Three-Position Keypad for Shoulder Surfing Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Password-based logon systems are vulnerable to shoulder surfing, where an attacker can observe and replicate the entry of authentication data, such as PINs or passwords, due to the lack of secure key press differentiation.
Innovation Solution
A keypad with multiple keys featuring three-position switches that provide distinct tactile feedback, allowing users to differentiate between key presses through varying forces, making it difficult for observers to accurately replicate the entry, and incorporating meta-data such as timing and rhythm to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a conventional keypad with single-position keys is used, then the ease of operation is high, but the security against shoulder surfing is low
Solution Approach 1:
The patent applies dynamics by transforming static single-position keys into dynamic three-position switches that can be actuated with different forces. Each key can be pressed to a first position (light press) or a second position (hard press), creating variable states that enhance security while maintaining operational simplicity. The elastic element enables this dynamic behavior by providing restorative force and allowing multiple stable positions.
Solution Approach 2:
The patent changes the parameter of key position from a single state to three distinct states (first position, second position, and intermediate position). This parameter change allows the system to encode more information per key press and makes observation more difficult, as an observer cannot easily determine which position was reached or how much force was applied.
2Reliability
If three-position switches with multiple force levels are implemented, then the security against observation is improved, but the device complexity increases
Solution Approach 1:
The patent applies segmentation by dividing each key into three distinct positional segments (first position, second position, and intermediate position). This segmentation allows the key to provide multiple discrete states without requiring entirely separate mechanisms for each state, thereby reducing overall complexity while maintaining enhanced security functionality.
Solution Approach 2:
The elastic element provides self-service by automatically restoring the switch to its original position after actuation and by providing tactile feedback to indicate the current position. This self-restoring mechanism eliminates the need for additional complex control systems to manage the multiple positions, reducing device complexity while maintaining the security benefits.
3Measurement precision
If the difference between forces for different positions is made large, then the tactile response is improved, but the ease of operation decreases
Solution Approach 1:
The patent applies partial action by providing an intermediate first position that requires less force than the second position. This allows users to perform partial key presses for normal operation while reserving the full-force second position for security-critical actions. The elastic element is designed to provide sufficient tactile differentiation without requiring excessive force, balancing precision and ease of operation.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
The keypad design significantly enhances security by making it harder for attackers to observe and replicate the correct sequence of key presses, increasing the complexity of authentication data entry and reducing the risk of unauthorized access.
Implementation Method 1
The three position switch comprises an elastic element for restoring the three position switch to a first position when no force is applied to the three position switch
Data Source
AI summary
The invention provides for an electronic system with a keypad for manual entry of authentication data by a user. The keypad comprises: multiple keys for entering the authentication data. At least one of the multiple keys comprises a three position switch with an elastic element for restoring the three position switch to a first position. The three position switch is operable to be depressed in a motion direction to a second position and a third position. The motion direction is perpendicular to a surface where the keys are mounted. A first force is required to depress the three position switch to the second position and a second force is required to depress the three position switch from the second position to the third position. The second force is greater than the first force.The keypad further comprises a controller configured for monitoring key presses of the multiple keys and for monitoring key position data of the three position switch of each of the at least one of the multiple keys during the key presses. The controller is further configured for decoding the key presses and the key position data into the authentication data. The keypad is further configured for outputting the authentication data via a data connection.