Virtual Input Layout for Secure Mobile Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for secure information transmission on mobile devices, such as SSL encryption and security controls, are costly and not feasible for all mobile phones, especially non-smart devices, leading to poor security in e-commerce applications.
Innovation Solution
A method and system using a virtual input layout where the server generates a virtual keyboard layout based on the actual keyboard layout of the user's device, allowing users to enter obscured security information that is then converted back to the true security information, ensuring secure transmission without requiring the device to support encryption algorithms or controls.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SSL encryption channel or security control is used to ensure secure transmission, then security is improved, but device compatibility and cost increase
Solution Approach 1:
The patent introduces a virtual keyboard layout as an intermediary layer between the user input and the actual password transmission. The virtual keyboard maps user inputs to different actual keys, creating a mediator that obscures the true password while allowing secure transmission without requiring complex encryption on the device itself.
Solution Approach 2:
The patent creates a virtual copy of the keyboard layout that resembles the actual keyboard but with scrambled key positions or mappings. This virtual copy allows users to input passwords naturally while the actual transmission contains obscured information, eliminating the need for device-level encryption capabilities.
2Reliability
If SSL encryption or security control is installed on mobile devices, then security is improved, but device complexity and cost increase
Solution Approach 1:
The patent shifts the security burden from the mobile device to the server side. The virtual keyboard logic and password mapping are handled by the server, not the device. This allows simple mobile devices without encryption capabilities to participate in secure transactions by offloading the complex security functions to the server.
Solution Approach 2:
The patent extracts the encryption and security control functions from the mobile device and relocates them to the server. By removing the requirement for device-level security controls, the system becomes compatible with simple mobile devices while maintaining security through server-side processing of the virtual keyboard inputs.
3Reliability
If virtual input layout is used to obscure security information, then security is improved, but user operation complexity increases
Solution Approach 1:
The patent visually presents a virtual keyboard layout that appears different from the actual keyboard through scrambled positions or different visual representations. This visual transformation obscures the mapping between user input and actual password characters while maintaining a familiar keyboard interface, balancing security with usability.
Data Source
AI summary
Method and apparatus for information transmission are provided. A method for information transmission uses a virtual input layout to encrypt security information. The method uses a server to receive an access request from a user client and to generate a virtual input layout based on information of an actual input layout of the user client. Each key in the virtual input layout has a corresponding relationship with a respective key in the actual input layout, and at least some of the keys in the virtual input layout represent symbols or functions that are different from their corresponding keys in the actual input layout. The server sends the virtual input layout to the user client to be displayed, and subsequently receives from the user client a virtual security information entered by the user according to the virtual input layout displayed. The server then converts the virtual security information to obtain true security information.