Dynamic Authentication Interface Layouts Against Shoulder Surfing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods on devices, such as mobile devices, are vulnerable to unauthorized access due to static user interfaces that allow observers to determine the authentication credential, increasing the risk of theft and unauthorized access to sensitive information.
Innovation Solution
Implementing a dynamic user interface for authentication credential input where the layout or arrangement of keys changes randomly each time, incorporating multiple attributes per key, such as color, shape, and background pattern, making it difficult for observers to replicate the credential.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a static user interface with fixed key layout is used for authentication, then the ease of operation is improved, but the security is worsened because observers can determine the authentication credential
Solution Approach 1:
The patent applies the dynamics principle by making the user interface layout change dynamically between authentication attempts. The key positions, attributes, and configurations are randomized for each attempt, transforming the static interface into a dynamic one that adapts to each authentication event, thereby preventing observers from determining credentials through repeated observation
Solution Approach 2:
The patent applies parameter changes by modifying multiple parameters of the user interface elements including key positions, colors, shapes, sizes, and other visual attributes. These parameter changes occur randomly between authentication attempts, making it impossible for observers to predict or replicate the authentication sequence based on previous observations
2Object-affected harmful factors
If the key layout changes randomly each time, then the security is improved, but the ease of operation is worsened due to increased complexity
Solution Approach 1:
The patent applies segmentation by dividing the authentication credential into multiple separate attempts or steps. Each authentication attempt uses a different randomized layout, effectively segmenting the authentication process into multiple independent events rather than a single static interaction, which maintains security while distributing the operational complexity across multiple simplified steps
3Object-affected harmful factors
If multiple attributes per key are implemented, then the security is improved by preventing credential replication, but the device complexity increases
Solution Approach 1:
The patent applies merging by combining multiple attributes (color, shape, position, size, etc.) into each key element. Rather than adding separate controls for each attribute, the patent merges them into unified visual elements that users interact with as single units, thereby increasing security through attribute complexity while minimizing the increase in operational complexity
Data Source
AI summary
Disclosed are systems and methods for dynamic user interfaces for authentication. A user interface comprising a plurality of user interface elements can be generated. The plurality of user interface elements can be generated according to a random placement. The each plurality of user interface elements can comprise a random plurality of attribute values.