Touch Authentication Using Path Fluctuation Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods require character input, which can be inconvenient for users on devices without keyboards, such as portable terminals, making it difficult to determine if the operator is a human.
Innovation Solution
An authentication system that displays an authentication screen and determines if the operation is performed by a human based on the fluctuation amount of the operation path relative to a reference path, using positional information from sensors like acceleration and orientation data, without requiring character input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If character input is used for authentication, then the ability to determine whether the operator is human is improved, but the ease of operation deteriorates for devices without keyboards
Solution Approach 1:
The patent replaces the mechanical keyboard input system with a touch-based interaction system. Instead of requiring physical keyboard input, the system uses touch screen interactions where users draw patterns or perform gestures on the display, eliminating the need for keyboards while maintaining authentication capability.
Solution Approach 2:
The patent introduces an intermediary authentication interface between the user and the system. This interface captures touch interactions and converts them into authentication data, serving as a mediator that translates natural touch gestures into secure authentication verification without requiring direct keyboard input.
2Reliability
If character input is required for authentication, then the security against automated processing is improved, but the loss of time increases due to the complexity of the operation
Solution Approach 1:
The patent applies partial action by requiring only a portion of the interaction (drawing a pattern or performing a gesture) rather than complete character input. This reduces the time required while still providing sufficient complexity to prevent automated processing, achieving security with less time investment.
Solution Approach 2:
The patent changes the parameter of authentication from character-based input to gesture-based input. This parameter change maintains the complexity needed to thwart automation while significantly reducing the time required, as gestures can be performed more quickly and naturally than typing characters.
3Reliability
If traditional CAPTCHA methods are used, then the prevention of fraudulent use is improved, but the adaptability to different device types deteriorates
Solution Approach 1:
The patent creates a universal authentication system that functions across multiple device types. By using touch screen interactions that work on smartphones, tablets, and other portable devices without keyboards, the system achieves multi-functionality and broad adaptability while maintaining fraud prevention capabilities.
Solution Approach 2:
The patent introduces dynamic authentication methods that adapt to different device contexts. The system can adjust the type of interaction required (different patterns, gestures, or tasks) based on the device being used, providing both fraud prevention and device adaptability through dynamic adjustment of authentication requirements.
Data Source
Figure 1
Figure 2
Figure 3A~3C
AI summary
It is determined whether or not a subject operating an information terminal is a human without requiring a character input. A client device displays an authentication screen, sequentially acquires positional information on the authentication screen based on operation information which has been received, records a path which is indicated by the sequentially acquired positional information, and transmits the recorded path to an authentication server. The authentication server determines whether or not an operation indicated by the operation information is an operation performed by a human based on a fluctuation amount of the recorded path with respect to a path as a reference which is defined on the authentication screen.