Pattern-Based Password Authentication Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer users face challenges in securely managing passwords, as complex passwords are difficult to remember but simple ones are easily hackable, leading to a need for enhanced protection.
Innovation Solution
The use of an associated pattern with a password, where a user generates a pattern on a grid or matrix, and the coordinates of this pattern are stored along with the password for authentication, making brute force attacks significantly more difficult by increasing the number of required attempts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a simple password is used, then it is easier for the user to remember it, but it can be easily hacked by brute force attack
Solution Approach 1:
The patent combines the password with a pattern (such as a drawing on a grid) to create a composite authentication mechanism. The pattern is stored as a set of coordinates along with the password, and during authentication, both the password and the pattern must be provided correctly. This merging transforms a simple password into a more secure combined credential while maintaining user memorability.
Solution Approach 2:
The patent adds a spatial dimension to password authentication by introducing a pattern defined on a two-dimensional grid. Instead of only providing a one-dimensional string of characters, the user must also correctly identify the pattern's coordinates. This dimensional extension significantly increases the search space for attackers while keeping the password itself simple and memorable.
2Reliability
If a complex password is used, then it is more secure against brute force attack, but it is difficult for the user to remember it
Solution Approach 1:
The patent segments the authentication task into two independent parts: a simple password that is easy to remember and a pattern (coordinates) that provides the security enhancement. By dividing the authentication burden, the user only needs to memorize the simple password while the pattern component handles the security requirements, eliminating the need to remember complex passwords.
Solution Approach 2:
The pattern (represented by coordinates) acts as an intermediary element that bridges the gap between simple memorability and strong security. Instead of requiring the user to remember a complex password directly, the pattern serves as an additional factor that the user must provide during authentication, thereby maintaining ease of remembering while achieving security.
3Device complexity
If the password is stored alone, then the system is simple, but it is vulnerable to hacking
Solution Approach 1:
The patent merges the password storage with pattern coordinate storage into a unified authentication record. The system stores both the password and the pattern's coordinates together, and the authentication process requires verification of both components. This merging enhances security without requiring fundamentally new system architecture, maintaining relative simplicity while significantly improving protection.
4Productivity
If a brute force attack is performed on a simple password, then the attack is quick and effective, but it fails against pattern-protected passwords
Solution Approach 1:
The patent adds a second dimension to the authentication space by incorporating pattern coordinates alongside the password. A brute force attack that only guesses passwords becomes ineffective because the attacker must also correctly identify the pattern's coordinates. This dimensional expansion transforms a feasible attack into an infeasible one by multiplying the search space.
Solution Approach 2:
The patent segments the authentication credentials into two independent components: the password and the pattern. A brute force attack must successfully guess both components independently, which dramatically increases the total number of attempts required. The segmentation allows the system to maintain simple password memorability while the pattern component provides the security barrier against automated attacks.
Data Source
AI summary
A user generates a pattern in a matrix (or two-dimensional grid) and enters a user name and an associated password. This username, password and pattern are stored locally on a computing device or are transmitted to a remote computer server for later authentication. Upon authentication, an input matrix is displayed. The user enters the password into the matrix in the form of the pattern, and also enters the username. The computer retrieves the previously stored pattern and password with the username. The previously stored pattern is used to read the input password from the input matrix. A match with the stored password indicates authentication. Alternatively, the input matrix only includes the pattern and password is entered separately. The input matrix may also be filled with random characters to improve security. The stored pattern is compared to the input pattern using image analysis or by comparing a set of coordinates.