Quantum Random Number Pattern Authentication for Smudge Attack Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile device authentication methods using user input patterns are vulnerable to smudge and shoulder surfing attacks, as they do not provide adequate protection against unauthorized access through visual observation or recording.
Innovation Solution
A pattern authentication method that incorporates a true quantum random number generator (TQRNG) to generate unpredictable and unbiased quantum random numbers, combined with a touch event on a specific, hidden region of the device, to enhance security by changing the code value based on touch events and using these numbers to derive a Key Derivation ID (KDI) for secure authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a traditional pattern authentication method is used, then the authentication process is simple and easy to operate, but it is vulnerable to smudge and shoulder surfing attacks
Solution Approach 1:
The patent introduces a hidden touch sensor as an intermediary element that mediates between the user's touch input and the authentication system. This hidden sensor acts as a secret channel that only the legitimate user can access, preventing shoulder surfing and smudge attacks while maintaining the simplicity of pattern-based authentication.
Solution Approach 2:
The authentication system is segmented into two independent components: the visible pattern display and the hidden touch sensor. This segmentation allows the pattern to remain simple and visible for ease of use, while the hidden sensor provides the security layer against attacks by capturing touch events that are not visible to attackers.
2Reliability
If quantum random numbers are used to enhance security, then the authentication becomes more secure against attacks, but the system complexity increases
Solution Approach 1:
The system performs preliminary actions by pre-generating and storing quantum random numbers and their corresponding code values in a database before authentication is needed. This preliminary preparation allows the authentication process to remain simple, as it only requires comparing the current pattern with pre-stored values, while still providing high security through the use of quantum random numbers.
Solution Approach 2:
The patent uses copying by creating a database of pre-generated quantum random numbers and their corresponding code values. Instead of generating complex cryptographic keys in real-time, the system copies and compares pre-prepared values, simplifying the authentication process while maintaining high security through the unpredictability of quantum random numbers.
Data Source
AI summary
A pattern authentication method for preventing a smudge and a shoulder surfing attack. The pattern authentication method includes: a pattern registration step; and a pattern authentication step, in which the pattern registration step includes: a step of receiving a pattern from a user by an input unit of a pattern authentication device; a step of matching and storing a code value corresponding to the pattern input from the user by a matching unit; and a step of generating a user KDI (Key Derivation ID) by matching the code value to a quantum random number generated by a quantum random number generator by a KDI generator.