Randomized Password Segmentation for Key-Logging Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods are vulnerable to key-logging attacks, especially when sensitive information is transmitted in non-secure environments, making it difficult to protect user credentials effectively.
Innovation Solution
A system generates a random sequence of characters, numbers, or symbols that is appended to or inserted within a user's password, which is then transmitted and used for authentication, ensuring that only the system can extract the actual password, thereby enhancing security against interception and unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a user enters their password in a non-secure environment, then authentication can be performed, but the password may be intercepted by malicious applications through key-logging attacks
Solution Approach 1:
The password is segmented by inserting a random sequence within it, dividing the original password into multiple portions separated by the random sequence. This segmentation ensures that even if part of the password is intercepted, the complete password cannot be reconstructed without knowing the random sequence position and value.
Solution Approach 2:
A random sequence acts as an intermediary element inserted within the password. This intermediary prevents direct exposure of the original password to potential interceptors, as the random sequence obscures the actual password characters and their positions.
2Reliability
If the random sequence is inserted within the password, then security against interception is improved, but the complexity of password entry and processing increases
Solution Approach 1:
The random sequence is generated and inserted into the password structure in advance, before the user needs to enter the password. The system pre-processes the password by embedding the random sequence at a predetermined position, which simplifies the user's entry task while maintaining security.
Solution Approach 2:
The password structure is dynamically changed by varying the random sequence insertion position and content for each authentication attempt. This parameter change ensures that even if the same password is used, the transmitted authentication data differs each time, enhancing security without requiring complex user actions.
Data Source
AI summary
A user inserts a received random sequence into the user's password or PIN. The user enters and transmits this randomized password to a service provider. The service provider extracts the password to determine whether to authenticate the user.