Keystroke Dynamics Authentication for Password Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing access control systems are vulnerable to unauthorized access due to the risk of hackers guessing, observing, or recording user names and passwords, as malicious software can track and record these entries, leading to potential unauthorized access.

Innovation Solution

The method involves comparing patterns of temporal or physical properties associated with an access entry string to a database of ranges from previously approved entries, approving access if the patterns match and denying it if they do not, thereby providing an additional layer of security even if the entry string is stolen.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If traditional username and password authentication is used, then ease of operation is improved, but security is worsened due to vulnerability to hacking and password recording

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication process is segmented into two independent components: the access entry string (password) and the temporal/physical typing pattern. The system analyzes keystroke dynamics including typing speed, rhythm, pause durations, and key press intervals separately from the actual password content. This segmentation allows the password to remain simple for user input while the temporal pattern provides the security layer, resolving the contradiction between ease of operation and security.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The invention adds a temporal dimension to traditional password authentication. Instead of only analyzing the static content of the password, the system measures the dynamic temporal characteristics of typing behavior (key press timing, duration between keys, typing rhythm). This dimensional transformation converts a one-dimensional password check into a two-dimensional authentication process, maintaining simplicity while enhancing security through biometric-like behavioral analysis.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Reliability

If temporal and physical property patterns are analyzed for authentication, then security is improved, but device complexity is worsened

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system utilizes the user's own typing behavior as the security mechanism without requiring additional hardware or complex external systems. The temporal and physical patterns are naturally generated by the user's typing process itself, eliminating the need for separate biometric scanning devices or complex authentication equipment. This self-service approach provides enhanced security while minimizing added device complexity.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The invention replaces complex mechanical or hardware-based authentication systems with software-based temporal pattern analysis. Instead of using fingerprint scanners, facial recognition cameras, or other complex biometric hardware, the system uses standard keyboard input already present in most devices and analyzes the temporal characteristics of that input. This substitution reduces device complexity while maintaining or enhancing security through software-based behavioral biometrics.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS8943559B2Access authentication method and system
Publication Date: 2015.01.27 NVIDIA CORP
  • US8943559B2 patent drawing
  • US8943559B2 patent drawing
  • US8943559B2 patent drawing

AI summary

A method of authenticating access to an electrical device. The method comprises comparing, at an electronic processor, one or more patterns of temporal or physical properties, associated with an access entry string, to a non-transitory electronic profile data base of ranges of the corresponding patterns, from previously approved access entry strings. The method also comprises approving or denying at the electronic processor, the access entry string. The access entry string is approved if the one or more patterns falls within the respective range of the corresponding patterns in the profile data base. The access entry string is denied if the one or more patterns falls outside the respective range of the corresponding patterns in the profile data base.