Picture Gesture Authentication for Secure User Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional password protection methods are either too complex for users to remember or too simple to be secure, leading to frustrating experiences with forgotten passwords and potential data exposure.

Innovation Solution

A picture signature password system that uses a personalized digital image and user-selected drawings or gestures to authenticate access, combining complexity with usability by allowing touch inputs and traditional methods, and comparing user inputs against stored library sets for authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a complex password is used to provide proper security, then security level is improved, but user memory difficulty increases leading to forgotten passwords

Engineering Contradiction:
Improvesecurity levelVSAvoiduser memory difficulty
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the traditional text-based password authentication system with a graphical gesture-based authentication system. Instead of requiring users to remember complex character sequences, the system uses visual images combined with simple drawing gestures that are easier to remember and execute, thereby maintaining security while improving usability

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent changes the authentication parameter from text characters to graphical images and gestures. This parameter transformation allows the system to maintain high security through image complexity while simultaneously improving user experience through intuitive visual memory and simple drawing actions

Inventive Principle:
Principle #35Parameter changes

2Ease of operation

If a simple password is used for ease of remembering, then user convenience is improved, but security level deteriorates due to easily divined passwords

Engineering Contradiction:
Improveuser convenienceVSAvoidsecurity level
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent adds a spatial dimension to password authentication by using graphical images and gestures instead of linear text sequences. This dimensional change enables users to employ visual memory and spatial reasoning, creating passwords that are both simple to remember and difficult to guess or brute-force

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

3Adaptability or versatility

If multiple authentication attempts are allowed, then user flexibility is improved, but system vulnerability increases due to potential brute force attacks

Engineering Contradiction:
Improveuser flexibilityVSAvoidbrute force attack vulnerability
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements a mechanism where failed authentication attempts result in progressive penalties including extended lockout periods and eventual data erasure. This creates a disposable approach to security where the system can afford to be lenient initially but imposes severe consequences for persistent attacks, deterring brute force attempts while allowing legitimate users flexibility

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

Data Source

PatentEP2715597B1Picture gesture authentication
Publication Date: 2019.04.17 MICROSOFT TECHNOLOGY LICENSING LLC
  • EP2715597B1 patent drawingFigure 1
  • EP2715597B1 patent drawingFigure 2
  • EP2715597B1 patent drawingFigure 3a

AI summary

In one embodiment, a picture signature password system may use a picture signature password to determine access to a computing device or service. A display screen 172 may display a personalized digital image 310. A user input device 160 may receive a user drawing set executed by a user over the personalized digital image 310. A processor 120 may authenticate access to the user session if the user drawing set matches a library drawing set associated with the user.