Mouse Wheel Password Input via Mapping Translation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for securely inputting sensitive information, such as passwords, on standard computer systems are vulnerable to hacking and observation, as they rely on special hardware components that are costly and not universally applicable, and do not effectively protect against identity theft.
Innovation Solution
A method utilizing standard PC hardware, specifically the mouse wheel, to input signals that are grouped and translated into characters, providing a secure and difficult-to-observe process for entering secret character strings, with additional obfuscation through mapping files, making it harder for hackers and observers to decipher the input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If special hardware components (fingerprint readers, directional sensors) are used to securely input passwords, then security against hacking and observation is improved, but device complexity and cost increase
Solution Approach 1:
The patent introduces an intermediary translation layer between the input device and the password system. Mouse movements are captured and translated through mapping files that convert coordinate data into password characters. This intermediary process obscures the actual password input from loggers and observers while using standard hardware, resolving the contradiction between security and hardware complexity
Solution Approach 2:
The patent replaces specialized mechanical security devices (fingerprint readers, directional sensors) with standard computer input devices like mice and keyboards. By substituting mechanical security hardware with software-based translation mechanisms, the system achieves comparable security without the associated hardware complexity and cost
2Ease of operation
If keyboard input is used for passwords, then ease of operation is maintained, but vulnerability to key loggers and observation increases
Solution Approach 1:
The patent inserts a translation intermediary between the keyboard/mouse input and the password system. Instead of directly inputting password characters, users perform actions (mouse movements, key presses) that are translated through mapping files into the actual password. This intermediary layer prevents loggers from capturing the actual password characters while maintaining ease of operation
Solution Approach 2:
The patent changes the parameter space of password input by transforming physical input coordinates (mouse position, key press location) into password characters through mathematical mapping relationships. This parameter transformation obscures the direct connection between user action and password character, reducing vulnerability to logging while keeping the input method simple
3Reliability
If mouse wheel movements are used to input passwords, then security against observation is improved, but input time and complexity increase
Solution Approach 1:
The patent performs preliminary action by pre-defining mapping relationships between mouse wheel movements and password characters in mapping files. During password input, the system simply looks up the corresponding character based on the movement pattern, rather than calculating or processing complex transformations in real-time. This preliminary preparation reduces input time while maintaining security
Solution Approach 2:
The patent structures mouse wheel input as periodic discrete increments rather than continuous movement. Each increment or sequence of increments corresponds to a specific password character through the mapping system. This periodic structure makes the input process more efficient and predictable, reducing overall input time while maintaining the security benefits of obscured input
Data Source
Figure 1
Figure 2a~2c
Figure 3a~3b
AI summary
A method and system for granting access to a first user (404, 405, 406) into a first server computer system (401, 402, 403), the method comprising: storing a first mapping (400, 408, 409) to a data storage being operatively coupled to the first server computer system, receiving first log-in data by the first server computer system via a network (407), mapping the received first log-in data to a first secret character string according to said first mapping, determining, if the first secret character string is a valid passphrase of the first server computer system, and granting access to the first user by the first server computer system in case the first secret character string was determined to be a valid passphrase.