Gesture-Based Password Entry for Encrypted Mobile Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Full-disk encryption on mobile devices makes password or PIN entry difficult due to small keyboards and biometric matching issues, leading to security concerns.
Innovation Solution
Implementing a gesture-based password system where user inputs are converted to gesture data, hashed, and used to encrypt and decrypt a master key for accessing encrypted storage, allowing deterministic key generation for secure device unlocking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If full-disk encryption is implemented on mobile devices, then data security is improved, but password/PIN entry becomes difficult due to small keyboards
Solution Approach 1:
The patent replaces the mechanical keyboard input system with a gesture-based input system. Users draw gestures on the touchscreen display, and the system converts these gestures into cryptographic keys through hashing algorithms, eliminating the need for physical keyboard interaction while maintaining security.
Solution Approach 2:
The patent introduces gesture recognition and hashing algorithms as intermediaries between user input and the encryption system. The gesture serves as an intermediary that is easily inputtable on touchscreens, while the hashing algorithm acts as an intermediary that converts the gesture into a secure cryptographic key.
2Ease of operation
If biometric credentials are used for unlocking, then ease of operation is improved, but security is reduced due to fuzzy logic matching and storage requirements
Solution Approach 1:
The patent extracts the biometric template from the device storage, keeping only the hashed gesture key on the device. The actual biometric data remains on the server, eliminating the security risk of storing sensitive biometric information locally while maintaining authentication capability.
Solution Approach 2:
The patent changes the parameter of biometric data from stored templates to hashed gesture representations. By transforming the biometric input into a hashed cryptographic key, the system achieves both ease of operation and enhanced security.
3Ease of operation
If gesture data is stored for verification, then ease of operation is improved, but security is reduced due to potential key exposure
Solution Approach 1:
The patent converts the potential harm of storing gesture data into a benefit by implementing server-side verification. The server stores the original gesture data and performs the verification, while the device only holds the hashed key, thus converting the security risk into a secure architecture.
Solution Approach 2:
The patent introduces a server as an intermediary that handles the storage and verification of gesture data. This intermediary architecture allows the device to maintain security by not storing sensitive data locally, while still enabling gesture verification through the server.
Data Source
AI summary
Systems and techniques are provided for gesture-based password entry to unlock an encrypted device. A gesture input from a user to a gesture interface may be received. The gesture input may be converted to gesture data which may be hashed using a hashing algorithm to obtain a table key. A table including a master key may be encrypted using the table key. The master key may include a key for decrypting a primary storage that is at least partially encrypted. A second gesture input may be receive. The second gesture input may be an input from a user to the gesture interface. The second gesture input may be converted to second gesture data which may be hashed using the hashing algorithm to obtain a key equivalent to the table key. The table including the master key may be decrypted using the key equivalent to the table key.