Dynamic Virtual Key Interface for Fraud Resistant Passcode Entry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for secure data entry and access, particularly in systems like ATMs and debit transactions, are vulnerable to fraud due to weaknesses in human-machine interfaces and the limited security of PINs, which can be guessed or observed, leading to significant financial losses.
Innovation Solution
A method for secure passcode entry and verification using a dynamic interface with virtual keys associated with multiple properties such as numbers, characters, symbols, colors, patterns, sounds, textures, and orientation, where the properties are randomly rearranged upon each use, making it difficult to discern the selection process and requiring multiple observations for passcode disclosure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a traditional PIN entry interface is used, then the system is simple to operate, but it is vulnerable to shoulder surfing and skimming attacks
Solution Approach 1:
The passcode is segmented into multiple properties (number, character, symbol, color, pattern, sound, texture, orientation) where each property can be independently selected and combined. This segmentation allows the system to increase security through property combinations while maintaining operational simplicity through modular selection processes.
Solution Approach 2:
The interface transitions from traditional 2D visual display to multi-dimensional interaction by incorporating tactile properties (textures, vibrations), auditory properties (sounds), and spatial properties (orientations). This dimensional expansion creates multiple sensing modalities that prevent observation-based attacks while maintaining ease of use through natural human senses.
2Reliability
If PIN combinations are limited to four digits, then the entry process is quick and simple, but the probability of successful guessing increases
Solution Approach 1:
The system changes the parameters of the passcode from simple numeric digits to multi-property combinations including number, character, symbol, color, pattern, sound, texture, and orientation. This parameter expansion exponentially increases the search space for guessing attacks while the system maintains quick verification through efficient property matching algorithms.
Solution Approach 2:
The passcode becomes a composite of multiple property types rather than a single numeric sequence. Each position in the passcode can combine different property types (e.g., a colored shape with specific orientation and texture), creating a composite authentication element that resists guessing while maintaining rapid verification through structured property comparison.
3Reliability
If virtual keys are repositioned between uses, then distant observation is prevented, but close observation remains effective
Solution Approach 1:
The interface dynamically changes the properties and positions of virtual keys between each passcode entry attempt. Rather than static key positions, the system randomly reassigns properties (colors, shapes, orientations) and positions to keys, creating a dynamic interface that prevents both distant and close observation while adapting to each user interaction session.
Solution Approach 2:
The system incorporates color as a variable property of virtual keys that changes between uses. By randomly assigning and changing colors of keys and their associated properties, the interface prevents observation-based attacks where attackers might memorize key positions or patterns, while users can still easily identify and select the correct properties through visual differentiation.
Data Source
AI summary
A method for user passcode authentication. The method includes accessing a user information database with predefined user input option parameters and generating a random arrangement of input options from the predefined user input option parameters. The method includes manifesting the random arrangement of input options on an interactive display interface and receiving a selection of the interactive display interface input options. The method also includes comparing the received selection of interactive display interface options to the predefined user input option parameters.