Image-Based Authentication Using Grid Encryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional password-based user authentication systems are vulnerable to fraud, especially in public spaces and over the internet, as users often have to remember multiple complex passwords, making them inconvenient and susceptible to theft.

Innovation Solution

An image-based authentication system where users select verification images and perform actions on target locations, with encryption of these actions' positions using a grid system, enhancing security by making passwords more difficult to misappropriate.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional password-based authentication is used, then user authentication can be performed, but the system is vulnerable to fraud and password theft in public spaces and over the internet

Engineering Contradiction:
Improveauthentication securityVSAvoidpassword theft risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent replaces traditional text-based password input with image-based authentication. Instead of typing passwords that can be captured through malware or shoulder surfing, users interact with images by selecting target locations and performing actions on them. This substitution of mechanical input method fundamentally reduces the vulnerability to password theft while maintaining authentication reliability.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent transforms the authentication parameter from text strings to image coordinates and action sequences. By changing the fundamental nature of the password from alphanumeric characters to spatial positions and gestures on images, the system eliminates the primary attack vectors targeting traditional passwords while preserving the core authentication function.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If multiple complex passwords are required for different applications, then security is improved, but user convenience and ease of operation deteriorate

Engineering Contradiction:
ImprovesecurityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent creates a universal image-based authentication system that can be applied across multiple applications and platforms. The same image interaction paradigm works for local applications, web applications, and mobile apps, eliminating the need for users to learn and remember different complex passwords for each application while maintaining strong security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent divides the authentication process into distinct actionable components: selecting target locations on images, performing actions on those locations, and sequencing these actions. This segmentation makes the authentication process more manageable and easier to remember compared to complex multi-component passwords, while still providing equivalent or superior security.

Inventive Principle:
Principle #1Segmentation

3Ease of operation

If text-based passwords are used, then authentication can be performed, but they are vulnerable to misappropriation by thieves through malware or observation

Engineering Contradiction:
ImprovesimplicityVSAvoidmisappropriation vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent replaces the mechanical act of typing text passwords with graphical interactions involving image selection and gesture input. This substitution eliminates the vulnerability to keyloggers and malware that capture text input, while the visual nature of image-based authentication also makes it harder for observers to capture through shoulder surfing or screen recording.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS10140465B2Methods and systems for user authentication in a computer system using multi-component log-ins, including image-based log-ins
Publication Date: 2018.11.27 OLSEN KREUSCH SUSAN
  • US10140465B2 patent drawing
  • US10140465B2 patent drawing
  • US10140465B2 patent drawing

AI summary

In computer-based user authentication, a user may establish or enhance security for a component of a multi-component password by performing a security operation on a selected component of the password. The security operation may comprise encrypting the selected component. The password may be an image-based password and security operation may be encrypting information related to positions of at least one target location on a verification image.