Information Terminal Image Authentication for Password Guessing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing mobile phones with password locking mechanisms can be compromised if unauthorized users try to guess the password, as they can input multiple combinations without being detected, potentially revealing stored information.

Innovation Solution

An information terminal with an image pickup feature that captures the operator's image only when authentication is requested, extracts a person's area from the image data, and enables processing only if both authentication succeeds and the image is recognized, preventing unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a password locking mechanism is used, then the information terminal can be protected from unauthorized access, but unauthorized users can repeatedly input password combinations to guess the correct password

Engineering Contradiction:
Improveauthentication securityVSAvoidpassword guessing attacks
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an image pickup portion as an intermediary authentication factor between the user and the password verification system. The camera captures the user's image, and the system verifies both the image and password together, making it harder for unauthorized users to guess passwords without being detected through image analysis

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the authentication parameters from solely password-based to a combined image and password verification system. By adding image recognition as an additional parameter, the system increases authentication complexity and reduces the effectiveness of simple password guessing attacks

Inventive Principle:
Principle #35Parameter changes

2Reliability

If the image pickup portion is always active to capture operator images, then unauthorized users can be detected, but the device complexity and power consumption increase

Engineering Contradiction:
Improveunauthorized user detectionVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The image pickup portion operates periodically or on-demand rather than continuously. The camera is activated specifically during authentication attempts, capturing images only when needed for verification, thus reducing overall system complexity and power consumption while maintaining detection capability

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The system performs preliminary image capture before final authentication verification. By capturing the image in advance during the authentication request phase, the system prepares authentication data without requiring continuous camera operation, simplifying the overall system design

Inventive Principle:
Principle #10Preliminary action

3Reliability

If the system requires both authentication success and image recognition to enable processing, then unauthorized access is prevented, but the ease of operation decreases

Engineering Contradiction:
Improveaccess control securityVSAvoidauthentication convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent merges image recognition and password verification into a single unified authentication process. Both authentication factors are combined and verified together in one step, so users don't experience multiple separate authentication stages, maintaining operational ease while enhancing security

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS8817105B2Information terminal, and method and program for restricting executable processing
Publication Date: 2014.08.26 KYOCERA CORP
  • US8817105B2 patent drawing
  • US8817105B2 patent drawing
  • US8817105B2 patent drawing

AI summary

An apparatus and method for restricting executable processing carried out in an information terminal, the method including: accepting an operation by an operator; in response to the accepted operation, executing processing corresponding to the operation; requesting an input of identification information; performing authentication of the identification information input in response to the request; in the case where an input of identification information is requested in the identification information requesting step, acquiring image data; storing the acquired image data; extracting an area including an image recognized as a person from the acquired image data; enabling execution of processing and deletion of the image data when an authentication succeeds and preventing deletion of the image data when the authentication fails.