OTP Authentication with Swipe Pattern for Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Traditional one-time passcode (OTP) authentication methods, even with two-factor authentication, may not provide sufficient security for certain applications due to vulnerabilities in robustness.

Innovation Solution

Incorporating a swipe pattern operation into the OTP authentication process, where users enter a sequence of characters from a predefined pattern, potentially combined with user-known information to achieve three-factor authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional OTP authentication is used, then the authentication process is simple and fast, but the security level is insufficient

Engineering Contradiction:

Improvesecurity levelVSAvoidauthentication process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines OTP authentication with swipe pattern recognition to create a multi-factor authentication system. The swipe pattern is integrated with the OTP verification process, merging two different authentication mechanisms into a unified system that enhances security while maintaining operational efficiency

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The invention adds a spatial dimension to traditional OTP authentication by incorporating swipe patterns. Instead of only verifying the correctness of entered characters, the system now also verifies the spatial trajectory and gesture pattern, adding another dimension of verification that enhances security without significantly increasing complexity

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

2Reliability

If two-factor authentication with user-known information and OTP is implemented, then security is improved, but vulnerabilities in robustness remain

Engineering Contradiction:

Improvesecurity robustnessVSAvoiduser operation simplicity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary registration of the user's swipe pattern during setup. This pre-registered biometric data is then used during authentication to verify the user's gesture, eliminating the need for users to manually create or remember complex patterns while maintaining high security robustness

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The invention replaces traditional mechanical input methods (typing passwords or PINs) with gesture-based swipe patterns. This substitution uses touch screen technology to capture finger movement trajectories, providing a more robust authentication mechanism that is also more intuitive and easier for users to operate

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS9191386B1Authentication using one-time passcode and predefined swipe pattern

Publication Date: 2015.11.17 EMC IP HLDG CO LLC

AI summary

The OTP generator 104 may alternatively be electrically connected to the client-side computing device 102, for example, via a Universal Serial Bus (USB) interface. Further, the OTP generator 104 may alternatively be a server or other type of module that is accessible over the network 110, or it may be a software component resident on the client-side computing device 102. As another alternative, the OTP generator 104 may be distributed over multiple devices, one of which may be the client-side computing device 102.