Security Keypad Random Number Mapping Against Keylogger Attacks

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing virtual keypads are vulnerable to hacking and keylogger attacks due to fixed character positions, leading to potential leaks of personal information.

Innovation Solution

A method using random number data to generate and manage a standardized secret key by extracting plain text data from a final random number table, which is dynamically generated and managed by a server and client interaction.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If fixed position characters are used in virtual keypad, then ease of operation is improved, but security is worsened due to vulnerability to hacking and keylogger attacks

Engineering Contradiction:

Improveease of operationVSAvoidsecurity

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent implements dynamic random positioning of characters on the virtual keypad, where character positions change with each session or input sequence. This dynamic repositioning prevents attackers from using fixed position patterns to deduce input data, while still maintaining ease of operation through randomization algorithms that preserve input efficiency

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system changes the parameter of character position coordinates randomly for each session. By varying the spatial parameters of character placement rather than using fixed positions, the system enhances security against pattern-based attacks while maintaining operational ease through consistent interaction methods

Inventive Principle:

Principle #35Parameter changes

2Loss of information

If touch coordinate information is stored for virtual keypad input, then input tracking is improved, but security is worsened due to potential memory hacking and information leakage

Engineering Contradiction:

Improveinput trackingVSAvoidsecurity

Core Design Contradiction:

Loss of informationVSReliability

Solution Approach 1:

The patent extracts and eliminates the storage of sensitive touch coordinate information from the system. Instead of storing actual coordinate data that could be hacked, the system only processes and validates input sequences without retaining positional information that could leak personal data through memory access

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The system uses temporary, disposable input validation tokens that exist only during the authentication process and are immediately discarded afterward. This approach provides sufficient input tracking for security validation while preventing long-term storage vulnerabilities that could lead to information leakage

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Data Source

PatentUS12512979B2Security method of input data using random number data for security keypad

Publication Date: 2025.12.30 LOCK IN COMPANY CO LTD

AI summary

A method of securing input data using random number data for a security keypad according to the present invention includes (a) a step of generating randomly server random number data by a main server, (b) a step of generating, by a client, client random number data corresponding to each input character input through a security keypad from a random number table generated by using the server random number data, and (c) a step of generating, by the main server, final random number data and a final random number table by using the client random number data, and extracting and generating plain text data from the final random number table.