Dynamic Multi-Value Keyboard Mapping for Password Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password protection systems are vulnerable to unauthorized access due to static password lengths and lack of dynamic authentication methods, making them susceptible to attacks, especially when observed by attackers with video recording capabilities.
Innovation Solution
Implementing a dynamic multi-value keyboard mapping system where users enter a password followed by filler characters, changing the keyboard layout, and then re-entering the password, which stores a one-way hash of the password and its length, making it difficult for attackers to determine the correct password length and reducing false positives.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a static password system is used, then the authentication process is simple, but the system is vulnerable to attacks and password length can be easily determined
Solution Approach 1:
The patent implements dynamic keyboard layouts that change between different authentication phases. The keyboard mapping is not static but transforms from a first layout during password entry to a second layout during verification, making it difficult for attackers to determine password length or content through observation. This dynamic transformation directly addresses the security vulnerability of static password systems.
Solution Approach 2:
The authentication process is divided into distinct phases: password entry phase and verification phase. Each phase uses a different keyboard layout, effectively segmenting the authentication flow. This segmentation prevents attackers from gaining information about the password across phases, as the mapping relationships change between entries.
2Object-affected harmful factors
If video recording protection is implemented, then password retrieval by attackers is prevented, but false positives increase and authentication reliability decreases
Solution Approach 1:
The patent employs asymmetric keyboard layouts where the mapping from physical keys to characters differs between the first and second layouts. This asymmetry ensures that even if an attacker records the authentication process, they cannot reliably determine the password because the same physical key press corresponds to different characters in different phases. The asymmetric design reduces false positives while maintaining security.
Solution Approach 2:
The system changes the keyboard mapping parameters between authentication phases. By transforming the keyboard layout from a first configuration to a second configuration, the patent alters the relationship between input devices and characters. This parameter change prevents attackers from using video recordings to retrieve passwords while maintaining authentication reliability through controlled comparison of transformed inputs.
3Reliability
If the number of inputs is increased, then password security is enhanced, but the authentication process time increases
Solution Approach 1:
The authentication process uses periodic action by dividing it into distinct phases (password entry and verification) with different keyboard layouts. This periodic transformation allows the system to enhance security through multiple inputs while managing time loss efficiently, as each phase is clearly defined and the transformations are predetermined rather than continuous.
Data Source
AI summary
An embodiment of the invention includes an interface that receives a user identifier, and a processor that identifies the number of characters in the password for the user identifier. The interface receives input such that the number of characters in the input is greater than the number of characters in the password. The interface can receive additional input such that the number of characters in the additional input is greater than the number of characters in the password. The processor can compare the password to the first X characters of the input, where X equals the number of characters in the password. The processor can compare the password to the last X characters of the additional input. The processor can determine whether to authenticate the user based on the comparison of the password to the first X characters of the input and the last X characters of the additional input.