Picture-Based Authentication Unit for Mobile Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current user authentication methods on mobile devices, such as PINs and fingerprint sensors, are vulnerable to keylogger software and offer limited security due to small sensor size, resulting in a security level comparable to a three-digit PIN.
Innovation Solution
A mobile device with a processing unit, user-interactive display, and authentication unit that shows a set of predefined pictures for user selection and verification, utilizing the user's ability to differentiate between positive and negative identification images, with the authentication unit controlling the display to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (PIN, password) are used, then ease of operation is maintained, but security level deteriorates due to vulnerability to keylogger software
Solution Approach 1:
The patent introduces an authentication unit as an intermediary component that operates independently from the host application and operating system. This authentication unit directly controls the display to show pictures and process user selections, creating a secure isolation layer that prevents keylogger software from intercepting authentication credentials while maintaining user-friendly picture-based interaction
2Reliability
If fingerprint sensor is used for authentication, then security is improved compared to PIN, but security deteriorates due to small sensor size limiting evaluation of fingerprint attributes
Solution Approach 1:
The patent replaces the mechanical/biometric fingerprint sensing system with a visual picture selection system. Instead of relying on physical fingerprint attributes that are limited by small sensor size, the system uses the user's visual recognition and associative memory capabilities to select pictures, thereby substituting a physical measurement limitation with a cognitive-based authentication approach
3Reliability
If existing user interface is used for credential entry, then ease of operation is maintained, but security deteriorates due to interception by keylogger software through existing communication channels
Solution Approach 1:
The patent segments the authentication process from the host application by introducing a dedicated authentication unit that operates independently. This segmentation creates separate functional modules: the host application requests authentication, the authentication unit displays pictures and receives input, and the verification is performed within the authentication unit itself, thereby isolating the security-critical path from potential keylogger interference
Data Source
AI summary
There is disclosed a mobile device comprising a processing unit for executing a host application, a user-interactive display and an authentication unit; wherein the authentication unit is arranged to receive an authentication request from the host application; wherein the authentication unit is arranged to cause the display to show a set of pictures in response to receiving the authentication request; wherein the authentication unit is further arranged to identify a selection of at least one picture from said set of pictures; and wherein the authentication unit is further arranged to initiate a verification of said identified selection. Furthermore, a corresponding method of authenticating a user is disclosed, as well as a corresponding computer program, an article of manufacture and a display.