Randomized Passcode Entry Sequence for Fraud Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for secure passcode entry, such as ATMs and other transaction systems, are vulnerable to fraud as users' PINs can be easily recorded or viewed, allowing fraudsters to access accounts.
Innovation Solution
A method is introduced where a randomized input sequence is displayed on a terminal, prompting users to enter their passcode in a non-traditional order, which is then verified against a stored passcode in a database, making it difficult for fraudsters to guess the correct order even if they obtain the digits.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a traditional passcode entry system is used, then the ease of operation is maintained, but the security against fraud is compromised
Solution Approach 1:
The patent applies dynamics by making the passcode entry sequence variable and non-fixed. Instead of a static traditional entry order, the system dynamically randomizes the sequence in which passcode characters must be entered. This dynamic approach ensures that even if the passcode digits are known, the entry order remains unpredictable, thereby enhancing security while maintaining operational simplicity for users who simply follow the displayed sequence.
Solution Approach 2:
The patent changes the parameter of entry sequence order from fixed to random. By altering the order parameter in which passcode characters are input, the system creates a new dimension of security. The randomization of the sequence parameter ensures that traditional observation or recording methods fail to capture the correct entry order, thus improving security without complicating the user experience.
2Reliability
If a fixed passcode entry sequence is used, then the ease of manufacture and implementation is maintained, but the susceptibility to fraud increases
Solution Approach 1:
The system performs preliminary action by generating and displaying the randomization sequence before the user enters the passcode. This preliminary randomization step establishes the entry order in advance, preventing fraudsters from observing or recording the sequence. The preliminary action of sequence generation and display occurs before the vulnerable entry phase, thereby protecting against subsequent fraud attempts without adding complexity to the overall mechanism.
Solution Approach 2:
The patent introduces an intermediary element in the form of a randomization sequence generator and display mechanism. This intermediary component sits between the user's passcode input and the verification system. The intermediary randomizes the entry order, creating a protective layer that prevents direct observation of the entry sequence by fraudsters while maintaining a simple interface for users.
3Ease of operation
If passcode entry is made visible or observable, then the ease of operation is improved, but the vulnerability to recording and viewing by fraudsters increases
Solution Approach 1:
The patent applies inversion by reversing the traditional approach of displaying the passcode entry sequence in a fixed, predictable order. Instead of showing the sequence in the natural reading or typing order, the system inverts and randomizes the sequence display. This inversion makes it difficult for fraudsters to correlate the displayed sequence with the actual entry order, thereby protecting against observation while maintaining ease of operation for legitimate users.
Solution Approach 2:
While not literally using color changes, the patent employs visual transformation through randomization of the sequence display. The display dynamically changes the order and presentation of the entry sequence, creating visual variability that prevents pattern recognition by fraudsters. This visual transformation approach maintains simplicity for users while introducing complexity that thwarts fraudulent observation and recording.
Data Source
AI summary
Systems and methods are provided for facilitating guided entry of a passcode. The exemplary guided passcode entry system provides additional security to traditional secret PIN or passcode entry systems by generating a randomized input sequence (order of entry) and prompting a user to input a passcode according to the randomized input sequence. The system also causes a test of the user's input data against a database of passcodes associated with the particular user for an exact match. The testing step can include comparing characters of the input data to a particular passcode associated with the user which is stored in a database in accordance with the randomized input sequence in regard to the order that the input data was received. Based on the comparison of the received passcode to the stored passcode, the system can advance a transaction with the user.