Physiological Response Pin Entry for Shoulder Surfing Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing methods for entering personal identification numbers (PINs) are susceptible to visual observation and interception by shoulder surfers or malware, as they require manual keypresses on a keypad, making them insecure for transactions.
Innovation Solution
A system that uses physiological responses, such as facial movements, voice, or brain activity, to select numbers from a random sequence displayed on a user's device, communicating timing information instead of keystrokes to authorize transactions securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a numeric keypad is used for PIN entry, then the entry process is simple and fast, but the PIN becomes susceptible to visual observation and interception by shoulder surfers
Solution Approach 1:
The patent replaces the mechanical keypad entry system with a physiological response detection system. Instead of manually pressing keys, the system detects physiological signals (facial movements, voice patterns, brain activity) to identify which numbers the user is thinking of or intends to enter. This substitution eliminates the visual component of PIN entry while maintaining user control.
Solution Approach 2:
The patent introduces physiological responses as an intermediary between the user's mind and the PIN entry process. The physiological signals serve as a mediator that translates the user's intent into PIN digit selection without requiring visible physical interaction with a keypad, thereby preventing shoulder surfing while preserving ease of use.
2Device complexity
If traditional keypad entry is used, then the system is simple to implement, but malware can capture keystrokes and intercept the PIN
Solution Approach 1:
The patent replaces the software-based keystroke capture vulnerability with a hardware-based physiological detection system. By using sensors to detect facial movements, voice patterns, or brain activity, the system obtains PIN digit information directly from physiological signals rather than through software keystroke logging, making it immune to malware interception.
Solution Approach 2:
The patent uses transient physiological responses that cannot be stored or replayed. Each physiological signal is unique to that moment in time and cannot be captured by malware for later use, effectively making each authentication attempt a one-time event that cannot be compromised by persistent malware.
3Reliability
If surveillance cameras are used to monitor PIN entry, then security monitoring is provided, but the cameras themselves can be accessed by fraudsters to obtain PIN information
Solution Approach 1:
The patent replaces visual surveillance cameras with physiological sensors that detect facial movements, voice patterns, or brain activity. These sensors capture data that cannot be visually observed by bystanders or recorded by traditional surveillance systems, eliminating the vulnerability to camera hacking while maintaining security monitoring capabilities.
Data Source
AI summary
Methods and systems are provided for facilitating the secure entry of a user's PIN for electronic transactions such as merchant checkout, payment authorization, or access authorization. A physiological response of the user can indicate which one of a random sequence of numbers is a number of the user's PIN. For example, the user can blink, wink, or make a subtle facial movement to provide the indication.