Password Entry via Segmented Visual Image Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional character-based passwords are difficult to remember, prone to human error, and vulnerable to detection techniques, lacking sufficient security and ease of use, especially in multi-use scenarios across various devices and environments.
Innovation Solution
A method that segments textual passwords into multiple segments, each associated with a secret keyword and optionally a secret question, with pictures representing these keywords, allowing users to select images to enter passwords without typing, enhancing security and usability across different environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional character-based passwords are used, then password entry is simple and direct, but security is insufficient and passwords are vulnerable to detection techniques
Solution Approach 1:
The password is segmented into multiple parts, each associated with a different picture. Instead of entering a single continuous password string, users select multiple pictures in sequence, with each picture representing a segment of the password. This segmentation makes password detection more difficult while maintaining ease of entry through visual selection.
Solution Approach 2:
Pictures are introduced as an intermediary between the user and the password entry process. Rather than directly typing characters, users interact with visual representations (pictures) that map to password segments. This intermediary layer obscures the actual password from potential eavesdroppers while simplifying user interaction.
2Reliability
If complex passwords are used to improve security, then security is enhanced, but memorability decreases and human error increases
Solution Approach 1:
Instead of memorizing abstract password characters, users memorize visual copies (pictures) that represent password segments. The system creates visual copies of password information in the form of images, which are easier for the human brain to remember and retrieve than sequences of characters or symbols.
Solution Approach 2:
The password entry parameters are changed from character-based to picture-based selection. This parameter change transforms the interaction from typing alphanumeric characters to selecting visual images, thereby improving memorability while maintaining security through the multi-segment structure.
3Productivity
If keyboard typing is used for password entry, then direct input is achieved, but security hazards increase due to simplicity of password detection techniques
Solution Approach 1:
The mechanical keyboard typing system is replaced with a graphical user interface-based picture selection system. Instead of using physical or virtual keyboards to type password characters, users click or tap on pictures displayed on the screen. This substitution eliminates the vulnerability to keyboard-based detection techniques while maintaining efficient password entry.
Solution Approach 2:
Pictures serve as an intermediary that masks the password entry process from detection. The actual password characters never appear on the keyboard or screen in readable form; instead, users select pictures that map to password segments, creating an intermediate layer that prevents direct observation or recording of the password.
4Reliability
If single-use passwords are used, then security is improved, but usability decreases as users must remember different passwords for different sessions
Solution Approach 1:
The password system is made dynamic by allowing the same multi-picture sequence to be reused across different sessions and devices. Unlike single-use passwords that change each session, this system maintains a consistent picture-based password that users can reliably reproduce, improving usability while the multi-segment structure maintains security.
Data Source
AI summary
A method for mapping text password to a short sequence of never repeated images/figures, implementing 4 layers of separation/encryption. At configuration time: Associate textual password with a list of secret questions. At authentication time: Requesting the user to answer each secret question by selecting a picture representing an answer from a CAPTCHA like layout. Wherein the secret answers and target pictures are computed at runtime. Dynamic runtime passwords-answers association with pictures open new business opportunities, and solve mentioned challenges.