Password Modification Method for Secure Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing authentication methods, such as one-time passwords and voice-based authentication, face challenges in preventing password exposure and theft, especially in public places, leading to user inconvenience and security risks.

Innovation Solution

An electronic apparatus and method that modifies a stored password using specific conditions (True, False, Ignore) applied to each character, allowing for secure authentication without exposing the original password, and provides indicators for user input, reducing the need for frequent password confirmation and minimizing theft risks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If one-time password is used to prevent password exposure, then security is improved, but user convenience deteriorates due to frequent confirmation requirements

Engineering Contradiction:

Improvepassword securityVSAvoiduser convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The password is segmented into multiple characters, and authentication is performed by matching characters at specific positions rather than requiring complete password repetition. This allows security maintenance without full password re-entry frequency.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Instead of requiring complete password confirmation each time, the system performs partial authentication by verifying only the modified characters at specific positions, reducing the authentication burden while maintaining security.

Inventive Principle:

Principle #16Partial or excessive action

2Ease of operation

If password is set with period or frequency limits to avoid inconvenience, then user convenience is improved, but security deteriorates as third parties can utilize the password if exposed during the set period

Engineering Contradiction:

Improveuser convenienceVSAvoidpassword security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The password modification method dynamically changes the authentication criteria based on the stored password and modification rules, allowing the system to adapt authentication requirements without setting fixed expiration periods, thus maintaining both convenience and security.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system changes the parameter of password verification from exact match to modified match based on preset conditions, allowing flexible authentication that doesn't rely on time-based expiration settings.

Inventive Principle:

Principle #35Parameter changes

3Ease of operation

If voice-based authentication is used, then user convenience is improved, but security deteriorates as the password may be exposed to and recorded by third parties

Engineering Contradiction:

Improveuser convenienceVSAvoidpassword security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

Instead of using the original voice password directly, the system creates a modified version of the password based on preset modification methods, and authentication is performed against this modified copy, preventing direct exposure of the original password through voice recording.

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The modified password acts as an intermediary between the original voice input and the authentication system, transforming the direct voice-password connection into an indirect verification process that prevents third-party recording and replay attacks.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11152008B2Electronic apparatus, method for controlling thereof and computer readable recording medium

Publication Date: 2021.10.19 SAMSUNG ELECTRONICS CO LTD

AI summary

An electronic apparatus includes a memory configured to store a preset password, and a processor configured to provide information with respect to a password modification method and to perform an authentication process for an input password using the preset password and the password modification method.