Dynamic PIN Pad Authentication via Signal Substring Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing use of smartphones in electronic payment transactions poses a challenge in ensuring the secure processing of security-relevant data, such as PINs, as existing methods lack robustness against potential attacks and data breaches.
Innovation Solution
An electronic communication device and authentication server system that generates and processes a random bit string, using a PIN pad to convert user inputs into substrings, which are then encrypted and transmitted for secure authentication, with dynamic display and position changes of the PIN pad to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a traditional PIN pad is used for authentication, then the ease of operation is maintained, but the security against attacks and data breaches deteriorates
Solution Approach 1:
The PIN pad is divided into multiple independent button elements, each capable of generating unique electrical signals. This segmentation allows the system to differentiate between various button press patterns and combinations, enhancing security without requiring a completely new device architecture.
Solution Approach 2:
The patent introduces dynamic characteristics to the PIN pad by measuring not only which buttons are pressed but also the temporal patterns, pressure variations, and sequencing of presses. This dynamic approach creates a living authentication system that adapts to user behavior patterns while maintaining ease of use.
2Reliability
If security measures are enhanced to protect PIN data, then the reliability improves, but the ease of operation deteriorates
Solution Approach 1:
The PIN pad system performs self-verification by automatically analyzing the electrical signals generated during button presses against stored authentication patterns. The system serves itself by detecting and validating authentication attempts without requiring external intervention or complex user input, maintaining simplicity while enhancing security.
Solution Approach 2:
The patent changes the parameters measured from simple binary button states to multi-dimensional signal characteristics including temporal patterns, pressure magnitude, press duration, and sequencing. This parameter expansion allows the same physical interface to provide enhanced security without changing the user's interaction method.
3Device complexity
If a virtual PIN pad is displayed on a touch display, then the device complexity is reduced, but the security against interception and decoding deteriorates
Solution Approach 1:
The patent introduces an intermediary layer between the visual display and the authentication verification process. Electrical signals from the touch display are routed through a dedicated processing circuit that analyzes signal characteristics before authentication is confirmed. This intermediary processing layer secures the authentication path without adding visible complexity to the user interface.
Solution Approach 2:
The patent replaces traditional mechanical PIN pad buttons with a touch display interface that uses electrical touch signals. The authentication mechanism is substituted from physical button mechanics to electrical signal analysis, maintaining security while reducing device complexity and enabling more flexible interface designs.
4Reliability
If the PIN pad position and display are made dynamic, then the security improves, but the ease of operation deteriorates
Solution Approach 1:
The PIN pad elements are made dynamically reconfigurable, where button positions, sizes, and visual characteristics can change based on authentication context. The system maintains ease of operation by adapting the display to user preferences and authentication scenarios, while the dynamic reconfiguration enhances security through unpredictability.
Solution Approach 2:
The system performs preliminary analysis of touch signal characteristics before final authentication confirmation. By pre-validating signal patterns and preparing authentication decisions in advance, the system reduces operational delays while maintaining enhanced security through preliminary security checks that don't visible delay user interaction.
Data Source
Figure 1
Figure 1a
Figure 1b
AI summary
An electronic communication device (120), such as a smartphone, for performing an authentication session, in particular for a payment transaction is disclosed. The electronic communication device (120) comprises a communication interface (123) configured to receive for the authentication session a random bit string from the authentication server (140) and mapping information from a security server (150), wherein the mapping information defines a mapping of each of a plurality of integer values to a respective substring of the random bit string. The electronic communication device (120) further comprises a PIN pad configured to generate, in response to each of a sequence of operations of the PIN pad by a user (120a), a respective PIN pad signal, and a processing circuitry (121) configured to generate based on each PIN pad signal a respective input integer value and to determine based on the mapping information for the respective input integer value the respective substring of the random bit string. The communication interface (123) is further configured, once a pre-defined number of input integer values have been entered, to transmit the plurality of substrings of the random bit string to the authentication server (140) for processing the authentication session. Moreover, a correspondingly configured authentication server (140) is disclosed.