Multi-layer Password Authentication via Masked Alignment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing graphical authentication systems are vulnerable to 'shoulder surfing' as observers can determine the cursor location or pattern of points on the overlay image, compromising security.
Innovation Solution
The proposed method involves generating a modified base image and overlay image with pre-selected reference points, requiring users to move one image relative to the other through a sequence of pre-selected points for authentication, which enhances security by obscuring the alignment process from observers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional graphical authentication systems use visible cursor location and pattern display, then user authentication is enabled, but security is compromised due to shoulder surfing vulnerability
Solution Approach 1:
The patent introduces an intermediary mechanism using a mask layer that obscures the alignment process. The mask layer with its pattern of opaque and transparent regions serves as a mediator between the base image and overlay image, allowing authentication to occur while preventing direct observation of the alignment process by third parties.
Solution Approach 2:
The patent adds a temporal dimension to the authentication process by requiring continuous movement through multiple reference points rather than a single static alignment. The sequence of movements through different reference points over time creates a complex authentication path that is difficult to observe and replicate.
2Reliability
If the authentication process requires movement through multiple reference points, then security is improved, but the complexity of the authentication process increases
Solution Approach 1:
The patent segments the authentication process into distinct reference points that the user must sequentially move through. Each reference point acts as a discrete checkpoint in the authentication sequence, breaking down the complex authentication into manageable steps while maintaining overall security through the sequence requirement.
Solution Approach 2:
The patent implements dynamic movement requirements where the user must continuously move the overlay image through a sequence of reference points rather than achieving a single static alignment. This dynamic approach increases security by making the authentication process time-dependent and observation-resistant.
3Measurement precision
If reference points are made visible on the display, then users can accurately align images, but observers can determine alignment patterns compromising security
Solution Approach 1:
The patent applies local quality differentiation through the mask layer's pattern of opaque and transparent regions. Specific local areas are made transparent to allow precise alignment at reference points, while other areas remain opaque to obscure the overall alignment process from external observers.
Solution Approach 2:
The mask layer serves as an intermediary that selectively reveals and conceals information. It allows the user to see through specific regions to achieve precise alignment while blocking the view of the alignment process from external observers, thus preventing information loss to unauthorized parties.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of authenticating a user of a computing device is proposed, together with computing device on which the method is implemented. In the method a modified base image is overlaid with a modified overlay image on a display and at least one of the modified base image and modified overlay image is moved by the user. In addition to the moving, a change in orientation of at least one of the modified base image and the modified overlay image is required. Positive authentication is indicated in response to the base image reference point on the modified base image being aligned with the overlay image reference point on the modified overlay image after moving through at least one other pre-selected reference point.