Secure Login via Typing Sound and Timing Pattern Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current online login systems are vulnerable to hacking, leading to potential information leakage and unauthorized access due to the lack of robust authentication methods for verifying legitimate user inputs, especially with user IDs and passwords.
Innovation Solution
A secure login system that authenticates login information by comparing input timing patterns from a first device with audio patterns generated by a second device, using typing sounds to verify the legitimacy of user input, thereby enhancing security against unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional login authentication is used, then ease of operation is improved, but security is worsened due to vulnerability to hacking and information leakage
Solution Approach 1:
The patent introduces an authentication server as an intermediary between the user terminal and the service system. This server collects typing sound information from the user terminal and compares it with pre-registered typing patterns to verify user identity. The intermediary handles the complex authentication process, keeping the user interface simple while enhancing security through biometric verification of typing behavior.
Solution Approach 2:
The patent replaces traditional mechanical authentication methods (keyboard entry verification) with acoustic field-based authentication. By capturing and analyzing typing sound waves, the system substitutes the mechanical act of typing with acoustic measurement and pattern recognition, enabling more reliable biometric verification while maintaining ease of use.
2Reliability
If typing sound authentication is added, then security is improved, but device complexity is worsened
Solution Approach 1:
The authentication server performs multiple functions: it manages user registration, stores typing pattern templates, captures typing sound information in real-time, performs pattern matching, and makes authentication decisions. By consolidating these diverse functions into a single multi-functional server, the system avoids the need for multiple separate devices, thereby reducing overall system complexity while enhancing authentication reliability.
Solution Approach 2:
The system automatically captures typing sound information during the normal login process without requiring separate authentication actions from the user. The authentication server self-manages the collection, processing, and verification of typing patterns, eliminating the need for manual biometric capture devices or complex user操作流程, thus reducing device complexity while improving security.
3Reliability
If multiple devices are used for authentication, then security is improved, but ease of operation is worsened
Solution Approach 1:
The patent merges the authentication process with the existing login workflow. The typing sound capture and verification are integrated into the same interface where users normally enter their username and password. Users interact with a single device (their terminal) throughout the process, while the system combines multiple authentication factors (username, password, typing pattern) into one unified authentication flow, maintaining convenience while enhancing security.
Data Source
AI summary
A system for secure login, and a method and an apparatus for the same are disclosed. The system for secure login comprises: an authentication unit; a first device for transmitting, to the authentication unit, login information inputted via an inputting unit and input timing information indicating input timing of characters corresponding to at least a part of the inputted login information; and a second device for obtaining a typing sound generated when a user types the characters using the inputting unit and transmitting, to the authentication unit, audio information comprising the typing sound. The authentication unit authenticates the login information on the basis of the input timing information received from the first device and the audio information received from the second device. Accordingly, an illegal access of a user is fundamentally blocked and thereby, credibility of login security can be increased.