle attacks, as the exact credential can be compromised with a single interception.

Innovation Solution

Implementing user-specified noise symbols interspersed within credentials, where the authenticator decomposes submitted symbols into vectors and uses a distance metric to determine a match without knowing the noise symbol positions or types, enhancing security by preventing eavesdroppers from determining the actual credential.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If exact credential matching is used for authentication, then authentication accuracy is improved, but security against eavesdropping attacks deteriorates

Engineering Contradiction:
Improveauthentication accuracyVSAvoidvulnerability to eavesdropping attacks
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent segments the credential into multiple components by introducing noise symbols at unspecified positions within the credential. Instead of transmitting the complete credential as a single unit, it divides the credential into segments separated by noise symbols, making it difficult for eavesdroppers to capture and analyze the complete credential structure in a single interception.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces noise symbols as intermediary elements between the actual credential components. These noise symbols act as mediators that obscure the true credential structure from eavesdroppers while allowing the authentication system to verify the credential through pattern matching that can identify and ignore the noise symbols.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If noise symbols are introduced in specified positions, then security against eavesdropping is improved, but ease of operation deteriorates

Engineering Contradiction:
Improveresistance to eavesdropping attacksVSAvoiduser input complexity
Core Design Contradiction:
Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The patent makes the noise symbol positions dynamic and unspecified rather than fixed. The noise symbols are placed at random or dynamically determined positions within the credential, which changes with each authentication attempt. This dynamic positioning maintains security while reducing user burden because users do not need to remember or calculate specific noise positions.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The authentication system automatically handles the insertion and management of noise symbols without requiring user intervention. The system service generates and positions noise symbols within the credential automatically, freeing users from the complexity of manually inserting noise symbols at specific positions while still achieving the security benefits.

Inventive Principle:
Principle #25Self-service

3Reliability

If complete credential transmission is used, then authentication reliability is improved, but loss of information to eavesdroppers worsens

Engineering Contradiction:
Improveauthentication reliabilityVSAvoidcredential exposure to eavesdroppers
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent segments the credential transmission by inserting noise symbols at unspecified positions, which divides the credential into obscured segments. This segmentation allows the complete credential information to be transmitted for authentication purposes while preventing eavesdroppers from capturing the complete unobscured credential in a single interception.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent changes the parameter of credential structure by introducing noise symbols with unspecified positions and types. This parameter change transforms the credential from a fixed, predictable structure to a variable structure with random elements, maintaining the integrity of the actual credential while obscuring it from eavesdroppers during transmission.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentEP3966716B1Pattern matching for authentication with random noise symbols and pattern recognition
Publication Date: 2023.03.29 MICROSOFT TECHNOLOGY LICENSING LLC
  • EP3966716B1 patent drawingFigure 1
  • EP3966716B1 patent drawingFigure 2
  • EP3966716B1 patent drawingFigure 3

AI summary

Disclosed in some examples are methods, systems and machine-readable mediums which allow for more secure authentication attempts by implementing authentication systems with credentials that include interspersed noise symbols in positions determined by the user. These systems secure against eavesdroppers such as shoulder-surfers or man-in-the middle attacks as it is difficult for an eavesdropper to separate the noise symbols from legitimate credential symbols.