Obfuscating PIN Data in Images via LSB Substitution

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for communicating security information within enterprise computing environments are susceptible to unauthorized interception, compromising the security of sensitive information.

Innovation Solution

A system that embeds security identifiers into user-selected images using data hiding algorithms like LSB substitution, scrambles, and encrypts them, allowing secure retrieval and display only when the correct image is selected by the user, ensuring secure communication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If security information is communicated through traditional electronic methods (email, text messages), then ease of operation is improved, but security against unauthorized interception deteriorates

Engineering Contradiction:
Improveease of communicationVSAvoidunauthorized interception
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent embeds security information (PIN) within an image file, creating a nested structure where the sensitive data is hidden inside an innocuous container (the image). This allows the security information to be communicated through standard electronic channels while remaining protected from unauthorized access, as the data is concealed within the image's pixel structure using LSB substitution techniques.

Inventive Principle:
Principle #7Nested doll (Nesting)

Solution Approach 2:

The patent uses an image file as an intermediary carrier to transmit security information. Instead of directly communicating the PIN through vulnerable electronic channels, the system embeds the PIN within an image that serves as a mediator. This intermediary approach allows secure transmission through standard channels while the image structure protects the embedded data from interception.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If security information is embedded within image data, then security against unauthorized access is improved, but device complexity increases

Engineering Contradiction:
Improveunauthorized access protectionVSAvoidsystem complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent replaces traditional security mechanisms (physical delivery, encrypted email) with a data processing approach using LSB (Least Significant Bit) substitution. Instead of relying on complex encryption systems or physical security measures, the system uses bitwise operations to embed data within image pixels, simplifying the security mechanism while maintaining protection against unauthorized access.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Object-affected harmful factors

If data hiding algorithms like LSB substitution are used to embed security identifiers, then security is improved, but manufacturing precision requirements increase

Engineering Contradiction:
Improveinterception resistanceVSAvoiddata embedding precision
Core Design Contradiction:
Object-affected harmful factorsVSManufacturing precision

Solution Approach 1:

The patent uses the least significant bits of image pixels as disposable containers for security data. These LSB positions can be modified without affecting the overall image quality, allowing precise data embedding while maintaining image integrity. The approach treats individual bit positions as temporary, disposable storage locations that can be reliably manipulated without requiring high-precision physical manufacturing.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

Data Source

PatentUS11829499B2Securing PIN information using obfuscation by applying extra security layer
Publication Date: 2023.11.28 BANK OF AMERICA CORP
  • US11829499B2 patent drawing
  • US11829499B2 patent drawing
  • US11829499B2 patent drawing

AI summary

An illustrative computing system for securely managing security information receives a request for security information. The computing system acquires the security information associated with the user and embeds the security information in a user selected image. The computing system modifies the image based on a user selected identifier to scramble the location of pixels. The computing system encrypts and transmits the image. The computing system decrypts the image at the user interface. The computing system modifies the image based on the user selected identifier to descramble the pixels. The computing system displays the image at the user interface with a plurality of images for user selection. Based on the image selected by the user, the computing system extracts security information from the image. The computing system displays the requested security information at the user interface.