Password Obfuscation via Random Keystroke Interference
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password protection methods in computer systems are vulnerable to intruders who can memorize or intercept keystrokes, either by observing users or using keystroke monitoring viruses.
Innovation Solution
A method and system that allows users to enter an apparent password, which includes a string of characters and keystrokes including the actual password and arbitrary non-password related characters, and generates a random pattern for each access request, making it difficult for intruders to memorize or intercept the password.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a traditional password entry method is used, then the user can easily remember and enter the password, but the password becomes vulnerable to intruders who can observe or monitor keystrokes
Solution Approach 1:
The patent segments the password entry process into two distinct phases: a memorization phase where the user learns the password, and an execution phase where the user enters the password mixed with random characters. This segmentation allows the password to be simple and memorable while preventing interception during the execution phase through the use of random character interference.
Solution Approach 2:
The patent introduces random characters as an intermediary element between the user's password keystrokes and the system's password validation. These random characters act as a mediator that obscures the actual password from observers and keystroke monitors while still allowing the system to identify and validate the correct password through a different validation mechanism.
2Object-affected harmful factors
If the password is mixed with random characters, then the likelihood of intruder memorization is reduced, but the system complexity increases
Solution Approach 1:
The system performs self-service by automatically generating and managing the random character sequences without requiring user intervention or external input. The system creates the obfuscated password strings, handles the validation process, and manages the random pattern generation autonomously, reducing the burden on the user while maintaining security.
Solution Approach 2:
The patent changes the parameter of password presentation by transforming the simple password string into a modified string containing random characters. The system dynamically adjusts the composition and structure of the password input, changing it from a straightforward sequence to a complex mixture that maintains security while managing system complexity through controlled parameter modification.
3Reliability
If a random pattern is generated for each request, then keystroke monitoring viruses become ineffective, but the processing time increases
Solution Approach 1:
The system performs preliminary action by pre-generating and storing the random character patterns before the actual password validation occurs. The random patterns are created in advance and stored in a format that allows for rapid retrieval and application during validation, reducing the processing time required during the actual authentication process while maintaining the security benefits of random pattern generation.
Data Source
AI summary
The present invention relates to a method for protecting a password. In a first aspect, the method includes allowing a user to enter an apparent password into a computing system, wherein the apparent password is a string of characters and keystrokes including the password and an arbitrary number of non-password related characters and keystrokes. The method further includes analyzing the string of characters and keystrokes by the computing system to find the password, and validating the apparent password if the password is found in any position in the string of characters and keystrokes. In a second aspect, the method includes creating a random pattern in response to receiving a request from a user to access a protected resource in a computing system, wherein the random pattern is associated with the request, displaying the random pattern associated with the request to the user, and allowing the user to enter an apparent password into the computing system that controls access to the protected resource, wherein the apparent password is a string of characters and keystrokes including the password, the random pattern and an arbitrary number of non-password related characters and keystrokes. The method further includes analyzing the string of characters and keystrokes by the computing system to find the password and the random pattern associated with the request, and validating the apparent password if the password and the random pattern are found in any position in the string of characters and keystrokes.