Lock Screen Notification Obfuscation for One-Time Passcodes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Portable electronic devices, such as smartphones and tablets, expose sensitive information like one-time passcodes when locked and unattended, allowing malicious actors to gain unauthorized access to user accounts.
Innovation Solution
Implementing a system that automatically obfuscates sensitive information, like one-time passcodes, on locked screens by analyzing incoming messages and applying dynamic obfuscation techniques, ensuring the information is only revealed when the device is unlocked and attended to by an authorized user.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If notifications are displayed on the locked screen for convenience, then user accessibility is improved, but security is worsened as sensitive information becomes exposed to unauthorized users
Solution Approach 1:
The patent applies local quality by differentiating the display of notifications based on their content sensitivity. Non-sensitive notifications are displayed normally, while sensitive notifications (containing one-time passcodes or authentication information) are obfuscated with opaque graphical elements. This allows the system to maintain convenience for general notifications while protecting security for sensitive information, resolving the contradiction between accessibility and security.
2Object-affected harmful factors
If obfuscation is applied to sensitive information on locked screens, then security is improved, but user convenience is worsened as authorized users cannot view sensitive notifications
Solution Approach 1:
The patent implements dynamics by making the obfuscation state changeable based on user authentication. When an authorized user unlocks the device or provides biometric verification, the opaque graphical elements are removed from sensitive notifications, allowing the user to view the information. This dynamic transition from obfuscated to visible state resolves the contradiction by providing security when needed while maintaining accessibility for authorized users.
3Object-affected harmful factors
If the device requires unlocking to view notifications, then security is improved, but time loss increases as users must authenticate before accessing information
Solution Approach 1:
The patent applies preliminary action by performing obfuscation automatically when the device is locked, before any user interaction occurs. The system proactively protects sensitive information without waiting for user requests, and only removes obfuscation after successful authentication. This preliminary security measure minimizes time loss by avoiding repeated authentication cycles while maintaining continuous protection.
Data Source
AI summary
A method provides techniques for automatic obfuscation of sensitive information. The sensitive information can include one-time passcodes that surface on an electronic device. The method includes receiving a notification comprising sensitive information. The method continues with determining that a notification setting of the electronic device enables presentation of received notifications, and determining that the notification setting of the electronic device further includes enabling dynamic obfuscation of the sensitive information if a presence of an authorized user of the electronic device is not confirmed. The sensitive information is automatically obfuscated from being presented during presentation of the notification. A modified notification is presented on the electronic device, where the modified notification includes the received notification with the sensitive information obfuscated.