Dynamic Authentication Key Layouts for Shoulder-Surfing Resistance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user interfaces for inputting authentication credentials on devices are static, allowing observers to easily determine the credentials, increasing the risk of unauthorized access.
Innovation Solution
Implement a dynamically generated user interface where the placement and attributes of keys change randomly for each input attempt, using multiple attributes per key such as color, shape, and background pattern, making it difficult for observers to replicate the credential.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a static user interface is used for authentication, then the interface is simple and easy to implement, but observers can easily determine the authentication credential
Solution Approach 1:
The patent implements a dynamic user interface where the placement and attributes of keys change randomly for each authentication attempt. This dynamic behavior prevents observers from determining the authentication credential by watching a single static interface, as the interface configuration varies with each use while maintaining the same underlying authentication logic
Solution Approach 2:
The patent changes multiple parameters of the user interface including key positions, key attributes (such as color, shape, background pattern), and key mappings. By varying these parameters randomly for each authentication attempt, the system enhances security without requiring a completely different interface structure
2Reliability
If multiple attributes are assigned to each key, then the credential becomes harder to observe and replicate, but the interface complexity increases
Solution Approach 1:
Each key in the interface is designed to have multiple attributes (such as color, shape, background pattern, text label) that can independently vary. This multi-functionality allows a single key element to convey multiple pieces of information and makes credential observation more difficult, as observers cannot determine which attribute corresponds to the authentication credential
Data Source
AI summary
Disclosed are systems and methods for dynamic user interfaces for authentication. A user interface comprising a plurality of user interface elements can be generated. The plurality of user interface elements can be generated according to a random placement. The each plurality of user interface elements can comprise a random plurality of attribute values.