Web Authentication via Graphical Key Images and Encrypted Salts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing web-based security authentication methods are vulnerable to key logging, man-in-the-middle attacks, and cross-site request forgery, which expose users' protected resources and data to unauthorized access.
Innovation Solution
A system and method that generates encryption salts and graphical key images for encrypting login credentials, incorporating them into a displayable input form, allowing users to input encrypted values, and verifying these values against stored credentials using a security authentication server to minimize unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional login credential entry methods are used, then ease of operation is maintained, but security vulnerability increases due to key logging, man-in-the-middle attacks, and cross-site request forgery
Solution Approach 1:
The patent introduces an intermediary authentication system that mediates between the user and the target website. Instead of directly entering credentials on the target site, users authenticate through a secure intermediary portal that uses graphical key images and encrypted verification, thereby blocking direct exposure to attacks while maintaining operational flow
Solution Approach 2:
The patent replaces the traditional mechanical text-based credential entry system with a graphical authentication system using visual key images and image-based verification codes. This substitution eliminates keyboard input vulnerability to key loggers while maintaining user interaction through visual selection rather than typing
2Reliability
If encryption salts and graphical key images are generated and incorporated into input forms, then security against key logging is improved, but device complexity increases
Solution Approach 1:
The patent segments the authentication system into distinct functional components: credential generation module, graphical key image generation module, encryption salt generation module, and verification module. Each component handles a specific aspect of the authentication process, making the complex system manageable and maintainable while achieving high security
Solution Approach 2:
The patent changes the fundamental parameters of authentication from text-based to image-based representation. By transforming credentials into graphical key images with encrypted verification codes, the system achieves enhanced security while the modular architecture manages the resulting complexity
3Reliability
If graphical key images and encrypted key values are used for authentication, then vulnerability to man-in-the-middle attacks is reduced, but measurement precision requirements increase for verifying decrypted values
Solution Approach 1:
The patent performs preliminary encryption of key values and generation of verification codes before the authentication transaction occurs. The encryption salts and encrypted key values are prepared in advance and securely transmitted, so that during actual authentication, the system only needs to perform straightforward decryption and comparison rather than complex real-time verification
Data Source
AI summary
A method and system for performing a security authentication. A name of a user, N sequences of digits, and encrypted values respectively corresponding to the digits in the N sequences are transmitted to a destination device. Each sequence includes a same M unique digits and begins with a different digit, wherein N≧2 and M≧3. N encrypted values of the transmitted encrypted values are received, wherein an Ith received encrypted value of the N received encrypted values corresponds to one of the digits selected by the user, at an electronic device, from a respective Ith sequence of the N sequences (I=1, 2, . . . , N). N digits respectively corresponding to the received N encrypted values are determined. The determined N digits form a number matching a PIN associated with the name of the user, which authenticates the user to access a resource.