Image-Based Authentication Using Visual Memory for Dynamic Passwords
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication systems lack the ability to dynamically adjust password difficulty based on conditions and do not provide variance in proof of knowledge, which are essential for enhancing security and user experience.
Innovation Solution
An image-based authentication system that uses visual memory to present a set of images with secret segments, allowing users to select these segments as a dynamic password, which changes with each session and can be adjusted in length based on usage conditions, eliminating the need for text input and providing a unique password for each access attempt.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional text-based passwords are used, then authentication is simple and straightforward, but security is compromised due to static passwords being vulnerable to hacking attempts
Solution Approach 1:
The patent implements dynamic passwords that change with each authentication session. Instead of using a static text password, the system generates a unique password for each login attempt, making it resistant to hacking attempts while maintaining ease of operation through automated generation and delivery of these dynamic credentials.
Solution Approach 2:
The system changes the parameter of password variability by using different passwords for each session. This is achieved through onetime passwords (OTP) that are generated and delivered to the user before each authentication event, transforming the static password parameter into a dynamic one that enhances security without complicating the user experience.
2Reliability
If onetime passwords are delivered to users, then variance of proof of knowledge is achieved, but text-based input is required which reduces usability
Solution Approach 1:
The patent replaces the mechanical text input system with a visual recognition system. Instead of requiring users to type passwords, the system presents visual challenges (such as images or patterns) that users recognize and select from the display. This substitution eliminates the need for text input while maintaining variance in proof of knowledge through different visual challenges for each authentication session.
3Adaptability or versatility
If a single universal authentication level is implemented, then system simplicity is maintained, but authentication on a scale is lost which reduces adaptability
Solution Approach 1:
The patent implements dynamic authentication levels that can be adjusted based on contextual factors. The system can scale the difficulty or rigor of authentication challenges depending on conditions such as user behavior patterns, device recognition, or security risk assessment, providing adaptability without requiring complex manual configuration.
Solution Approach 2:
The system uses feedback mechanisms to adjust authentication requirements. By monitoring user behavior, device information, and authentication history, the system dynamically modifies the authentication challenge level, providing easier authentication for trusted contexts and stricter verification for suspicious activities, thereby achieving authentication on a scale with manageable complexity.
4Ease of operation
If visual memory-based authentication is implemented, then non-text-based authentication is achieved improving ease of operation, but the system complexity increases
Solution Approach 1:
The patent replaces text-based mechanical input with visual recognition interaction. Users authenticate by recognizing and selecting visual elements (images, patterns, or objects) from the display based on previously viewed reference images. This substitution improves ease of operation through natural visual interaction while the underlying system complexity is managed through standardized visual challenge generation and verification protocols.
Data Source
AI summary
Passwords are used in various system access applications in order to ascertain that the user seeking access to a system resource is indeed the person with said access. Passwords are usually supposed to be entered through a keyboard and are a combination of alphanumeric values. With the advent of devices equipped with visual displays and touch inputs, it is possible to create a system which utilizes a person's visual memory to authenticate the person.A system and method is described which uses multiple images to perform authentication. This system does not require its user to input a text value as a password. The password is created by user's actions. These actions are in the form of selecting a segment on a displayed image. Few different systems are described. One system is capable of creating variable passwords which by design keep changing from one authentication attempt to another. Another system uses one high resolution image to effectively hide the password in an image with lots of detail.