Graphical Image Authentication Grid for Keystroke Logging Resistance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity authentication methods for computer systems are vulnerable to keystroke logging and shoulder-surfing attacks, and existing graphical password solutions are either insecure or inconvenient for users, failing to provide a balance between security and ease of use.
Innovation Solution
A graphical image authentication system that requires users to select an authentication sequence based on categories during enrollment, using a grid of distinct visual images with randomly generated image identifiers, which are input by the user during login, making it difficult for attackers to replicate the sequence without both visual and graphical discernment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional username and password authentication is used, then ease of operation is maintained, but security is compromised due to keystroke logging and shoulder-surfing attacks
Solution Approach 1:
The patent replaces the mechanical keystroke input system with a graphical image selection system. Instead of typing passwords that can be captured by keystroke loggers, users select images from a grid display, substituting the mechanical keyboard interaction with graphical interface interaction that cannot be easily captured or replicated by traditional logging methods.
Solution Approach 2:
The patent introduces an intermediary layer between the user and the authentication system. A grid of images serves as the intermediary medium, where users select images rather than directly inputting passwords. This intermediary graphical interface prevents direct capture of authentication credentials by keystroke loggers while maintaining user-friendly interaction.
2Reliability
If graphical password systems are implemented to improve security, then resistance to keystroke logging increases, but vulnerability to shoulder-surfing attacks remains
Solution Approach 1:
The patent implements dynamic image grids where the arrangement, selection, and presentation of images change with each authentication attempt. The grid configuration is not static but adapts and varies, making it difficult for observers to predict or replicate the authentication sequence through shoulder-surfing, while maintaining the graphical interface benefits.
3Reliability
If complex authentication sequences are used to increase security, then brute force attack resistance improves, but user convenience and recall ability deteriorate
Solution Approach 1:
The patent utilizes visual characteristics of images (analogous to color changes principle) where users select from a grid of distinct visual images. The visual nature of the authentication elements provides mnemonic aids that help users remember their authentication sequences more easily than abstract character passwords, while the grid system provides sufficient complexity to resist brute force attacks.
Data Source
AI summary
Systems and methods for providing authentication using an arrangement of dynamic graphical images. The graphical images can be arranged as a grid or matrix for presentation on a device display for authentication of a user. The kinds of graphical images can be derived from a designated authentication category and non-authenticating categories. A series of password elements corresponding to the graphical images can be displayed with the graphical images. The user may enter the series of one or more password elements corresponding to graphical images from the authentication category which combine to form a password entry. An authentication server can compare the password entry to an authentication password corresponding to the particular arrangement of dynamic graphical images. The selection of graphical images, their arrangement and their corresponding password elements, may dynamically change in between authentication processes.