Image-Based Authentication Password Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Character-based passwords and PINs are insecure due to ease of guessing, reuse across multiple accounts, difficulty in entering lengthy passwords on small keyboards, limited combination options, and vulnerability to brute-force attacks, leading to potential cascading fraud.
Innovation Solution
Implementing image-based authentication systems where users create passwords from personalized images, which are displayed in arrays with decoy images, requiring users to select and arrange images correctly to access secure systems or networks, providing a virtually limitless number of combinations and enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If character-based passwords are made longer to increase security, then security improves, but ease of operation deteriorates due to difficulty in entering lengthy passwords on small keyboards
Solution Approach 1:
The patent replaces the mechanical keyboard input system with an image-based selection system. Instead of typing lengthy character passwords on small keyboards, users select images from a grid display. This substitution eliminates the physical constraint of small keyboard layouts while maintaining or enhancing security through image-based authentication that can convey more information than character sequences.
Solution Approach 2:
The patent changes the fundamental parameter of password representation from characters to images. This parameter change allows the password to be entered through visual selection rather than mechanical typing, resolving the contradiction between password length/security and ease of entry on portable devices with limited keyboards.
2Reliability
If character-based passwords are made more complex to resist brute-force attacks, then security improves, but the number of combinations remains mathematically limited
Solution Approach 1:
The patent transitions from one-dimensional character sequences to two-dimensional image grids for password creation. This dimensional change vastly expands the combinatorial space available for passwords. While character passwords are limited by the product of character set size and length, image passwords leverage the vast diversity of visual information, creating a near-infinite combination space that is exponentially more resistant to brute-force attacks.
Solution Approach 2:
The patent uses image copies from a large library or user-generated photos to create passwords. Instead of being limited to a small character set, the system can draw from millions of possible images, either from a predefined library or user uploads. This copying mechanism from a vast source pool dramatically increases the number of available password combinations beyond what character-based systems can achieve.
3Reliability
If users memorize character-based passwords for security, then security improves, but vulnerability to guessing and prediction increases
Solution Approach 1:
The patent replaces character-based memorization with image-based visual memorization. Human cognition is naturally better at remembering distinctive images and visual patterns than arbitrary character sequences. This substitution leverages human cognitive strengths, creating passwords that are both memorable for users and resistant to guessing by attackers, since images are harder to predict or brute-force than character combinations.
Data Source
AI summary
A system and method for performing image-based authentication requires users to enter an image-based password in order to access a secure system or network. A user may identify at least one password image, and may enter the system or network if he or she selects each of the password images shown in a group of images on the display. Additionally, the user may designate specific locations for multiple password images on a user interface, and a user may enter the system or network if he or she locates each of the password images in its designated location on the user interface.