Dynamic Virtual Keyboard for Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication systems face security concerns due to keyboard logging and shoulder surfing, as users enter credentials on traditional keyboards, which are not effectively protected against unauthorized access.
Innovation Solution
A processor-implemented method and system that provides a multidimensional keyboard in an m×n format, with input receiving identifiers, allowing users to input credentials by identifying letters and patterns, and authenticating based on pre-registered sets, while shuffling letters to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional keyboards are used for credential input, then ease of operation is improved, but security is worsened due to keyboard logging and shoulder surfing
Solution Approach 1:
The keyboard layout is dynamically shuffled between different configurations (e.g., QWERTY, Dvorak, AZERTY) and rotated at different angles (0°, 90°, 180°, 270°) for each authentication session. This dynamic transformation ensures that even if someone captures a screenshot or observes the keyboard, they cannot reliably predict the actual key positions, thereby preventing shoulder surfing and keyboard logging attacks while maintaining ease of operation through familiar keyboard patterns.
Solution Approach 2:
The system pre-registers multiple keyboard layouts and rotation angles before the authentication process. During authentication, the system randomly selects and applies one of these pre-prepared configurations. This preliminary preparation allows the system to quickly switch between secure configurations without requiring complex real-time generation, thus maintaining both security and operational efficiency.
2Reliability
If keyboard layouts are shuffled dynamically, then security is improved by preventing shoulder surfing, but device complexity increases
Solution Approach 1:
The system changes parameters such as keyboard layout type (QWERTY, Dvorak, AZERTY, etc.) and rotation angle (0°, 90°, 180°, 270°) for each authentication session. These parameter changes are implemented through software configuration rather than hardware modification, keeping the device complexity manageable while achieving high security. The virtual keyboard can be easily reconfigured without physical changes to the device.
Solution Approach 2:
The virtual keyboard implementation serves multiple functions: it displays credentials, handles input, and dynamically transforms its layout for security. By combining these functions into a single software-based virtual keyboard system, the patent avoids the need for multiple separate components, thereby reducing overall device complexity while maintaining security enhancements.
3Reliability
If virtual keyboard is used instead of physical keyboard, then security is improved by preventing physical keyboard logging, but ease of operation is worsened
Solution Approach 1:
The virtual keyboard dynamically changes its layout configuration between authentication sessions, shuffling key positions and rotating the entire keyboard structure. This dynamic transformation prevents keyboard logging attacks while maintaining ease of operation because the familiar relative positions and patterns of keys are preserved within each session, allowing users to adapt quickly without significant learning curve.
Solution Approach 2:
The system creates a virtual copy of the physical keyboard interface that replicates its functionality and familiar layout patterns. This virtual copy can be easily transformed and reconfigured without affecting the underlying input mechanisms, thus maintaining ease of operation while enabling security enhancements through dynamic layout changes that prevent logging attacks.
Data Source
AI summary
An authentication system and method is provided. The system: (a) provides a keyboard comprising a letters in a m×n format, ‘m’ represents rows, and n represents columns, each row or column includes a sub-set of the letters, (b) provides input receiving identifiers, each input receiving identifier specific to at least one row or column, (c) processes an input on at least one input receiving identifier from the set of input receiving identifiers, (d) identifies a first intended letter from a first sub-set of letters from a corresponding row or column based on the input, (e) repeats steps (c) and (d) until a last intended letter from a last sub-set of letters is identified to obtain intended identified letters, (f) performs a comparison between the intended identified letters with a pre-registered set of letters stored in a memory, and (g) triggers at least one action based on the comparison.