Dynamic Endpoint Reference Alignment for Graphical Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing graphical authentication systems are vulnerable to 'shoulder surfing' where a third party can observe the cursor location or pattern of user input, compromising security.
Innovation Solution
The system dynamically varies the endpoint of reference points for graphical authentication on a display with each authentication attempt, using a modified base image and overlay image where the positions of reference points change, requiring the user to align them without visible cues.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the endpoint of reference points remains fixed in graphical authentication, then the authentication process is simple and fast, but security is compromised due to shoulder surfing attacks
Solution Approach 1:
The patent applies dynamics by making the endpoint of the reference point movable rather than fixed. The endpoint is repositioned to a new location that is offset from the original position by a predetermined distance, creating dynamic variation in each authentication attempt. This prevents shoulder surfing attacks because the target location changes between attempts while maintaining a consistent distance relationship that the user can learn.
Solution Approach 2:
The patent changes the positional parameter of the reference point endpoint. Specifically, the endpoint is moved from its original position to a new position defined by offset distances in horizontal and vertical directions. This parameter change (position) enhances security while the predetermined offset distance maintains usability.
2Reliability
If the reference point position varies with each authentication, then security against observation attacks is improved, but the user must remember varying positions increasing cognitive load
Solution Approach 1:
The patent changes the position parameter of the reference point endpoint to a new location offset from the original position. However, it maintains the predetermined distance relationship, creating a consistent geometric pattern that reduces cognitive load while improving security.
Solution Approach 2:
The patent preemptively counteracts the shoulder surfing attack by offsetting the endpoint position before the authentication attempt begins. The predetermined offset distance is calculated to prevent observers from easily predicting or reproducing the target location, while the consistent geometric relationship preserves user ease of operation.
3Ease of manufacture
If graphical authentication uses fixed images and reference points, then the system is easy to implement, but it is vulnerable to pattern recognition by observers
Solution Approach 1:
The patent introduces dynamics into the authentication system by making the reference point endpoint repositionable. The endpoint moves to different locations based on offset calculations, preventing pattern recognition by observers while maintaining implementation simplicity through mathematical offset operations rather than complex image generation.
Solution Approach 2:
The patent changes the positional parameters of the reference point endpoint using predetermined offset distances in horizontal and vertical directions. This parameter modification enhances security by eliminating fixed patterns while keeping the implementation straightforward through coordinate transformation.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of authenticating a user of a computing device is proposed, together with computing device on which the method is implemented. In the method a modified base image is overlaid with a modified overlay image on a display and with each execution of the method, at least one of a position of a pre-selected base image reference point on the modified base image and a position of a pre-selected overlay image reference point on the modified overlay image is varied. Positive authentication is indicated in response to an input resulting in the base image reference point on the modified base image being aligned with the overlay image reference point on the modified overlay image.