Touchscreen Password Entry Using Cursor Intermediary

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing graphical authentication systems are vulnerable to 'shoulder surfing' where a third party can determine the cursor position or pattern of points on an overlay image, compromising security during the authentication process.

Innovation Solution

A method involving a computing device with a touch screen that generates modified base and overlay images, where the user must align pre-selected reference points by moving one image based on specific criteria, such as touching a dedicated area or avoiding direct reference point touches, to achieve positive authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a graphical authentication system displays reference points on an overlay image, then the user can easily align them for authentication, but a third party can observe the cursor position and determine the pattern, compromising security

Engineering Contradiction:
Improveease of alignmentVSAvoidshoulder surfing vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a cursor as an intermediary element that mediates between the user's input and the reference points. Instead of directly displaying and manipulating reference points, the user controls a cursor that moves across the overlay image. The cursor serves as a buffer that prevents direct observation of reference point positions while still enabling alignment functionality. The system detects when the cursor covers a reference point to establish alignment, maintaining security by not exposing the actual reference point locations to observers.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If the overlay image with reference points is displayed clearly, then the user can accurately align it with the base image, but the reference points become visible to third-party observers

Engineering Contradiction:
Improvealignment accuracyVSAvoidvisibility to observers
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the reference points from direct visual display and replaces them with indirect detection through cursor coverage. Instead of showing reference points as visible markers that users align, the system removes the visual indication of reference point locations and detects alignment only when the cursor covers the hidden reference points. This extraction maintains alignment accuracy through precise cursor position detection while eliminating the security vulnerability of visible reference points.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent employs visual state changes through color or appearance transformations of the cursor to indicate alignment status. When the cursor covers a reference point, the system detects this coverage and can provide visual feedback through color changes or other appearance modifications of the cursor. This allows the user to achieve accurate alignment through feedback mechanisms without exposing the actual reference point positions to third-party observers.

Inventive Principle:
Principle #32Color changes

3Extent of automation

If the cursor position is tracked to determine alignment, then authentication can be performed, but the pattern of cursor movement can be observed and analyzed by third parties

Engineering Contradiction:
Improveauthentication automationVSAvoidcursor pattern observation
Core Design Contradiction:
Extent of automationVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary action by pre-defining fixed reference points on the overlay image that remain in constant positions. Instead of allowing dynamic movement of reference points or complex cursor pattern analysis, the system establishes static reference points beforehand and simply detects when the cursor covers them during authentication. This preliminary setup enables automated authentication through simple coverage detection rather than complex pattern recognition, reducing the information available to observers about the authentication process.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8635676B2Visual or touchscreen password entry
Publication Date: 2014.01.21 MALIKIE INNOVATIONS LTD
  • US8635676B2 patent drawing
  • US8635676B2 patent drawing
  • US8635676B2 patent drawing

AI summary

A method of authenticating a user of a computing device is proposed, together with computing device on which the method is implemented. In the method a modified base image is overlaid with a modified overlay image on a display and movement of either the modified base image or modified overlay image is permitted if a criterion for movement is met. Positive authentication is indicated in response to the base image reference point on the modified base image being aligned with the overlay image reference point on the modified overlay image.