Image-Based Derived Key for Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current password-based authentication methods are vulnerable to brute force attacks due to low-entropy passwords, which are difficult for users to remember and manage, especially on devices with limited input capabilities.
Innovation Solution
The use of an image-based derived key, generated from a user-selected subset of authentication images, for encryption and decryption, allowing for secure communication without the need for a separate authentication process, thereby enhancing security and usability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If passwords are made more complex to resist brute force attacks, then security is improved, but user memorability and ease of operation deteriorate
Solution Approach 1:
The patent transforms the authentication parameter from traditional character-based passwords to image-based selection. Users select authentication images from a grid display instead of entering complex passwords, maintaining high security entropy while dramatically improving memorability and ease of operation on devices with limited input capabilities
Solution Approach 2:
The patent replaces the mechanical input system (keyboard typing of passwords) with an optical recognition system (image selection from displayed grid). This substitution eliminates the need for complex character entry while maintaining security through high-entropy image selection, particularly benefiting mobile devices with limited keyboards
2Reliability
If minimum password length and complexity requirements are enforced, then brute force attack resistance is improved, but user convenience and ease of operation worsen
Solution Approach 1:
The patent changes the fundamental parameter of authentication from character sequences to image grid selections. This provides equivalent or superior entropy for brute force resistance while eliminating the operational burden of remembering and typing complex passwords, directly resolving the contradiction between security and convenience
Solution Approach 2:
The patent introduces an image grid as an intermediary between the user and the authentication system. Instead of directly manipulating complex password characters, users interact with visual images that serve as a more intuitive and memorable mediator, maintaining security while improving convenience
3Device complexity
If traditional password authentication is used, then implementation simplicity is maintained, but security against brute force attacks deteriorates
Solution Approach 1:
The patent modifies the authentication parameter from low-entropy passwords to high-entropy image selections. The implementation remains relatively simple by using existing image display capabilities and selection interfaces, while dramatically improving security against brute force attacks through the increased entropy of image-based authentication
Data Source
AI summary
Embodiments of the invention relate to methods of generating and using an image-based derived key. In various embodiments, the image-based derived key may be used to facilitate user authentication and data encryption. For some embodiments, a method is disclosed comprising determining an image-based derived key, wherein the image-based derived key is generated from a selection of authentication images chosen by a user, encrypting data using the image-based derived key, and transmitting the encrypted data.