Mobile Authentication Entry Using Vibration Noise Against Sensor Snooping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing number of attempts by malicious actors to compromise users' authentication data on mobile devices, particularly through sensor data analysis, necessitates improved security measures to prevent unauthorized access and fraudulent transactions.
Innovation Solution
Implementing a mobile device with vibration motors operating at varying speeds during authentication data entry to interfere with sensor data, combined with optional acoustic transducers, to render sensor data unusable for deriving authentication information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If sensor data is collected during authentication data entry, then device functionality is enhanced, but security is compromised due to unauthorized detection of authentication data
Solution Approach 1:
The patent converts the harmful sensor data that could be used to derive authentication data into a beneficial security feature by introducing vibration noise during data entry. The same sensors that could compromise security are utilized to detect the vibration pattern, and the introduced vibration serves to mask the authentic authentication entry patterns, thereby transforming a security vulnerability into a protective mechanism.
Solution Approach 2:
The patent directly applies mechanical vibration through a vibration motor activated during authentication data entry. This vibration introduces noise into sensor data (accelerometer, gyroscope, magnetometer) that prevents malicious actors from deriving authentication data through sensor analysis, while the system legitimately uses the vibration detection to confirm proper authentication behavior.
2Reliability
If vibration motors are activated during authentication data entry, then security is improved, but device complexity increases
Solution Approach 1:
The patent leverages the existing vibration motor, originally designed for user feedback (haptic feedback), and repurposes it for security functionality. By activating this existing component during authentication data entry, the system introduces security protection without adding dedicated hardware, thereby minimizing the increase in device complexity while achieving enhanced security.
3Reliability
If vibration motors operate at varying speeds, then security against sensor analysis is enhanced, but energy consumption increases
Solution Approach 1:
The patent employs periodic vibration activation during authentication data entry rather than continuous operation. The vibration motor is activated in periodic intervals corresponding to the expected duration of authentication input, and the system monitors sensor data to determine when vibration should be applied. This periodic approach provides security benefits while significantly reducing energy consumption compared to continuous operation.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
The solution effectively prevents malicious actors from deriving authentication data by disrupting sensor readings, enhancing security and protecting user credentials.
Implementation Method 1
The mobile device activates a vibration motor at a first speed. The mobile device then activates the vibration motor at a second speed different from the first speed.
Data Source
Figure 1
Figure 2
Figure 3a
AI summary
Embodiments disclosed herein describe systems and methods for providing secure entry of authentication data on computing devices, such as mobile devices. In some embodiments, the systems and methods are implemented on a mobile device having one or more vibration motors configured to operate at one or more speeds, and a touch-sensitive display. The mobile device may determine that an application executing on the mobile device is requesting entry of authentication data from a user via the touch-sensitive display. The mobile device may detect entry of a first character of the authentication data from the user. During the entry of the first character of authentication data, the mobile device activates a vibration motor at a first speed.