Touch Key Subarea Encoding for Shoulder Surfing Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face the risk of unauthorized access to sensitive information, such as passwords or pins, due to shoulder surfing, where observers gather personal information by directly observing keystrokes, especially in crowded areas or using enhanced devices.
Innovation Solution
A method and system that encode key touches on a device by dividing key areas into unmarked subareas, using resistive or capacitive sensor pixels, and transmitting encoded codes to a server for authorization, thereby protecting sensitive information from unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If key areas are divided into multiple subareas to encode key touches, then security against shoulder surfing is improved, but device complexity increases
Solution Approach 1:
The patent divides each key area into multiple unmarked subareas (e.g., four quadrants) that are invisible to the user. When a user touches a key, the system detects which specific subarea was touched and encodes this information into the input code. This segmentation allows the system to capture precise touch location data without the user being aware of the subdivisions, thereby enhancing security against shoulder surfing while maintaining a simple user interface.
Solution Approach 2:
The patent introduces an intermediary encoding layer between the user's physical touch and the digital input. Instead of directly mapping key presses to characters, the system uses an encoding algorithm that combines the visible key identity with the invisible subarea position. This intermediary encoding process transforms the raw touch data into a secure coded representation that prevents observers from determining the actual input, while the complexity is managed through software rather than hardware modifications.
2Loss of information
If unmarked subareas are used to prevent observation of key touches, then information protection is improved, but ease of operation deteriorates
Solution Approach 1:
Each key area is segmented into multiple unmarked subareas that are imperceptible to the user. The segmentation is performed at the sensor level rather than the visual level, allowing the system to detect precise touch positions within each key area without displaying any visual indicators. This maintains the simplicity of the user interface while enabling enhanced security through subarea encoding.
Solution Approach 2:
The patent creates an invisible copy of the key area structure at the sensor level. While the user interacts with the visible, simple key layout, the sensor system simultaneously detects touches on the invisible subarea grid. This copying approach allows the system to capture detailed touch position information for security purposes without altering the user's perception or interaction model, thus maintaining ease of operation.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
The solution effectively prevents unauthorized access by obscuring which subareas of the key are touched, making it impossible for shoulder surfers to input the correct password, thus securing sensitive information like bank or email accounts.
Implementation Method 1
The sensor pixels may be resistive or capacitive sensor pixels
Implementation Method 2
The sensor pixels may be resistive or capacitive sensor pixels
Data Source
AI summary
A method, system, and computer program product for encoding a key touch on a device. The method may include detecting a key touch at one of two of more subareas of a key area and encoding the detected key touch into one code of a plurality of codes. Each code may be associated with one key area and one subarea of the key area. The method may perform an operation to determine whether to authorize access to a resource by determining whether the code, at least in part, authorizes the access. The key area may be marked with an indicia. The two or more subareas of the key area may be unmarked and may be of equal size. The key area may be divided into the two or more subareas by specifying two or more subregions of sensor pixels of a region of sensor pixels of a touch-sensitive screen.