Dynamic Obfuscation Pattern Generation for Touchscreen Smudge Attack Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Pattern-based authentication on touchscreen devices is vulnerable to smudge attacks, where oily residues and smudges on the screen can reveal the user's input pattern, making it easy for hackers to guess the actual pattern, especially when users do not change their patterns frequently.
Innovation Solution
A dynamic guided obfuscation pattern generation system that detects the user's access pattern and generates an obfuscation pattern by determining non-repeating and non-overlapping lines from the first and last points of the access pattern, guiding the user to draw the obfuscation pattern on the screen, which disguises the original access pattern, thus preventing smudge attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If pattern-based authentication is used for unlocking the user interface, then user-friendliness is improved, but security is worsened due to smudge attacks
Solution Approach 1:
The patent introduces an intermediary obfuscation pattern between the user's actual access pattern and the screen surface. This intermediary layer (the obfuscation pattern) hides the true authentication pattern from view, preventing smudge attacks while preserving the ease of pattern-based authentication. The obfuscation pattern acts as a mediator that disguises the actual user interactions without requiring users to change their authentication behavior.
Solution Approach 2:
The patent applies visual obfuscation techniques where the screen displays additional graphical elements, colors, or visual distractions that change or vary to mask the actual access pattern. By altering the visual presentation layer, the system hides the true pattern from smudge detection while maintaining the original authentication mechanism's user-friendliness.
2Reliability
If the orientation of the N*N matrix is changed to prevent smudge attacks, then security is improved, but user-friendliness is worsened
Solution Approach 1:
The patent implements a dynamic obfuscation pattern that adapts and changes based on the user's actual access pattern rather than using fixed matrix rotations. The obfuscation pattern dynamically generates visual distractions tailored to each user's specific authentication behavior, providing security without requiring users to adapt to different matrix orientations or configurations.
Solution Approach 2:
The system automatically generates and applies the obfuscation pattern based on detecting the user's access pattern, without requiring user intervention to change settings or reconfigure the authentication interface. The obfuscation is applied transparently, maintaining the original user-friendly interaction while secretly enhancing security through automated pattern disguise.
3Reliability
If random colors or pictures are used for unlock, then security is improved, but ease of operation is worsened
Solution Approach 1:
The patent applies partial obfuscation by adding visual distractions only in specific areas or at specific times during the authentication process, rather than completely changing the entire interface. This selective application of obfuscation provides sufficient security protection while minimizing the impact on user experience and maintaining ease of operation for legitimate users.
Data Source
AI summary
Systems and methods for dynamic guided obfuscation pattern generation for preventing smudge attacks on touch screen devices are provided. One method may include receiving a user access pattern associated with a matrix displayed on the user interface; wherein, the system generates an obfuscation pattern based upon the user access pattern. For example, the system may generate edges of the obfuscation pattern by determining potential lines that may be drawn from the first and last points of the user access pattern, which are non-repeating and non-overlapping with any edges of the user access pattern and any edges of the obfuscation pattern. The system may iteratively generate edges until a predetermined number of edges are generated or no more edges can be drawn meeting the requirement. Further, the system may display the obfuscation pattern in a point by point or edge by edge fashion on the user interface, enabling the user to draw the new pattern that disguises the user's original access pattern.