Image-Based Authentication via SIM SMS and Touch Coordinates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securely providing information from electronic devices to central servers are vulnerable to security threats such as malware and man-in-the-middle attacks, and are susceptible to Denial of Service (DoS) attacks, particularly during registration and information provision processes.
Innovation Solution
A method utilizing a SIM card-equipped electronic device that initiates a secure communication channel by sending an SMS code to a central server, allowing the device to display and interpret digitally coded image data, enabling users to select image subparts corresponding to specific information, which is then translated into secure input data via a secure channel.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is used to protect information transmission, then security against interception is improved, but vulnerability to keyboard monitoring attacks and memory scanning attacks increases
Solution Approach 1:
The patent replaces traditional keyboard input mechanisms with image-based interaction. Instead of requiring users to type passwords or sensitive information on vulnerable keyboards that can be monitored by malware, the system displays images and detects touch positions on the screen. This substitution eliminates the mechanical vulnerability of keyboard monitoring while maintaining secure input capabilities.
2Ease of operation
If traditional authentication methods are used, then ease of operation is maintained, but susceptibility to DoS attacks during registration increases
Solution Approach 1:
The patent introduces an image-based intermediary layer between the user and the authentication system. Instead of direct text-based authentication that can be targeted by DoS attacks, the system uses images as a mediator. The user interacts with images through touch positions, and the system translates these positions into authentication data. This intermediary mechanism protects against DoS attacks while maintaining ease of operation.
3Productivity
If sensitive information is transmitted in plaintext or simple encryption, then communication efficiency is improved, but security against man-in-the-middle attacks deteriorates
Solution Approach 1:
The patent transitions from one-dimensional text-based communication to two-dimensional image-based communication. Instead of transmitting sensitive information as text that can be intercepted and read in a man-in-the-middle attack, the system transmits image data and touch position coordinates. This dimensional change makes the communication more resistant to interception while maintaining efficiency, as the image data itself is not the sensitive information but rather a carrier for the authentication data derived from touch positions.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
Method for providing information to a central server (130,150) using an electronic device (120,122) comprising a screen display (121,123)and a SIM card. The method comprises, first, registration steps comprising providing from the electronic device to the central server a code via an SMS message. The method further comprises, information provision steps comprising a)providing to the electronic device digitally coded image data; b)displaying on said screen display an image based on said image data to the user; c)allowing the user to select a specific part of the displayed image; d)providing to the central server a coordinate position representing the location for the specific part; e)in the central server, identifying one subpart of said displayed image, corresponding to the coordinate position;and f)translating the subpart into a piece of information corresponding to the subpart in question based upon a set of associations between specific respective such subparts and specific respective pieces of information. The invention also relates to a system (100) and a computer software product arranged to cooperate with such a system.