Picture Password Interface for Web Service Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face challenges in memorizing and managing complex text passwords for different web services, leading to password reuse and increased security risks, while traditional password managers can compromise all stored passwords if accessed unauthorizedly.
Innovation Solution
A picture password interface is introduced, where users select regions of a displayed picture to generate a user-specific and web service-specific text password, combining user input with a web service key to create a password that complies with complexity rules, stored as picture password data, providing enhanced security without requiring changes to the underlying password system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users memorize complex text passwords for different web services, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent replaces the mechanical system of text-based password input with a visual interaction system. Users interact with a displayed image through clicking, dragging, or gesture-based actions on visual elements, transforming the abstract concept of a password from text memorization to concrete visual manipulation. This substitution maintains security through complex password generation while dramatically improving ease of operation through intuitive visual interaction.
Solution Approach 2:
The patent introduces an intermediary system that generates complex passwords on behalf of users based on visual interactions. Instead of users directly creating or memorizing passwords, the system acts as a mediator that translates simple visual actions into secure password strings, which are then used for authentication. This intermediary approach resolves the contradiction by handling the complexity burden while keeping user interaction simple.
2Ease of operation
If users reuse a single password to avoid memorizing complex passwords, then ease of operation is improved, but security deteriorates
Solution Approach 1:
The patent segments the password management problem by creating unique visual passwords for each web service through the use of distinct images and different interaction patterns. Instead of using a single reused password, users have multiple independent visual passwords, each associated with specific service credentials. This segmentation ensures that compromise of one service does not affect others, maintaining both ease of operation and security.
Solution Approach 2:
The patent applies local quality by customizing password characteristics for different services through service-specific images and authentication parameters. Each web service receives a uniquely tailored visual password experience, allowing users to maintain simple interaction patterns while generating service-specific secure credentials. This localized approach enables secure service-specific passwords without requiring users to manage complex variations manually.
3Ease of operation
If traditional password managers store all passwords centrally, then ease of operation is improved, but security deteriorates due to single point of compromise
Solution Approach 1:
The patent segments password storage by maintaining service-specific credentials in a distributed manner rather than centralizing all passwords in a single database. Each web service has its own associated image and authentication parameters stored separately, eliminating the single point of failure inherent in traditional password managers. Users can still access multiple passwords through the unified visual interface, maintaining ease of operation while improving security through distribution.
Solution Approach 2:
The patent introduces a visual interaction intermediary that sits between the user and the distributed credential storage system. This intermediary translates user actions on displayed images into appropriate credential retrieval and submission, providing centralized ease of access while maintaining distributed secure storage. The intermediary handles the complexity of credential management without requiring centralized storage of all passwords in one vulnerable location.
4Ease of operation
If picture passwords are used to generate complex passwords, then security is improved and ease of operation is improved, but device complexity increases
Solution Approach 1:
The patent applies universality by designing a picture password system that can authenticate users across multiple web services through a unified visual interface. The same image-based interaction mechanism serves multiple authentication purposes, managing diverse service credentials through a single multi-functional system. This universal approach manages the inherent complexity by consolidating multiple functions into one coherent system rather than requiring separate solutions for each service.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A picture password interface is displayed to generate a password for a web service that accepts text passwords to help users more easily remember their passwords. In response to receiving user input at a picture displayed in the picture password interface, values from an associated cipher key are identified. These identified values are then combined into a user key based on an order and location at which the user input was received. The user key is then combined with a web service key to generate a password that is specific to the user and specific to the web service that the user is attempting to access. The generated password can be verified to ensure that it complies with any password complexity rules for the web service.