Dynamic Password Input Button Randomization for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password input methods for electronic terminals are insecure as they expose characters and input patterns, making it easy for others to infer the password, and lack a balance between security and user convenience.
Innovation Solution
A method that randomly arranges password input buttons, displays characters for a minimal time, and erases them quickly, using a 2D array with more buttons than characters, ensuring adjacent characters are close and surplus characters are randomly placed, to prevent inference and minimize user input time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password characters are displayed on input buttons for user recognition, then user input convenience is improved, but password security deteriorates because adjacent persons can easily infer the password from the displayed characters and input patterns
Solution Approach 1:
The input buttons are dynamically rearranged in random positions each time a password is input. This dynamic repositioning ensures that even if an adjacent person observes the input process, they cannot infer the password because the button positions change with each input session, making the harmful observation effect ineffective
Solution Approach 2:
The characters on input buttons are periodically erased after a predetermined time period. This periodic erasure limits the time window during which an adjacent person can observe and infer the password, thereby reducing password exposure while still allowing sufficient time for the user to input the password
2Object-affected harmful factors
If password characters are not displayed on input buttons to prevent inference, then password security is improved, but user input convenience deteriorates because users cannot easily recognize which buttons to press
Solution Approach 1:
The characters are displayed on input buttons in advance before the user begins input, allowing users to recognize and locate the correct buttons. The characters remain displayed for a predetermined time period, providing sufficient advance notice and recognition time for users while still preventing prolonged exposure to adjacent persons
3Device complexity
If a fixed array of input buttons is used, then device complexity is reduced, but security deteriorates because input patterns become predictable and easily inferred by adjacent persons
Solution Approach 1:
The input buttons are rearranged in random positions each time a password is input, transforming the static button array into a dynamic one. This dynamic repositioning prevents adjacent persons from inferring passwords through observation of fixed input patterns, while the underlying array structure remains simple and does not significantly increase device complexity
Data Source
AI summary
The present invention relates to a method for inputting a password into an electronic terminal, wherein the method comprises: a step of saving a password character string inputted by the user through an input unit in a storage unit; a step of randomly placing adjacent characters from within the password character string into adjacent input buttons—defined as any two input buttons connected in a straight line without passing another input button—which are arranged in a two-dimensional field by a control unit, wherein the total number of input buttons is greater than the number of characters included in the password character string; a step in which the control unit places a character not included in the password character string into an input button in which a character included in the password character string has not been placed; a step in which a display unit displays each input button displaying a placed character; a step in which an input unit receives the input character string from the user; and a step in which the control unit completes the user authentication procedure when the password character string and the input character string are the same.