Gesture-Based Password Authentication for Stored Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern computing systems face security risks due to the storage of user credentials on devices, particularly on mobile devices, as they can be vulnerable to unauthorized access.
Innovation Solution
Implementing a gesture-based password authentication method that requires users to input gesture credentials, which can include human gestures detected by sensors, to authenticate access to a remote server, thereby enhancing security by adding an additional layer of complexity to the authentication process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If credentials are stored on the computing device for convenience, then authentication speed is improved, but security is worsened due to risk of unauthorized use
Solution Approach 1:
The authentication system is segmented into two distinct components: stored credentials for efficient authentication and gesture-based password for security verification. This segmentation allows the system to benefit from both quick authentication (using stored credentials) and strong security (using biometric verification), resolving the contradiction between authentication speed and security.
Solution Approach 2:
The gesture-based password acts as an intermediary layer between the stored credentials and unauthorized access. Even if credentials are compromised, the biometric intermediary prevents unauthorized use, while still allowing legitimate users to authenticate quickly using their enrolled gestures.
2Object-affected harmful factors
If gesture-based password authentication is implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The gesture-based password system uses existing sensors (camera, microphone, motion sensors) already present in modern devices for other purposes. By making these multi-functional, the system adds biometric authentication capability without requiring entirely new hardware, thus limiting the increase in device complexity.
Solution Approach 2:
The system uses the device's own existing sensors and processing capabilities to perform gesture verification, rather than requiring external authentication hardware. This self-service approach minimizes additional complexity by leveraging resources already available in the device.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach minimizes the risk of unauthorized access to stored credentials while providing users with the convenience of stored credentials, as only authorized users can successfully authenticate using their predefined gesture credentials.
Implementation Method 1
at least one sensor to identify human gestures
Data Source
AI summary
Authentication to a remote-server from a computing device having stored credentials for the remote server is described. In one example, a method of authenticating a user to a remote server through a client application executing on a computing device includes: receiving, by the client application, a request to authenticate the user to the remote server using credentials stored on the computing device; prompting, by the client application, the user for gesture-based password; authenticating, by the client application, the gesture-based password; and sending, by the client application, the stored credentials to the remote server for authentication in response to successful authentication of the gesture-based password.