Video-Based Authentication Obstructing Shoulder Surfing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing graphical authentication systems are vulnerable to 'shoulder surfing' where a third party can observe the cursor location or user's finger movements, compromising security.
Innovation Solution
A graphical authentication system utilizing moving images, where a user must align a reference point on an overlay image with a pre-selected point in an authentication video, making it difficult for observers to determine the exact alignment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a user enters a password by selecting points on a static image or video frame, then the authentication process is simple and quick, but the system becomes vulnerable to shoulder surfing where observers can see the cursor location and finger movements
Solution Approach 1:
The patent applies dynamics by using a moving image (video) instead of a static image for authentication. The video plays continuously during the authentication process, making it difficult for observers to correlate the cursor position with specific frames or identify the selected points. The motion and changing visual content obscure the authentication interaction from shoulder surfers while maintaining the same user interaction simplicity.
2Ease of manufacture
If a traditional alphanumeric password is used entered on a keyboard, then the system is easy to implement, but it lacks graphical authentication capabilities and is susceptible to keylogging attacks
Solution Approach 1:
The patent replaces the mechanical keyboard input system with a graphical interface based on video interaction. Instead of typing alphanumeric characters that can be captured by keyloggers, the user interacts with a moving video by selecting points on the screen. This substitution eliminates the mechanical input vulnerability to keylogging while maintaining ease of implementation through standard graphical user interface components.
3Ease of operation
If a grid overlay is used on a static image for point selection, then the authentication method is straightforward, but the cursor position becomes easily observable and predictable
Solution Approach 1:
The patent applies dynamics by superimposing the grid overlay on a moving video rather than a static image. As the video plays, the visual content continuously changes while the grid remains overlaid. This makes it difficult for observers to predict or track cursor position because the reference points on the video are constantly moving and changing, even though the grid structure provides guidance for user interaction.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of authenticating a user of a computing device is proposed, together with computing device on which the method is implemented. In the method, an authentication video is displayed on a display. In response to receiving an input at a point in time in the video that matches a pre-selected time reference point, positive authentication is indicated.