Dynamic Character Sequence for Secure Password Entry

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional password entry systems are insecure due to the risk of password observation and physical residue on keyboards, as users enter the exact same sequence of characters each time, making them vulnerable to security risks.

Innovation Solution

A system that displays an apparently random sequence of characters for password entry, allowing users to select characters that are part of their password, reducing the need to enter all characters in order and minimizing exposure of the password during entry.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users enter the exact same sequence of characters each time, then authentication is reliable and consistent, but security is compromised due to password observation risks and keyboard residue

Engineering Contradiction:
Improveauthentication consistencyVSAvoidpassword exposure risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system dynamically changes the display of password characters each time the user enters their password. Instead of showing static characters in fixed positions, the system randomizes the positions and appearances of password characters on each entry attempt, making it difficult for observers to capture the password while maintaining reliable authentication through correct character matching

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system changes the parameters of character display including position, timing, and visual representation. Password characters are displayed at different locations on the screen, for different durations, and may appear as different symbols or images, thereby preventing password capture while ensuring accurate authentication through the underlying character identity

Inventive Principle:
Principle #35Parameter changes

2Reliability

If users enter all characters in order on a keyboard, then complete password verification is achieved, but physical residue and wear patterns reveal password information

Engineering Contradiction:
Improvepassword verification completenessVSAvoidkeyboard residue clues
Core Design Contradiction:
ReliabilityVSObject-generated harmful factors

Solution Approach 1:

The system replaces the mechanical keyboard entry process with a display-based selection interface. Instead of requiring physical keyboard input that leaves residue, the system displays password characters on a screen and allows selection through non-contact methods such as mouse clicks or touch screen, eliminating the physical residue problem while maintaining verification completeness

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system introduces an intermediary display interface between the user and the password verification system. The password characters are presented as visual elements on a screen rather than direct keyboard input, acting as an intermediary that prevents direct physical contact and residue accumulation while still enabling complete password verification through selection

Inventive Principle:
Principle #24Intermediary (Mediator)

3Object-affected harmful factors

If the system displays an apparently random sequence of characters, then password exposure is reduced, but user input complexity increases

Engineering Contradiction:
Improvepassword exposureVSAvoidinput interface complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The system uses visual differentiation through color, size, or style changes to indicate which displayed characters are part of the password. Password characters may be highlighted, colored differently, or displayed with distinctive formatting compared to non-password characters, simplifying user selection while maintaining the random sequence appearance for security

Inventive Principle:
Principle #32Color changes

Data Source

PatentUS9749312B2Systems and methods for secure password entry
Publication Date: 2017.08.29 PAYPAL INC
  • US9749312B2 patent drawing
  • US9749312B2 patent drawing
  • US9749312B2 patent drawing

AI summary

Systems and methods for secure password entry are provided. A request to authenticate a user is received from a user device. A sequence of characters is generated. The sequence has a first subset of the characters selected from a password associated with the user. At least one of the characters appears a different number of times in the sequence than in the password. The sequence of characters is displayed on the user device in response to the request. A user selection of a second subset of the characters in the sequence is received through the user device. The user is authenticated in response to a determination that the first subset of the characters matches the second subset of the characters.