Dynamic Visual PIN Entry via Translation Table
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing online authentication methods are vulnerable to interception by malicious entities, allowing unauthorized access to sensitive information due to exposure of user credentials during authentication processes.
Innovation Solution
A user authentication method that generates a translation table with random representations and visual images of user identifiers, creating a dynamic user interface for PIN entry, preventing exposure of actual identifiers and thwarting interception attempts by malicious software.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional username and password authentication is used, then user verification is achieved, but authentication information becomes vulnerable to interception by malicious entities
Solution Approach 1:
The patent introduces an intermediary translation layer between the user identifier and its visual representation. Instead of directly displaying or transmitting the actual user identifier, the system uses a translation table that maps the identifier to random visual images. This intermediary mechanism prevents malicious software from intercepting the actual identifier while still allowing legitimate authentication, thereby resolving the contradiction between authentication reliability and interception vulnerability.
Solution Approach 2:
The patent creates visual image copies that represent the user identifier without exposing the actual identifier. These visual images serve as safe replicas that can be displayed and interacted with on the user's device, while the original identifier remains secure on the server. This copying approach allows authentication to proceed reliably while eliminating the vulnerability to interception of the actual identifier.
2Ease of operation
If user identifier is displayed on screen for entry, then user can input identifier, but malicious software can monitor and intercept the identifier
Solution Approach 1:
The patent displays visual image copies instead of the actual user identifier on the screen. These visual representations maintain the functionality needed for user interaction and input, allowing ease of operation. Simultaneously, because the actual identifier is never rendered on screen, malicious monitoring software cannot intercept it, thus resolving the contradiction between operational ease and security against screen monitoring.
Solution Approach 2:
The patent transforms the user identifier from its original textual or numerical form into a different parameter representation - visual images. This parameter change allows the identifier to be entered and processed while in a secure visual form, preventing screen monitoring attacks. The translation table maintains the mapping between the visual parameter and the original identifier, ensuring both ease of operation and security.
3Object-affected harmful factors
If random visual images are used to represent user identifier, then interception is prevented, but system complexity increases due to translation table management
Solution Approach 1:
The patent implements self-service mechanisms where the translation table is automatically generated and managed by the system without requiring manual intervention. The server automatically creates the mapping between user identifiers and visual images, and this translation logic is integrated into the authentication process. This automation reduces the operational complexity of managing the translation table while maintaining strong interception resistance through the use of random visual representations.
Data Source
AI summary
Techniques for authenticating a user are described. In one implementation, a user requests access to protected information or resources by providing a user name and a password to a web server that controls access to the information or resources. If the user name and password match a known user profile, the web server retrieves a user identifier (e.g., a personal identification number) and constructs a translation table around the user identifier. The translation table includes the values that constitute the user identifier, random representations of each value, visual images that represent each value, and random image names for each visual image. The information in the translation table is then used to generate a user interface that allows the user to enter his or her user identifier via the user's computing device without exposing the actual user identifier values to the computing device.