Touchscreen Password Entry Using Dynamic Image Alignment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing graphical authentication systems are vulnerable to 'shoulder surfing' where a third party can observe the user's actions, potentially determining the authentication reference point, thereby compromising security.
Innovation Solution
The method involves rendering the overlay or base image in a way that the pre-selected reference point is not directly touchable, requiring the user to move one image to align with the other based on specific criteria, such as touching a dedicated area or randomizing the image upon touch, to prevent direct identification of the reference point by observers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the reference point is directly touchable on the displayed image, then the ease of operation is improved, but the security against shoulder surfing deteriorates
Solution Approach 1:
The patent introduces an intermediary mechanism where the reference point is not directly visible or touchable on the displayed image. Instead, the system uses coordinate input and image transformation as intermediaries: the user provides coordinates that are processed by the system to locate the reference point, or the image is transformed based on user input to reveal the reference point indirectly. This intermediary process prevents observers from directly seeing the reference point location while maintaining authentication functionality.
Solution Approach 2:
The patent transitions the interaction from a two-dimensional visual interface to a three-dimensional coordinate space. Instead of directly touching the reference point on the displayed image, users input coordinates (adding a mathematical/dimensional layer) that map to the image space. This dimensional transformation obscures the direct visual relationship between the user's action and the reference point location, preventing shoulder surfing while maintaining operational capability.
2Object-affected harmful factors
If the image is randomized upon touch to prevent direct identification, then the security is improved, but the ease of operation deteriorates
Solution Approach 1:
The patent implements dynamic behavior where the image or coordinate system transforms in response to user input. When the user provides coordinates or touches the image, the system dynamically transforms the displayed image (such as rotating, translating, or scaling it) to reveal or relocate the reference point. This dynamic transformation ensures that the reference point position is not static and predictable, preventing observation attacks while guiding the user through the authentication process adaptively.
Solution Approach 2:
The system provides feedback by transforming the displayed image based on user input coordinates or touch actions. This feedback mechanism guides the user toward the correct reference point location through iterative transformations rather than direct revelation. The feedback loop maintains security by not showing the reference point directly while still enabling the user to locate it through the transformation process, balancing security with operational ease.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of authenticating a user of a computing device is proposed, together with computing device on which the method is implemented. In the method a modified base image is overlaid with a modified overlay image on a display and movement of either the modified base image or modified overlay image is permitted if a criterion for movement is met. Positive authentication is indicated in response to the base image reference point on the modified base image being aligned with the overlay image reference point on the modified overlay image.