Dynamic PIN Pad Authentication via Signal Substring Mapping

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The increasing use of smartphones in electronic payment transactions poses a challenge in ensuring the secure processing of security-relevant data, such as PINs, as existing methods lack robustness against potential attacks and data breaches.

Innovation Solution

An electronic communication device and authentication server system that generates and processes a random bit string, using a PIN pad to convert user inputs into substrings, which are then encrypted and transmitted for secure authentication, with dynamic display and position changes of the PIN pad to enhance security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a traditional PIN pad is used for authentication, then the ease of operation is maintained, but the security against attacks and data breaches deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidcomplexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The PIN pad is divided into multiple independent button elements, each capable of generating unique electrical signals. This segmentation allows the system to differentiate between various button press patterns and combinations, enhancing security without requiring a completely new device architecture.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces dynamic characteristics to the PIN pad by measuring not only which buttons are pressed but also the temporal patterns, pressure variations, and sequencing of presses. This dynamic approach creates a living authentication system that adapts to user behavior patterns while maintaining ease of use.

Inventive Principle:
Principle #15Dynamics

2Reliability

If security measures are enhanced to protect PIN data, then the reliability improves, but the ease of operation deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The PIN pad system performs self-verification by automatically analyzing the electrical signals generated during button presses against stored authentication patterns. The system serves itself by detecting and validating authentication attempts without requiring external intervention or complex user input, maintaining simplicity while enhancing security.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent changes the parameters measured from simple binary button states to multi-dimensional signal characteristics including temporal patterns, pressure magnitude, press duration, and sequencing. This parameter expansion allows the same physical interface to provide enhanced security without changing the user's interaction method.

Inventive Principle:
Principle #35Parameter changes

3Device complexity

If a virtual PIN pad is displayed on a touch display, then the device complexity is reduced, but the security against interception and decoding deteriorates

Engineering Contradiction:
ImprovecomplexityVSAvoidsecurity
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent introduces an intermediary layer between the visual display and the authentication verification process. Electrical signals from the touch display are routed through a dedicated processing circuit that analyzes signal characteristics before authentication is confirmed. This intermediary processing layer secures the authentication path without adding visible complexity to the user interface.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional mechanical PIN pad buttons with a touch display interface that uses electrical touch signals. The authentication mechanism is substituted from physical button mechanics to electrical signal analysis, maintaining security while reducing device complexity and enabling more flexible interface designs.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

4Reliability

If the PIN pad position and display are made dynamic, then the security improves, but the ease of operation deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The PIN pad elements are made dynamically reconfigurable, where button positions, sizes, and visual characteristics can change based on authentication context. The system maintains ease of operation by adapting the display to user preferences and authentication scenarios, while the dynamic reconfiguration enhances security through unpredictability.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system performs preliminary analysis of touch signal characteristics before final authentication confirmation. By pre-validating signal patterns and preparing authentication decisions in advance, the system reduces operational delays while maintaining enhanced security through preliminary security checks that don't visible delay user interaction.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3979556B1Electronic communication device for performing an authentication operation
Publication Date: 2023.05.24 RUBEAN AG
  • EP3979556B1 patent drawingFigure 1
  • EP3979556B1 patent drawingFigure 1a
  • EP3979556B1 patent drawingFigure 1b

AI summary

An electronic communication device (120), such as a smartphone, for performing an authentication session, in particular for a payment transaction is disclosed. The electronic communication device (120) comprises a communication interface (123) configured to receive for the authentication session a random bit string from the authentication server (140) and mapping information from a security server (150), wherein the mapping information defines a mapping of each of a plurality of integer values to a respective substring of the random bit string. The electronic communication device (120) further comprises a PIN pad configured to generate, in response to each of a sequence of operations of the PIN pad by a user (120a), a respective PIN pad signal, and a processing circuitry (121) configured to generate based on each PIN pad signal a respective input integer value and to determine based on the mapping information for the respective input integer value the respective substring of the random bit string. The communication interface (123) is further configured, once a pre-defined number of input integer values have been entered, to transmit the plurality of substrings of the random bit string to the authentication server (140) for processing the authentication session. Moreover, a correspondingly configured authentication server (140) is disclosed.