Dynamic Password Reveal Selector for Shoulder-Surfing Risk
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password reveal selectors on computing devices pose security risks, such as exposure to fraudulent actors and shoulder surfing, due to their inability to dynamically adjust visibility based on user activity and potential manipulation.
Innovation Solution
Implement a password entry user interface element with a password reveal selector that toggles visibility based on time thresholds, paste events, and screen recording detection to enhance security by hiding the selector under certain conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the password reveal selector is always visible to allow users to check their password input, then ease of operation is improved, but security is worsened due to exposure to fraudulent actors and shoulder surfing
Solution Approach 1:
The password reveal selector transitions from a static always-visible state to a dynamic state that automatically hides based on detected conditions. The system monitors for screen recording activities and paste events, then dynamically adjusts the selector's visibility state to hide it when potential security threats are detected, resolving the contradiction between user convenience and security
Solution Approach 2:
The system implements feedback mechanisms by detecting screen recording activities and paste events, then using this information to control the password reveal selector's visibility. The detection of harmful actions triggers a feedback response that automatically hides the selector, creating a closed-loop security mechanism that adapts to user behavior and environmental conditions
2Object-affected harmful factors
If the password reveal selector is hidden to prevent security risks, then security is improved, but ease of operation is worsened as users cannot verify their password input
Solution Approach 1:
The system dynamically adjusts the password reveal selector's visibility based on real-time condition assessment. Rather than being permanently hidden, the selector transitions between visible and hidden states based on detected conditions such as screen recording activities or paste events, maintaining security while preserving user verification capability when safe
Solution Approach 2:
The system performs preliminary detection of security threats (screen recording, paste events) before the user attempts to reveal the password. By proactively identifying potentially harmful conditions and pre-hiding the selector, the system prevents security risks before they can be exploited, while still allowing normal operation when no threats are detected
3Object-affected harmful factors
If the system detects screen recording or paste events to hide the password reveal selector, then security is improved, but device complexity is worsened due to additional detection mechanisms
Solution Approach 1:
The system leverages existing device capabilities and event streams (screen recording detection APIs, paste event monitoring) to implement security detection without requiring complex external hardware or specialized components. By utilizing already-present system facilities, the solution achieves enhanced security while minimizing the addition of complex detection infrastructure
Data Source
AI summary
A computer-implemented method including instructing a computing device to display a password entry element configured for input of a plurality of password characters, the password entry element including a password reveal selector, the password reveal selector being operable to be toggled between a first state in which the plurality of password characters are obfuscated and a second state in which the plurality of password characters are revealed; receiving an entry of a password character of the plurality of password characters in the password entry element, instructing the password entry element to display the password reveal selector; detecting a speed at which each character of the plurality of password characters is entered into the password entry element; instructing the password entry element to hide the password reveal selector if a total speed at which each character of the plurality of password characters is entered is less than a predetermined threshold speed.