Dynamic Password Input via Character Movement Trajectory
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password input methods are vulnerable to hacking through screen shots and data analysis, as they rely on fixed screen displays, which can be compromised by spyware.
Innovation Solution
A password input method using a game where a character image moves over a group of password images displayed on a screen, with the password selected based on the image contact coordinates, reducing the risk of hacking by changing the password generation location and obscuring the selected password image.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a fixed screen display is used for password input, then the operation is simple and straightforward, but the security against hacking through screen shots is compromised
Solution Approach 1:
The patent applies dynamics by making the password input interface movable rather than fixed. The character image moves along a trajectory that changes position, and the password images are displayed at different locations along this trajectory. This dynamic positioning prevents spyware from reliably capturing the password through static screen shots, as the password location changes during the input process.
Solution Approach 2:
The patent introduces a temporal dimension to the password input process. Instead of displaying the password statically, the system moves the character image through space and time along a trajectory, with password images appearing at different positions and times. This adds a time-based dimension to what was previously a spatially-fixed input method, making screen shot hacking less effective.
2Reliability
If the password input screen is changed to increase security, then the security against screen shot hacking is improved, but the device complexity increases
Solution Approach 1:
The patent applies universality by making the trajectory generation unit serve multiple functions: it generates the movement path for the character image, determines the positioning of password images, and controls the timing of password display. This multi-functional approach increases security without proportionally increasing system complexity, as a single unit handles multiple security-critical tasks.
Solution Approach 2:
The system applies self-service through the trajectory generation unit that automatically determines password image positions and timing based on the character image's movement trajectory. The system self-regulates the password input process without requiring external intervention for each security parameter, reducing operational complexity while maintaining security.
3Ease of operation
If a game-like password input method is used, then the user engagement and fun factor increase, but the potential attack surface for hacking may increase
Solution Approach 1:
The patent applies preliminary anti-action by pre-establishing security measures within the game interface. The trajectory generation unit and password image display unit are configured to prevent hacking attempts before they can succeed. The system proactively changes password locations and uses encrypted communication, built into the game design from the start, rather than adding security layers after vulnerabilities are discovered.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
An apparatus for inputting a password using a game may include a password image display unit to display at least one group password image including at least one password image, in at least one region of a display device, a receiving unit to receive at least one piece of motion information from an external input device, a character image display unit to display, on the display device, a character image that may move based on the at least one piece of motion information, a determination unit to determine which of the at least one group password image the character image contacts, and to determine which of at least one password image included in the contacted group password image is selected when a contact takes place as a result of the determination, and an authentication unit to control a user authentication procedure to be performed based on password information corresponding to the selected password image.