Surface Pulse Sequence Password Input Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for user authentication, such as PIN entry on ATMs and mobile devices, are vulnerable to observation-based attacks, where unauthorized users can deduce the security code by watching the user input process, limiting flexibility and security.
Innovation Solution
A method and apparatus that determine objects in contact with a surface, generate pulse sequences based on these contacts, and actuate the surface accordingly, allowing secure password input by correlating pulse sequences with character entries, reducing the likelihood of observation-based security breaches.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional PIN entry methods are used, then ease of operation is maintained, but security is compromised due to observation-based attacks
Solution Approach 1:
The patent introduces an intermediary layer between the user's finger and the keypad by detecting objects in contact with the surface. This intermediary detection mechanism captures pulse sequences that represent the user's input without exposing the actual characters, thereby enhancing security while maintaining ease of operation through the same simple finger-press interface
Solution Approach 2:
The patent replaces the traditional mechanical keypress detection system with an optical or capacitive sensing system that detects objects in contact with the surface and measures pulse sequences. This substitution allows the system to capture input data without relying on visible mechanical key presses, making observation-based attacks ineffective while preserving the simplicity of the input method
2Reliability
If PIN code flexibility is restricted to prevent observation attacks, then security is improved, but PIN code flexibility and length are reduced
Solution Approach 1:
The intermediary object detection system allows the patent to maintain full PIN code flexibility (including length and character choices) while preventing observation attacks. The mediator captures the essence of the input through pulse sequences without exposing the actual PIN structure, enabling users to choose any PIN format they prefer
3Reliability
If users obscure their fingers while entering codes, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent replaces the need for physical obscuring gestures with an automated object detection system. Instead of requiring users to perform complex hand movements to hide their input, the system automatically detects objects in contact with the surface and captures pulse sequences, eliminating the need for obscuring gestures while maintaining security
Solution Approach 2:
The system performs the security function automatically through object detection and pulse sequence analysis, without requiring the user to take additional actions. The detection system works in the background, capturing input data while the user simply enters their PIN as normal, making the security enhancement transparent and effortless
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances security by making it difficult for observers to discern the input characters, increasing the robustness of user authentication systems without restricting PIN code flexibility or length.
Implementation Method 1
determining at least one object in contact with a surface; generating at least one pulse sequence based on determining the at least one object in contact with the surface
Data Source
AI summary
A method and related electronic apparatus for providing a user access to a computer system, the method comprising: determining at least one object in contact with a surface; generating at least one pulse sequence; actuating the surface based on the at least one pulse sequence; determining an absence of the at least one object from the surface; determining at least one character of a password input based on the at least one pulse sequence.