Password Entry Guidance via Real-Time Requirement Feedback

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users are reluctant to create strong passwords due to difficulty in remembering and creating complex password requirements, often resorting to easily guessable variations of common words or names, and existing systems can be tedious with multiple attempts to satisfy all requirements.

Innovation Solution

A method that randomly selects and presents password requirements to users, providing real-time feedback on character entry to ensure the password meets the requirements, such as length, character types, and differences from previous passwords, using a client-server system with a password manager to guide users in creating strong passwords.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users create strong passwords with multiple character types and length requirements, then password security is improved, but user ease of operation deteriorates

Engineering Contradiction:
Improvepassword securityVSAvoidease of password creation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system provides real-time feedback to users as they enter password characters, immediately indicating whether each requirement is satisfied. This continuous feedback loop guides users through the password creation process, showing progress toward meeting all requirements without requiring multiple submission attempts.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The password requirements are segmented into individual, independently checkable criteria (e.g., minimum length, uppercase letters, lowercase letters, numbers, special characters). Each segment is evaluated separately and displayed as an independent status indicator, making the complex requirements more manageable for users.

Inventive Principle:
Principle #1Segmentation

2Loss of information

If the system provides a list of all password requirements upfront, then completeness of information is improved, but user frustration increases due to multiple attempts needed

Engineering Contradiction:
Improvecompleteness of password requirement informationVSAvoiduser frustration
Core Design Contradiction:
Loss of informationVSEase of operation

Solution Approach 1:

Rather than requiring users to submit passwords multiple times to check against a list of requirements, the system provides immediate feedback during the entry process itself. Each requirement's satisfaction status is updated in real-time, eliminating the need for repeated attempts and reducing user frustration.

Inventive Principle:
Principle #23Feedback

3Reliability

If users are required to meet multiple password requirements simultaneously, then password strength is improved, but time to create password increases

Engineering Contradiction:
Improvepassword strengthVSAvoidtime to create password
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system continuously evaluates password requirements as users type, rather than waiting for complete submission. This continuous evaluation allows users to see their progress in real-time and adjust their input accordingly, maintaining momentum and reducing the overall time needed to create a compliant password.

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentUS8560860B2Strong password entry
Publication Date: 2013.10.15 RED HAT INC
  • US8560860B2 patent drawing
  • US8560860B2 patent drawing
  • US8560860B2 patent drawing

AI summary

Methods and systems are provided to assist users with the entry of strong passwords. The password may be considered strong if it satisfies one or more requirements. A set of these requirements may be selected and then presented to the user. The requirements may be randomly selected one by one or as a group. The requirements may also be presented to the user one by one in a random order or in the form of a list with a random order. As characters for the password are entered, the user may then be notified when one or more the requirements have been satisfied.