Dynamic Graphic PIN Authentication via Coordinate Selection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for securing personal codes, such as PIN codes, are vulnerable to detection by computer viruses and are limited by the number of pre-recorded codes, making them difficult to memorize and insecure in unsecured environments.

Innovation Solution

A method that displays a graphic representation of characters associated with a personal code, allowing the user to select characters based on instructions, and compares the selected coordinates with pre-defined coordinates to authenticate access, with the graphic representation modified after a predetermined number of requests to prevent virus detection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a PIN code is entered on a terminal's human-machine interface, then user identification and authentication are enabled, but computer viruses can detect and transmit the PIN code

Engineering Contradiction:
Improveauthentication securityVSAvoidvirus detection
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a graphic representation as an intermediary between the user and the PIN code entry system. Instead of directly entering PIN digits, the user selects characters from a visual display according to instructions, with coordinates transmitted to the authentication system. This intermediary layer prevents viruses from directly detecting the PIN code while maintaining authentication functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the traditional mechanical keyboard input system with a graphical interface system. The user interacts with visual characters displayed on screen, selecting them through coordinate-based input rather than direct key pressing. This substitution eliminates the direct mechanical connection that viruses exploit to capture PIN codes.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If multiple pre-registered PIN codes are provided to the cardholder, then the card can be used multiple times, but the codes are difficult to memorize and the list is difficult to secure

Engineering Contradiction:
Improvenumber of usesVSAvoidmemorization difficulty
Core Design Contradiction:
ProductivityVSEase of operation

Solution Approach 1:

The patent extracts the PIN code characters from their traditional sequential format and disperses them across a graphic representation with random positions. Each character is associated with specific instructions and coordinates, separating the memorization burden from the usage process. Users only need to remember the instructions and character positions, not the entire PIN sequence.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If a keyboard device is connected to the terminal for secure PIN entry, then virus contamination is prevented, but the solution is cumbersome and expensive

Engineering Contradiction:
ImprovesecurityVSAvoidexternal device requirement
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent makes the terminal's display and processing capabilities multi-functional, using them both for normal operation and for secure PIN entry. The graphic representation and coordinate-based selection system allows the terminal itself to provide security functions previously requiring external keyboard devices, eliminating the need for additional hardware while maintaining security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP2070234B1Securing of code for personal entity
Publication Date: 2020.05.06 ORANGE SA
  • EP2070234B1 patent drawingFigure 1
  • EP2070234B1 patent drawingFigure 2
  • EP2070234B1 patent drawingFigure 3~4

AI summary

A system secures a personal code for a user of a personal entity (EP) containing data (SIG) and associated with a code processing entity (ETC). The personal entity establishes a (REP_CLn) graphical representation of characters that may be modified with each request for data. The representation is associated with first particulars of characters of the personal code and transmitted to the code processing entity. The code processing entity displays the representation so that the user selects therefrom characters representative of the personal code, determines second particulars of the selected characters and transmits the second particulars to the personal entity. The personal entity compares the first and second particulars so as to transmit the data requested if said particulars correspond.