Dynamic PIN Authentication via Random Character Replacement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for chip cards are vulnerable to keylogger attacks, where attackers can intercept and misuse PIN sequences, and do not provide adequate protection against unauthorized access, especially when used with public computer networks.
Innovation Solution
A method that uses a random generator to create a dynamic PIN by replacing characters in a static PIN sequence, displaying only the replaced characters and their positions, making it difficult for attackers to guess the original sequence, even if they intercept the input, and ensuring that only partial information is displayed, thus enhancing security without requiring advanced chip card readers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a static PIN sequence is used for authentication, then the authentication process is simple and easy to operate, but the system becomes vulnerable to keylogger attacks and unauthorized access
Solution Approach 1:
The patent transforms the static PIN into a dynamic authentication sequence by randomly selecting and replacing characters before each authentication attempt. The character sequence changes dynamically based on random selection, making each authentication challenge unique and preventing keylogger attacks from capturing reusable credentials
Solution Approach 2:
The system performs preliminary random character selection and sequence generation before the actual authentication input. By pre-generating the modified character sequence with randomly replaced characters and displaying it to the user beforehand, the system prepares the dynamic authentication challenge in advance, ensuring security without adding complexity during the authentication moment
2Ease of operation
If all characters of the PIN are displayed for user input, then the user can easily enter the correct sequence, but attackers can intercept and record the complete PIN sequence
Solution Approach 1:
Instead of displaying all characters of the authentication sequence, the system displays only a subset of characters that the user needs to input. By showing only certain characters and their positions rather than the complete sequence, the system provides enough information for legitimate users while limiting the exposure of authentication data to potential attackers
Solution Approach 2:
The patent applies different display properties to different parts of the character sequence. Certain characters are displayed for user input while others are hidden or obscured. This localized differentiation ensures that only the necessary portion of the authentication data is exposed, maintaining user convenience while enhancing security against interception
Data Source
AI summary
A document having a non-volatile memory area for storing a secret identifier that has a first n-digit character sequence from a predefined character set; a random generator for selecting at least one character from the predefined character set for replacement of at least one character of the first character sequence, such that a second n-digit character sequence is defined as a result of this replacement; a volatile memory area for storing the at least one selected character; a display device for displaying the at least one selected character; an interface for inputting a third character sequence; and a processor element for authenticating the user to the document, wherein the processor element is configured to access the non-volatile memory area and the volatile memory area in order to read the second character sequence and check for a match between the second and third character sequences in order to authenticate the user.