Password Authentication Using Keypad Path and Seed
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Password authentication methods, such as textual and graphical passwords, are vulnerable to shoulder surfing attacks, where an attacker can observe and replicate the user's input, compromising security.
Innovation Solution
A new password authentication method where users input a seed password and a graphical password, which is a directed path on a keypad, with the server authenticating based on a preset relationship between the seed and graphical passwords, reducing the risk of shoulder surfing by not requiring direct input of the password during login.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If textual or graphical passwords are used for authentication, then the authentication process is simple and user-friendly, but the system becomes vulnerable to shoulder surfing attacks
Solution Approach 1:
The password authentication process is segmented into two independent components: a seed password (textual input) and a graphical password (keystroke sequence). These segments are processed separately and combined through a transformation function, allowing each component to maintain simplicity while collectively providing enhanced security against shoulder surfing attacks.
Solution Approach 2:
A transformation function acts as an intermediary between the seed password and the final authentication verification. This function transforms the seed password into a sequence of keystrokes that must be entered in a specific order on the graphical keypad, creating an additional layer of complexity that prevents direct observation attacks while maintaining user-friendly interaction.
2Object-affected harmful factors
If a graphical password with directed path traversing all keys is implemented, then security against shoulder surfing is improved, but the device complexity increases
Solution Approach 1:
The graphical keypad serves multiple functions: it displays the seed password characters, provides the transformation function interface, and acts as the authentication input device. By making the keypad universal, the system avoids adding separate hardware components, thereby limiting the increase in device complexity while still achieving enhanced security.
Solution Approach 2:
The system changes the parameter of password representation from direct textual input to a transformed keystroke sequence derived from a directed path on the keypad. This parameter transformation increases security by making observed inputs meaningless without knowledge of the transformation logic, while the transformation itself is computed algorithmically rather than through complex hardware.
3Object-affected harmful factors
If the password transformation function is made more complex to enhance security, then resistance to shoulder surfing attacks increases, but the loss of time for authentication increases
Solution Approach 1:
The transformation function is applied in advance during the authentication process, converting the seed password into the required keystroke sequence before the user begins typing. This preliminary transformation allows the system to prepare the authentication challenge without requiring complex real-time processing during the user's input phase, thereby minimizing authentication time while maintaining security.
Data Source
AI summary
Embodiments of the present invention relate to password authentication. According to an embodiment of the present invention, a password associated with a user identification is received from a user device. The password is authenticated based on a preset relationship between a seed password and a graphical password associated with the user identification. The seed password consists of a string of characters. The graphical password is a directed path traversing all keys of a keypad in an order. Each of the keys represents one of the characters and is associated with an order number according to the order of the keys being traversed. The preset relationship is that the password consists of respective order numbers associated with respective keys representing corresponding characters of the seed password.