Multi-tier Touchscreen Authentication Objects
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Gesture and pattern-based authentication mechanisms on mobile devices lack sufficient complexity to prevent unauthorized access, especially on small-screen devices, due to limited screen size and simplicity of patterns, making them vulnerable to unauthorized access.
Innovation Solution
A touchscreen authentication method using multiple tiers with objects and bins, where users drag and drop objects from a source tier to a destination tier through intermediate tiers, with the authentication key defined by the number, sequence, and path of objects, exponentially increasing security with minimal complexity addition.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If gesture and pattern-based authentication mechanisms are used on mobile devices, then ease of operation is improved, but security is worsened due to limited screen size and simplicity of patterns
Solution Approach 1:
The authentication interface is segmented into multiple tiers (source tier, intermediate tiers, destination tier) with multiple objects in each tier. This segmentation allows the system to maintain simplicity at each individual tier while achieving high security through the combination of all tiers, resolving the contradiction between ease of operation and security.
Solution Approach 2:
The patent transitions from two-dimensional patterns on a flat screen to a multi-dimensional hierarchical structure with source tier, intermediate tiers, and destination tier. This dimensional expansion allows for exponentially more complex authentication sequences without increasing the visual complexity on the screen, thereby improving security while maintaining ease of operation.
2Reliability
If the complexity of gesture and pattern-based authentication is increased, then security is improved, but device screen size must be increased
Solution Approach 1:
Instead of increasing screen size to accommodate more authentication elements, the patent segments the authentication process into multiple tiers with multiple objects per tier. This allows high security complexity to be achieved through hierarchical organization rather than spatial expansion, maintaining compatibility with small-screen mobile devices.
Solution Approach 2:
The patent changes the parameter of authentication complexity from spatial (screen size) to structural (number of tiers and objects per tier). By modifying the organizational parameters rather than physical dimensions, the system achieves high security without requiring larger screens.
3Ease of operation
If simple patterns are used for authentication, then ease of operation is improved, but security is worsened as unauthorized users can easily observe and replicate the pattern
Solution Approach 1:
The authentication sequence is segmented across multiple tiers, where the user interacts with multiple objects in sequence (source tier objects → intermediate tier objects → destination tier objects). This segmentation ensures that even if an unauthorized user observes part of the sequence, they cannot replicate the complete authentication without knowing the full multi-tier sequence, thereby preventing unauthorized access while maintaining ease of operation.
Solution Approach 2:
Intermediate tiers act as mediators between the source tier and destination tier, adding layers of complexity to the authentication sequence. These intermediate objects serve as additional security barriers that must be correctly selected and sequenced, preventing unauthorized users from simply observing and replicating a direct source-to-destination pattern while keeping the interaction simple for authorized users.
Data Source
AI summary
The invention provides a method and apparatus for authenticating a user in a touchscreen environment. A first tier may be defined having at least one object, and a destination tier may be defined having at least one bin. An authentication-key may be registered, the authentication-key comprising a length defining a number of nodes and a correct sequence of nodes, each node specifying a movement of one object from the first tier to one bin of the destination tier. A user sequence of at least one touchscreen gestures is received, each gesture specifying that one object from the first tier should be moved to one bin of the destination tier. Access is permitted if the at least one touchscreen gestures corresponds to the length, the correct sequence, and the movement of the authentication-key.