Obfuscating Sensitive Data Entry via Dynamic Input Masking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data entry methods fail to effectively obfuscate sensitive information in public or insecure environments, where observations can reveal user inputs, posing risks for individuals, especially those with disabilities.
Innovation Solution
A method and system that obfuscate user inputs by applying additional aspects such as reorganizing keyboards, using multi-taps, and combining tactile and voice entries, which are then deobfuscated to ensure secure data entry, using a processor and memory to generate entry field inputs for applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional data entry methods are used, then ease of operation is maintained, but security against observation is compromised
Solution Approach 1:
The data entry process is segmented into multiple independent steps: selecting obfuscation aspects, receiving obfuscated input, recovering original input, and generating entry field input. This segmentation allows each step to be optimized independently, balancing security and ease of operation.
Solution Approach 2:
A data entry application acts as an intermediary between the user and the target application. This intermediary applies obfuscation aspects to mask sensitive information during entry while maintaining the underlying data integrity, thus enhancing security without permanently complicating the operation.
2Reliability
If obfuscation aspects are applied to user input, then security is improved, but device complexity increases
Solution Approach 1:
The data entry application provides multiple obfuscation aspects (keyboard reorganization, multi-tap requirements, tactile-voice combinations) that can be applied universally to different types of user inputs. This multi-functionality allows a single system to handle various security requirements without proportionally increasing complexity.
Solution Approach 2:
The system changes parameters of the data entry interface dynamically based on security requirements. For example, it can adjust keyboard layout, tap requirements, or enable/disable voice input options. These parameter changes provide flexible security enhancement without requiring fundamentally different system architectures.
3Reliability
If multiple obfuscation aspects are applied, then security against observation is enhanced, but time required for data entry increases
Solution Approach 1:
The system applies obfuscation aspects selectively rather than uniformly to all data entry scenarios. It can apply one or more aspects depending on the sensitivity of the data being entered, allowing partial obfuscation when full obfuscation is not necessary, thus reducing unnecessary time overhead.
Solution Approach 2:
The obfuscation approach is dynamic and adaptable. The system can adjust the number and type of obfuscation aspects applied based on the specific entry context, user preferences, and security requirements. This dynamic adjustment optimizes the balance between security enhancement and time efficiency for each data entry operation.
Data Source
AI summary
A method, system, and computer program product for obfuscating entry of information are provided in the illustrative embodiments. A set of additional aspects to be applied to a part of an input is communicated to a provider of the input. The set of additional aspects is distinct from a second set of additional aspects to be applied to another input. An obfuscated input corresponding to the part of the input is received. A subset of the set of additional aspects is present in the obfuscated input. The part of the input from the obfuscated input is recovered by removing, using a processor and a memory, the subset of the set of additional aspects from the obfuscated input. An entry field input corresponding to the input is generated. The entry field input is sent to an application executing in a data processing system.