Dynamic Character Subset Authentication for Mobile Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods in mobile terminals and other electronic devices lack sufficient safety and reliability, as they can be easily compromised by intentional observation or static image cracking, necessitating a more secure and user-friendly solution.
Innovation Solution
An authentication method that randomly distributes characters of a predefined password into multiple candidate character subsets displayed across interactive regions, requiring the user to select specific regions corresponding to each character, ensuring that all characters belong to the correct subsets for successful authentication, thereby enhancing security and convenience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional password input methods (slide-unlock, face-unlock, pattern unlock) are used, then user convenience is improved, but security and reliability deteriorate due to susceptibility to intentional peeping and static image cracking
Solution Approach 1:
The password input process is segmented into multiple independent character selection steps. Each character of the password is selected separately through interactive regions displaying candidate characters, rather than inputting the entire password at once. This segmentation prevents observers from capturing the complete password sequence through static images or brief glances.
Solution Approach 2:
The candidate character subsets displayed in interactive regions are dynamically updated and randomly distributed during each authentication attempt. The positions and arrangements of characters change dynamically, preventing observers from using static images or memory of previous layouts to crack the password.
2Reliability
If password verification security is enhanced through random distribution and fuzzy matching, then security improves, but device complexity increases due to multiple interactive regions and candidate character subsets
Solution Approach 1:
The interactive regions serve multiple functions: they display candidate characters, receive user selections, and dynamically update to show new candidate subsets. This multi-functionality reduces the need for separate components for each function, thereby managing complexity while enhancing security.
Solution Approach 2:
Instead of using complex cryptographic protocols or biometric hardware, the system uses software-based random distribution and fuzzy matching algorithms that replicate the security function through computational methods, avoiding the need for expensive or complex hardware components.
3Reliability
If the number of candidate characters in each subset is increased to improve security through fuzziness, then the difficulty of ascertaining the accurate password sequence increases, but the number of interactive regions and buttons increases, reducing user operation convenience
Solution Approach 1:
The system adds a temporal dimension to the authentication process by updating candidate character subsets dynamically across multiple interaction steps. Instead of presenting all candidates at once in a single spatial dimension, the system distributes candidates across time steps, allowing users to select characters sequentially while maintaining security through random redistribution.
Data Source
Figure 1~2
AI summary
An authenticating device employing an authenticating method of the invention is disclosed. In the method a candidate character set is divided into several candidate character subsets so that at least one subset contains two or more elements. Then these subsets are provided to the user to select. Before a first password character or each time the user inputs a password character, the elements of the candidate character set are randomly arranged to produce the candidate character subset. Based on this, the subsets corresponding to selection of the user and password are checked, thus finishing entire authentication process. By randomly generating dynamical effect of the contents input by the user, password operation complexity is increased. This comprehensively and entirely improves safety and convenience of the authentication process.