Security Keypad Randomization Against Keylogger Input Theft
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtual keypads are vulnerable to hacking and keylogger attacks due to fixed character positions, leading to potential leaks of personal information such as passwords.
Innovation Solution
A method using random number data to generate and manage a standardized secret key by extracting plain text data from a final random number table, which is dynamically generated and managed by a server and client interaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If fixed character positions are used in virtual keypad, then ease of operation is improved, but security is worsened due to vulnerability to hacking and keylogger attacks
Solution Approach 1:
The patent implements dynamic randomization of character positions on the virtual keypad. Characters are not fixed but are randomly rearranged for each session or interaction, making it impossible for attackers to predict or log key positions. This dynamic repositioning maintains ease of operation for legitimate users while dramatically improving security against hacking and keylogger attacks.
Solution Approach 2:
The patent changes the positional parameters of characters on the keypad dynamically. By randomly altering the position coordinates of each character element, the system transforms the static keypad layout into a dynamic one where character locations change based on random number generation, thereby preventing attackers from exploiting fixed position patterns.
2Reliability
If random number data changes in size each time, then security is improved, but device complexity is worsened due to dynamic generation and management requirements
Solution Approach 1:
The patent performs preliminary actions by pre-generating random number data and character position mappings before the actual authentication process. The system prepares the randomized keypad layout and associated random number tables in advance, so that when authentication occurs, the complex randomization logic has already been executed, reducing real-time computational burden while maintaining high security.
Solution Approach 2:
The patent introduces an intermediary random number generation module that acts as a mediator between the user input and the authentication verification system. This intermediary component handles the complex randomization logic separately, generating random character positions and mapping them to authentication data, thereby isolating the complexity from the main authentication flow and making the system more manageable.
Data Source
AI summary
A method of securing input data using random number data for a security keypad according to the present disclosure includes (a) a step of generating randomly server random number data by a main server, (b) a step of generating, by a client, client random number data corresponding to each input character input through a security keypad from a random number table generated by using the server random number data, and (c) a step of generating, by the main server, final random number data and a final random number table by using the client random number data, and extracting and generating plain text data from the final random number table.