Graphical Login Authentication Without Brute-Force Feedback

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing identity verification systems are vulnerable to hacking due to easily guessable passwords, reliance on biometric data that can be flawed, and provide feedback during incorrect attempts, allowing attackers to persistently try different passwords.

Innovation Solution

A graphical image-based authentication system that allows users to create personalized and complex authentication patterns using a selection of images, which are processed in the user's mind without visual cues, making it impossible for attackers to discern the correct sequence.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional passwords are used for authentication, then the system is easy to operate, but the security is weak and vulnerable to hacking

Engineering Contradiction:

Improveauthentication securityVSAvoidpassword entry complexity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical/password-based authentication system with a graphical image selection system. Instead of typing passwords that can be guessed or stolen, users select from multiple graphical images to authenticate. This substitution eliminates the vulnerability of text-based passwords while maintaining ease of use through intuitive visual selection.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent utilizes graphical images with varying visual characteristics (analogous to color changes) to create authentication patterns. Each image can have different visual properties that form a sequence, making the authentication both secure through complexity and easy to remember through visual recognition, resolving the contradiction between security and ease of operation.

Inventive Principle:

Principle #32Color changes

2Reliability

If biometric data is used for authentication, then the security is improved, but the system becomes slower and less reliable

Engineering Contradiction:

Improveauthentication accuracyVSAvoidauthentication time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent segments the authentication process into discrete graphical image selections rather than requiring complex biometric processing. By dividing authentication into separate image choice steps, the system achieves reliable verification without the time-consuming conversion and processing required by biometric systems.

Inventive Principle:

Principle #1Segmentation

3Ease of operation

If feedback is provided during password attempts, then the ease of operation is improved, but the security is compromised as attackers can persistently try different passwords

Engineering Contradiction:

Improveuser feedbackVSAvoidsecurity against brute force

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent converts the potential harm of providing feedback into a benefit by using graphical image selection without feedback. The system maintains ease of operation through intuitive visual selection while preventing brute force attacks by not revealing whether selections are correct, thereby turning the absence of feedback into a security feature rather than an operational drawback.

Inventive Principle:

Principle #22Blessing in disguise (Convert harm into benefit)

Data Source

PatentUS12499191B1System and method for verifying unique user identification

Publication Date: 2025.12.16 GRAS SEATON

AI summary

A system and method that provides the ability for users to select, create, and upload a collection of graphical images whereby a web site login process presents the user with an array of graphical images including the graphical images designated for an authentication pattern, the graphical image authentication system then determines that the graphical images chosen by the user are correct or incorrect without notifying the user until the process is complete.