Touchscreen Keypad Randomization for PIN Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing touchscreen-based mobile devices are insecure for entering Personal Identification Numbers (PINs) due to vulnerabilities such as malware, keyloggers, and smudge attacks, and existing randomized PIN keypads can be difficult for users to navigate.

Innovation Solution

A system and method for randomizing keypad display parameters on touchscreen devices, including location, size, and button positions, while maintaining some positional relationships to enhance security and usability.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If randomized button layout is implemented completely, then security against keyloggers and smudge attacks is improved, but ease of operation deteriorates due to steep learning curve

Engineering Contradiction:
ImprovesecurityVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements dynamic randomization where display parameters such as button positions, keypad location, and size are randomized only when the screen is visible to the user. When the screen is obscured or not visible, the randomization is suspended or reversed. This dynamic approach maintains security during active use while ensuring usability when the device is handled or stored, resolving the contradiction between security and ease of operation.

Inventive Principle:
Principle #15Dynamics

2Reliability

If randomized keypad display parameters are used, then difficulty for attackers to guess PINs is increased, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent changes display parameters (button positions, keypad location, size) randomly based on detected screen visibility conditions. This parameter change approach provides security through variability while maintaining simplicity in implementation, as it uses existing touchscreen capabilities rather than adding complex hardware or cryptographic mechanisms.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11630575B2System and method for a keypad on a touch screen device
Publication Date: 2023.04.18 STRIPE LLC
  • US11630575B2 patent drawing
  • US11630575B2 patent drawing
  • US11630575B2 patent drawing

AI summary

What is disclosed is a system for randomization of one or more display parameters for a keypad displayed on a touchscreen of a mobile device, said system comprising a randomization subsystem to randomly select one or more variables related to at least one of said one or more display parameters, said one or more display parameters comprising a location of the keypad relative to said edge of said touchscreen; a size of said keypad; one or more sizes of one or more buttons within said keypad, and one or more positions of one or more groups of the one or more buttons within said keypad.