Dynamic Authentication Image for Display Spoofing Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for authenticating Trusted User Interfaces (TUIs) in electronic devices are vulnerable to spoofing, as the normal environment can overlay or obscure secure areas, making it difficult for users to verify the authenticity of the display, especially in transactions requiring sensitive information.
Innovation Solution
A method and apparatus that dynamically render an authentication image within the trusted portion of the display screen, where the image moves randomly or is dragged by the user, and changes color, ensuring visibility across the trusted area to prevent overlay and enhance user recognition of authenticity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an authentication image is displayed in a portion of the TUI, then it indicates authenticity, but the normal environment can overlay false information to change displayed amounts or obscure real information
Solution Approach 1:
The authentication image is animated rather than static, moving across the trusted portion of the display to continuously cover different areas. This dynamic behavior prevents the normal environment from successfully overlaying false information, as the authentication image will eventually reveal the spoofed content underneath.
Solution Approach 2:
The authentication image changes its visual properties (color, opacity, or appearance) as it moves or is interacted with, providing multiple states that make it difficult for the normal environment to predict and overlay false information effectively.
2Object-affected harmful factors
If the authentication image covers the whole TUI, then it prevents overlay spoofing, but the image must be significantly dimmed making it difficult for users to recognize
Solution Approach 1:
By making the authentication image move dynamically across the display rather than covering the entire area statically, the system achieves comprehensive coverage over time without needing to dim the image. Users can recognize the authentication image clearly as it passes through different portions of the TUI.
Solution Approach 2:
The authentication image periodically moves across different portions of the trusted display area, providing repeated opportunities for users to verify authenticity while maintaining full visibility. This periodic traversal ensures complete coverage without requiring the image to be dimmed.
3Reliability
If a special indicator such as LED is hardware controlled by the secure environment, then it indicates authenticity, but it increases device cost and power consumption
Solution Approach 1:
The display screen, which is already a necessary component for displaying TUI content, is repurposed to also display the authentication image. This eliminates the need for separate hardware indicators like LEDs, reducing device complexity and power consumption while maintaining the authenticity indication function.
Solution Approach 2:
Instead of using a separate physical indicator component, the system creates a visual copy of the authentication indicator within the existing display screen. This software-based approach replaces hardware-based indicators, reducing material costs and power consumption.
Data Source
Figure 1~2A
Figure 2B~3
Figure 4
AI summary
Security can be improved in electronic devices that use authentication images and trusted user interfaces (TUIs), and it can still be easy for users to see the TUIs by making more dynamic use of the authentication images and possibly adding color effects.