Password Protection via Modified Keyboard Configurations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password authentication methods are insecure, as they allow malicious key loggers and observers to capture passwords, lacking protection against direct observation and recording.
Innovation Solution
Implementing modified keyboard configurations that shift key assignments, allowing users to enter passwords securely by using a remote computing system to convert modified inputs back to standard passwords, thereby protecting against unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional password entry methods are used, then ease of operation is improved, but security is worsened due to vulnerability to key loggers and observation
Solution Approach 1:
The patent introduces a modified keyboard configuration as an intermediary layer between the user and the password authentication system. This intermediary transforms the direct password entry process into an indirect process where the user enters a modified password based on a custom keyboard layout, which is then converted back to the original password by the authentication system. This intermediary mechanism prevents direct observation and key logging attacks while maintaining user convenience.
Solution Approach 2:
The patent changes the parameter of keyboard configuration from standard to modified/custom layout. By altering the key position mapping parameter, the system transforms the password entry process such that each key press corresponds to a different character than in the standard layout. This parameter change ensures that even if someone observes or records the key presses, they cannot directly obtain the original password without knowledge of the specific modified configuration.
2Reliability
If modified keyboard configurations are implemented, then password security is improved, but device complexity is worsened
Solution Approach 1:
The patent implements self-service by allowing users to create and manage their own modified keyboard configurations. The system provides tools for users to define custom key mappings and store them locally or in the cloud. When authenticating, the system automatically retrieves the appropriate configuration and performs the conversion from modified password to original password without requiring manual intervention or complex administrative setup. This self-service approach minimizes the operational complexity despite the enhanced security features.
Data Source
AI summary
Techniques for protecting passwords and/or password entry by a user are provided. User identification data for a user can be received from a remote computing device. An identity of the user can be determined based on the user identification data. A password for the user can be determined. A modified keyboard configuration associated with the user can be determined. A request can be transmitted to the remote computing device for the password for the user based on the modified keyboard configuration. A modified password from the remote computing device can be received. A converted password based on the modified password and the modified keyboard configuration can be determined. The converted password can be compared to the password for the user. The user can be authorized when the converted password matches the password for the user.