Password Authentication Using Device Binding Information
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User devices, particularly smartphones, face security challenges as users set passwords that can be easily compromised, allowing unauthorized access to applications, especially for sensitive services like banking, due to the lack of additional authentication measures beyond password entry.
Innovation Solution
The method involves setting and verifying passwords using device binding information (DBI), which is unique user information such as contact details, photos, or emails, ensuring that even if someone knows the password, they cannot access the application without the corresponding DBI, thereby enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users set passwords with special characters and multiple digits, then password strength is improved, but ease of operation deteriorates
Solution Approach 1:
The patent introduces device binding information (DBI) as an intermediary authentication factor. The DBI, which is pre-stored in the user device, acts as a mediator that automatically verifies the user's identity without requiring manual entry of complex passwords. This resolves the contradiction by maintaining strong authentication through the DBI verification process while simplifying the user interaction, as the DBI is automatically retrieved and used by the system.
2Reliability
If device binding information is bound to specific characters of the password, then security is improved, but device complexity increases
Solution Approach 1:
The patent segments the authentication process into distinct components: password input and device binding information verification. Each component handles a specific aspect of authentication independently. The DBI is segmented and bound to specific character positions in the password, creating a modular verification system where each segment can be processed separately. This segmentation improves security through multi-factor verification while managing complexity by organizing the authentication flow into discrete, manageable steps.
Data Source
AI summary
A method for setting a password for operating an application of a user device is provided. The method includes requesting the user device to input a password of the application, and requesting the user device to select device binding information of the user device to associate with the password. The device binding information is obtained from one or more of contact information, a photo, an e-mail, a file, or an address.