Hidden-Factor PIN Entry Using Finger Movement Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices are vulnerable to shoulder surfing attacks, where attackers physically view the screen and keypad to obtain personal identification numbers (PINs), despite multi-factor authentication measures.
Innovation Solution
A system that enhances PIN security by incorporating hidden factors, where the client agent collects input entry data based on finger movements and sends it to a server agent for validation, considering how the PIN was entered, using animation and transformation groups to configure personalized entry.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-factor authentication is implemented, then security against unauthorized access is improved, but the system complexity increases
Solution Approach 1:
The patent embeds multiple authentication factors within a single PIN entry process. The hidden factors (animation group and transformation group) are nested inside the standard PIN entry mechanism, allowing them to be captured without adding separate authentication steps. This resolves the contradiction by maintaining security improvement while avoiding additional system complexity through integration rather than addition.
Solution Approach 2:
The patent changes the parameters of the PIN entry process by capturing additional characteristics (animation group: touch location, nudge direction, twist direction, hold duration; transformation group: shift amount, jump amount) alongside the standard PIN value. These parameter changes enable enhanced security without requiring new authentication mechanisms, thus improving reliability without proportionally increasing system complexity.
2Reliability
If hidden factors are added to PIN entry, then security against shoulder surfing attacks is improved, but the ease of operation decreases
Solution Approach 1:
The system automatically captures and processes the hidden factors during the normal PIN entry process without requiring users to consciously provide them. The client agent detects and tracks finger movements, animations, and transformations automatically, making the user's natural input behavior serve the dual purpose of PIN entry and security authentication. This resolves the contradiction by maintaining ease of operation (no extra user actions needed) while improving security through automatic capture of behavioral characteristics.
Solution Approach 2:
The patent merges the standard PIN entry function with the hidden factor capture function into a single unified process. The same finger movements that enter the PIN also automatically generate the animation group and transformation group data. This combining of functions allows security enhancement without adding separate operational steps, thus maintaining ease of operation while improving reliability.
3Measurement precision
If finger movement tracking is implemented, then authentication accuracy is improved, but the device complexity increases
Solution Approach 1:
The client agent performs multiple functions using the same finger movement tracking capability: it detects touch locations, measures hold durations, captures animation sequences, and records transformation data. This multi-functionality approach allows high authentication accuracy through comprehensive data collection while avoiding the need for separate specialized sensors for each measurement type, thus improving measurement precision without proportionally increasing device complexity.
Data Source
AI summary
Provided is a system (100) to enhance Personal Identification Number (PIN) security with hidden factors (271, 272, 273, 274) comprises a client agent (111) and a server agent (130). The client agent (111) manages a touchscreen or keypad, handles display layout, detects and tracks a finger movement on the touchscreen, and collects input entry of a PIN (311) from the finger movement based on hidden factors that configure use of the touchscreen or keypad, where the input entry (310) consists of an entered PIN, and information (312) on how the PIN was entered. The server agent (133) can be communicatively coupled to the client agent (111), and receives the input entry for the PIN, and validates the PIN that was entered in view of the information (312) on how the PIN was entered based on a policy configuration (410, 420, 430, 440) for the hidden factors for the input entry on said touchscreen or keypad. Other embodiments disclosed.