Graphical Image Authentication System for Keystroke Logging Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity authentication methods, such as username/password pairs, are vulnerable to keystroke logging, shoulder-surfing, and brute force attacks, and existing graphical password systems face issues with user convenience and security, as they can be easily replicated or forgotten.
Innovation Solution
A graphical image authentication system where users select an authentication sequence of image categories during enrollment, with randomly generated image identifiers overlaid on images in a grid, requiring graphical discernment and input during login, making it difficult for attackers to capture keystrokes or replicate the sequence.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If username and password authentication is used, then ease of operation is improved, but security is worsened due to vulnerability to keystroke logging and shoulder-surfing attacks
Solution Approach 1:
The patent replaces the mechanical keyboard input system with a graphical image selection system. Instead of typing passwords that can be captured by keystroke loggers, users interact with visual images on a display screen, selecting images that correspond to their authentication credentials. This substitution eliminates the vulnerability to keystroke logging while maintaining user-friendly interaction through graphical interfaces.
Solution Approach 2:
The patent introduces an intermediary layer between the user and the authentication system. A grid of images is displayed as an intermediary interface, where each image represents a specific authentication value. The system translates user selections of these intermediate image representations into the actual authentication credentials, adding a layer of obfuscation that prevents direct observation of the authentication process by shoulder-surfing attackers.
2Reliability
If graphical password systems are implemented, then security is improved, but ease of operation is worsened due to user convenience issues and memorization difficulties
Solution Approach 1:
The patent changes the parameter of authentication from text-based passwords to image-based selection. By transforming the authentication medium from alphanumeric characters to visual images, the system leverages human visual processing strengths and memory capabilities. Users can more easily remember and distinguish between multiple images compared to complex password strings, thereby improving convenience while maintaining security.
3Reliability
If physical authentication devices are used, then security is improved, but device complexity and cost are worsened
Solution Approach 1:
The patent creates a virtual copy of the physical authentication device functionality within the software interface itself. The grid of images displayed on the screen replicates the authentication challenge-response mechanism traditionally provided by physical devices, but in a digital form that requires no additional hardware. This eliminates the need for separate physical authentication devices while maintaining the security benefits of challenge-based authentication.
Data Source
AI summary
A method and system for protection of and secure access to a computer system or computer network. The method includes the steps of receiving a first login account identifier, such as a user name from a user in communication with the computer system or network. A determination is made if the user is recognized and enrolled from the first login account from the first login account identifier. If the user is recognized, a grid of randomly generated visual images is displayed including one visual image from an image category which has been preselected by the user upon enrollment. An image category identifier is randomly assigned to each visual image in the grid. An image category identifier, second login account identifier, such as a password, is entered and received. If the login account identifier and the image category is validated, access is permitted to the computer system or network.