Secure Screen Reader Access to Sensitive Information with Audio Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current technologies are insufficient in securely communicating sensitive information to visually impaired users of smart devices, as screen readers and accessibility features pose a security risk due to the potential for eavesdropping or shoulder-surfing of confidential data.
Innovation Solution
Implementing a multi-factor authentication (MFA) method with a screen reader/talk back feature on client devices, requiring audio device connection or proximity to ensure secure communication of sensitive information, and using biometric authentication with fallback mechanisms for visually impaired users.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If screen reader accessibility features are enabled on client devices, then visually impaired users can access sensitive information, but security is compromised due to potential eavesdropping or shoulder-surfing of confidential data
Solution Approach 1:
The patent introduces an intermediary authentication mechanism that mediates between the screen reader accessibility feature and security requirements. The system uses biometric authentication (fingerprint, facial recognition) as an intermediary layer to verify user identity before allowing screen reader access to sensitive information, thus enabling accessibility while maintaining security through an intermediate verification step
Solution Approach 2:
The system dynamically changes security parameters based on the detected accessibility feature status. When screen readers are detected, the system activates enhanced authentication protocols and security measures, effectively changing the security parameter state to balance accessibility needs with information protection requirements
2Reliability
If audio devices are required for secure communication of sensitive information, then eavesdropping risk is reduced, but device complexity and user setup requirements increase
Solution Approach 1:
The system implements self-service functionality by automatically detecting audio device connections and configuring security protocols without requiring manual user setup. The client device autonomously monitors audio device status and adjusts authentication requirements accordingly, reducing the burden on users while maintaining security
Solution Approach 2:
The system performs preliminary authentication and audio device verification before sensitive information is transmitted. By pre-configuring security measures and verifying audio device connectivity in advance, the system ensures security requirements are met without adding complexity during the actual information access process
Data Source
AI summary
Disclosed are systems and method for securely communicating sensitive information on a client device that receives sensitive information. An application running on the client device determines a positive enablement status of a screen reader on the client device and determines a negative connection status of the client device to an audio device. The client device generates a prompt to connect an audio device to the client device based on the negative connection status. The application triggers a number of wait periods and determines a persistence of the negative connection status after each period of the number of wait periods. The client device generates another prompt to input a passcode via the client device based on the persistence of the negative connection status. The system includes a terminal device or online platform, the client device, and a server coupled to the client device and the terminal device or the online platform.