Virtual Manipulation Interface for Pattern Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing pattern input methods for user authentication in devices, such as smartphones and smart digital door locks, are vulnerable to smudge attacks, where the secret pattern can be easily leaked by observing the trace left on the screen during input.
Innovation Solution
A pattern input method and apparatus that uses a virtual manipulation interface separate from the traditional pattern lock interface, allowing users to input patterns through a manipulation pad, which can be smaller and change positions frequently, and includes additional interfaces like virtual wheels or touch brushes to distort the input trace, thereby enhancing security against smudge attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a traditional pattern lock interface is used for user authentication, then the input process is simple and direct, but the pattern trace is left on the screen making it vulnerable to smudge attacks
Solution Approach 1:
The patent introduces a manipulation pad as an intermediary interface between the user and the pattern lock system. Instead of directly touching the pattern lock interface, users interact with the manipulation pad which then translates their inputs into pattern lock commands. This intermediary layer prevents direct contact with the pattern lock interface, thereby eliminating the smudge attack vulnerability while maintaining ease of operation.
2Object-affected harmful factors
If the pattern lock interface size is reduced to minimize trace visibility, then security against smudge attacks is improved, but the ease of input and accuracy decrease
Solution Approach 1:
The patent divides the interaction into two separate components: the manipulation pad for input and the pattern lock interface for display. The manipulation pad can be sized appropriately for comfortable interaction, while the pattern lock interface can be minimized or hidden. This segmentation allows each component to be optimized independently - the manipulation pad for ease of input and the pattern lock interface for minimizing trace visibility.
3Ease of operation
If the pattern lock interface is always displayed on screen, then user feedback is immediate and clear, but pattern information may be leaked to observers in open environments
Solution Approach 1:
The patent implements a dynamic pattern lock interface that can change its display state based on the operational context. The interface can be displayed during the manipulation pad input phase to provide immediate feedback, and then hidden or minimized after the pattern is submitted. This dynamic behavior allows the system to provide clear user feedback when needed while minimizing the risk of information leakage to observers in open environments.
Data Source
AI summary
The present disclosure discloses a pattern input apparatus and a pattern input method for user authentication. According to the present disclosure, differently from the pattern function of the related art, the user does not directly input a pattern through a pattern lock interface, but inputs the pattern using a virtual manipulation interface which is separately provided. Therefore, it is strong to a smudge attack. The pattern input method of the present disclosure includes providing a virtual manipulation interface to input the pattern on the screen of the device to the user, separately from a pattern lock interface; and receiving the pattern through the virtual manipulation interface.