Graphical User Action Authentication for Weak Password Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional text-based password authentication systems are vulnerable due to users often employing weak, easily memorable passwords, which compromise security, especially in devices lacking a keyboard.
Innovation Solution
A non-text based authentication method using unique sequences of user actions, such as cursor movements and selections on a graphical user interface, which are more difficult to replicate and can be used as passcodes for verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional text-based passwords are used for authentication, then users can easily remember and input passwords, but security is compromised because passwords are susceptible to detection and are often weak
Solution Approach 1:
The patent replaces the traditional text-based password input mechanism with a graphical interaction mechanism. Instead of typing alphanumeric characters on a keyboard, users interact with graphical elements (icons, images, or interface elements) through clicking, dragging, or selecting actions. This substitution transforms the authentication input from a text-based mechanical system to a graphical interaction system, enabling strong authentication without requiring complex text entry.
Solution Approach 2:
The patent changes the parameter space of passwords from alphanumeric text to graphical action sequences. Instead of using characters from a limited alphabet, the system uses sequences of graphical interactions with multiple possible targets and action types. This parameter change expands the entropy of possible passwords while maintaining ease of input through intuitive graphical interfaces.
2Reliability
If strong passwords are created to enhance security, then unauthorized users find it difficult to reproduce them, but users struggle to remember and input such passwords
Solution Approach 1:
The patent adds spatial and temporal dimensions to password creation. Instead of linear text sequences, passwords become multi-dimensional sequences of graphical actions occurring in space (different screen locations) and time (sequence of interactions). Users might drag an icon from one location to another, click in a specific sequence across different areas of the screen, or perform gestures in particular patterns. This dimensional expansion creates strong passwords that are naturally more memorable through spatial reasoning.
Solution Approach 2:
The patent enables users to create passwords by copying or replicating visual patterns, sequences, or arrangements of graphical elements. Users might memorize a sequence of icon positions, a pattern of highlighted elements, or a series of images displayed in order. This visual copying approach leverages the human brain's strength in remembering images and spatial patterns rather than abstract text sequences.
3Device complexity
If text-based authentication is used, then implementation is simple, but security risks increase due to password weakness and reusability across applications
Solution Approach 1:
The patent creates a universal graphical authentication framework that can be applied across multiple applications and devices. The core mechanism of graphical interaction sequences serves as a platform-independent authentication method that works on touch screens, graphical user interfaces, and various input devices. This universal approach eliminates the need for application-specific password schemes and reduces password reuse across different systems.
Data Source
AI summary
An approach is provided for authenticating using user actions. A prompt is initiated on a display for an input to authenticate a user. The input is received as a sequence of user actions on the display. A predetermined sequence associated with the user is retrieved. The received sequence is compared with the predetermined sequence to determine a match. The user is declared to be authenticated based on the comparison.