Dynamic Reference Point Alignment for Shoulder Surfing Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing graphical authentication systems are vulnerable to 'shoulder surfing' where a third party can observe the alignment of a user's cursor or pattern, compromising security during the authentication process.
Innovation Solution
A method that dynamically varies the position of reference points on a base and overlay image displayed on a computing device's screen, requiring the user to align these points for successful authentication, thereby obscuring the alignment from observers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a graphical authentication system uses fixed reference points for alignment, then the authentication process is simple and easy to operate, but the system becomes vulnerable to shoulder surfing attacks where observers can predict the alignment pattern
Solution Approach 1:
The patent applies dynamics by making the reference points movable rather than fixed. The base image reference point and overlay image reference point are positioned at different locations each time authentication is performed, creating a dynamic authentication process that prevents observers from predicting alignment patterns while maintaining the basic alignment mechanism for user operation
Solution Approach 2:
The patent changes the positional parameters of the reference points between authentication attempts. By varying the location of the base image reference point and/or the overlay image reference point, the system alters the authentication parameters dynamically, ensuring that each authentication instance has unique alignment requirements that cannot be predicted from previous attempts
2Productivity
If the reference points are positioned at the same location each time, then the alignment process is quick and efficient, but security is compromised as observers can easily track the cursor or finger movement pattern
Solution Approach 1:
The system maintains speed by using a simple alignment mechanism while making the target dynamic. The reference points move to different positions, but the fundamental action remains aligning two points, which keeps the authentication process quick while eliminating predictable patterns that observers could exploit
Solution Approach 2:
The system takes preliminary anti-action by pre-positioning the reference points at random locations before authentication begins. This prevents observers from predicting the alignment path in advance, as the target positions are established with anti-prediction intent, countering the shoulder surfing threat before the authentication attempt starts
Data Source
AI summary
A method of authenticating a user of a computing device is proposed, together with computing device on which the method is implemented. In the method a modified base image is overlaid with a modified overlay image on a display and with each execution of the method, at least one of a position of a pre-selected base image reference point on the modified base image and a position of a pre-selected overlay image reference point on the modified overlay image is varied. Positive authentication is indicated in response to an input resulting in the base image reference point on the modified base image being aligned with the overlay image reference point on the modified overlay image.