Image-Based Authentication Using Steganographic Hash Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional username/password combinations for user authentication are becoming less secure and less reliable, leading to user frustration and potential brute-force attacks, necessitating more complex approaches that are cumbersome.
Innovation Solution
An image-based login and authentication system that uses steganography to embed hash numbers and random numbers in target images, allowing users to authenticate via image selection, with enhanced security through encrypted identification tokens and image blockchains.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional username/password authentication is used, then the authentication process is simple and familiar to users, but security becomes compromised and vulnerable to brute-force attacks
Solution Approach 1:
The patent replaces the traditional mechanical/password-based authentication system with an image-based authentication system. Instead of relying on users to remember and enter complex passwords, the system uses visual recognition of images containing embedded hash codes. This substitution maintains security while significantly improving user convenience, as users can authenticate through natural image recognition rather than recalling complex password strings.
Solution Approach 2:
The patent transforms the authentication parameter from text-based (passwords) to image-based (visual patterns). By embedding hash codes within images and using image recognition technology, the system changes the fundamental parameter of authentication from alphanumeric sequences to visual patterns, thereby enhancing security against brute-force attacks while maintaining ease of use through human visual processing capabilities.
2Reliability
If more complex authentication approaches are implemented to improve security, then authentication security improves, but user frustration increases and the process becomes cumbersome
Solution Approach 1:
The patent extracts the security-critical hash codes and embeds them within images that users can visually recognize. By separating the security function (hash verification) from the user interaction function (image recognition), the system achieves high security through cryptographic hash verification while maintaining simplicity in user interaction. Users only need to recognize images, not understand or enter complex security protocols.
Solution Approach 2:
The patent introduces images as an intermediary between the user and the authentication system. These images serve as carriers that embed hash codes while presenting a simple visual interface to users. The intermediary images enable the system to implement complex security verification (hash matching) without exposing the complexity to users, who only interact with the simple visual recognition task.
3Reliability
If steganography is used to embed hash numbers in images, then security against forgery is enhanced, but the system complexity increases
Solution Approach 1:
The patent performs preliminary embedding of hash codes into images during the authentication setup phase. By pre-embedding the hash codes within the image data using steganography techniques, the system prepares the security mechanism in advance. During actual authentication, this pre-prepared structure allows for simple verification without requiring complex real-time processing, thus enhancing anti-forgery security while minimizing operational complexity.
Data Source
AI summary
A system and method are provided for image-based login and authentication. The system displaying a plurality of random images to a user; receiving from the user a selection of at least one target image from the plurality of random images; generating a hash number for the at least one target image; generating an encrypted identification token; and associating the encrypted identification token with the user. The hash number identifies the at least one target image. The encrypted identification token includes the hash number.