Mobile Authentication Code Masking Pattern for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The entry of authentication codes on mobile electronic devices is not secure, as applications can capture and store these codes, making them vulnerable to misuse.
Innovation Solution
A masking pattern is used to obscure the entry of authentication codes, where specific placeholders receive actual values and others receive dummy values, preventing machine-readable prompts and ensuring secure storage on mobile devices, with validation occurring through a backend system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If authentication code entry is implemented on mobile electronic devices, then convenience of operation is improved, but security is worsened due to potential capture and storage of authentication codes
Solution Approach 1:
The authentication code entry is segmented into multiple components: the code itself, dummy values, and a masking pattern. The system divides the entry field into multiple placeholders where only specific positions receive actual authentication code digits while others receive dummy values, preventing complete capture of the authentication code.
Solution Approach 2:
A masking pattern acts as an intermediary between the user input and the stored data. The masking pattern specifies which positions should contain actual authentication code digits and which should contain dummy values, thereby mediating the transformation of the authentication code into a masked entry that preserves usability while enhancing security.
2Reliability
If masking pattern with dummy values is used, then security is improved by preventing capture of authentication code, but device complexity increases
Solution Approach 1:
The system changes the parameters of the authentication entry by introducing a masking pattern that specifies positions for actual digits versus dummy values. This parameter change transforms the straightforward authentication code entry into a masked entry process, where the authentication code is embedded within a larger sequence containing dummy values at positions specified by the masking pattern.
3Reliability
If prompt is displayed in non-machine-readable manner, then security is improved by preventing automated reading, but ease of operation is worsened by making entry more difficult
Solution Approach 1:
The prompt displays different qualities in different locations: it provides clear visual guidance for users at the positions where authentication code digits should be entered, while simultaneously presenting a non-machine-readable appearance overall. This local differentiation allows human users to easily identify entry positions while preventing automated systems from reading the prompt.
Data Source
AI summary
Systems and methods for authentication code entry using mobile electronic devices are disclosed. In one embodiment, in an information processing device comprising at least one computer processor, a display, and an input device a method for authentication code entry may include: (1) receiving, at the information processing device, a masking pattern for receiving entry of an authentication code, the masking pattern specifying an order for entering the authentication code; (2) presenting, on the display, a prompt to enter the authentication code in accordance with the masking pattern; (3) receiving, at the input device, a masked authentication code entry where the masked authentication code entry comprises the authentication code entered in accordance with the masking pattern; and (4) storing the masked authentication code entry.