The Fundamental Flaw of Standard Security
Traditional authentication systems are inherently static. Whether it’s a standard password or a multi-factor token, the secret element remains fixed. This fundamental predictability is their weakness: once an attacker intercepts the secret (via keylogging, visual surveillance, or database breach), they own the account forever.
The Protecto Dynamic Authentication Method (DAM) was engineered to break this cycle of predictability by introducing dynamic logic into the authentication process.
Not Just Harder to Guess – Harder to Observe
Protecto’s security architecture is built on three pillars that take the value out of keylogging and recording:
Secret Elements (Known to User): The user's original, private key.
Misleading Elements (Decoys): Randomly generated visual noise that surrounds the secret.
Implicit Rules (The Dynamic Logic): A secret rule known only to the user, defining which field to select based on the positioning of the Secret Elements.
The critical difference is that the visible action (clicking a field) does not reveal the Secret Element. An observer or recording tool sees the user selecting a field populated by decoys, not the secret element or the rule behind the choice. One observed login does not reveal the key; each rule in the key multiplies what a watcher would have to work out across many sessions.
Every Login is Unique, Even With the Same Secret
Protecto defeats the classic Replay Attack and Brute Force Attack because the system’s interface is fundamentally dynamic:
Dynamic Interface: The positioning, content, and combination of elements within the selection fields are randomized for every single login session.
Defeating Replay Attacks: Even if an attacker recorded the exact sequence of clicks from a previous session, those same clicks would lead to an incorrect result in the next session because the implicit rules and field positions have changed. The session is non-repeatable.
Defeating Brute Force: Since the required action is based on a secret logical rule applied to a dynamic field set, there is no static string or PIN to run a dictionary against. Online guessing is limited per account and per network, and each grid can be answered once.
Designed for Hostile Environments and Public Devices
Protecto's unique architecture makes it ideal for enterprise environments, shared devices, and public terminals where surveillance is a constant threat (e.g., ATMs, shared office computers, conference terminals).
Because the authentication relies on Logic over Location (i.e., applying a rule to the current field arrangement, not clicking a fixed position), the user can maintain their security integrity without needing personal hardware, and with the assurance that a recording of a login cannot be reused. Protecto brings world-class security to hostile and untrusted environments.