Dynamic Key Code Authentication Against Password Peeping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods are vulnerable to leakage of authentication information, such as passwords, due to the possibility of third parties observing the input process on input terminals.
Innovation Solution
An authentication system that generates a random number sequence pattern for each authentication opportunity, allowing users to input a key code based on a shared rule and password, which is unique and unpredictable, preventing the leakage of authentication information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a user inputs authentication information on a display screen, then the authentication process can be completed, but the authentication information may be peeped by a third party
Solution Approach 1:
The patent applies dynamics by making the key input positions changeable rather than fixed. The determination unit dynamically determines key positions based on stored correspondence between authentication information and key positions, so that the same authentication information corresponds to different key positions at different times, preventing third parties from peeping the authentication information through fixed observation of input positions.
Solution Approach 2:
The patent applies preliminary action by pre-storing the correspondence between authentication information and key positions in the storage unit. This pre-established mapping allows the system to dynamically assign key positions without requiring real-time calculation, enabling both security and operational efficiency.
2Device complexity
If a fixed encryption key shape is used for password input, then the input process is simple, but the input order of keys may be leaked after multiple observations
Solution Approach 1:
The patent resolves this contradiction by making the key positions dynamic rather than fixed. While the encryption key shape remains simple for user convenience, the positions where keys are input change based on the stored correspondence, so that even if observers watch multiple authentication inputs, they cannot determine the actual input order because the key positions are randomly determined each time.
3Reliability
If random number sequence is generated for each authentication opportunity, then the key code becomes unpredictable, but the authentication system complexity increases
Solution Approach 1:
The patent applies preliminary action by pre-storing the correspondence between authentication information and key positions in the storage unit. This pre-computed mapping eliminates the need for complex real-time random number generation and calculation during authentication, reducing system complexity while maintaining security through unpredictable key position assignment.
Data Source
AI summary
An authentication device comprising: a storage unit for storing shared information including password and shared rule that are preset for each user; a random number sequence generation unit for generating a random number sequence pattern; a calculation unit for generating a key code based on the shared rules, using provisional numerals selected from the random number sequence pattern and secret numerals constituting passwords; a transceiver for receiving identification information of a user to be authenticated from an input terminal, transmitting the random number sequence pattern in association with the identification information to the input terminal, and receiving, from the input terminal, a key code consisting of the numerals selected based on the shared rules from the random number sequence pattern by the user to be authenticated; and an authentication unit for authenticating the user to be authenticated, using the key code received and the key code generated.