Application Password Generation for Secure Multi-App Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password management systems are cumbersome, prone to password reuse, vulnerable to hacking, and susceptible to brute force attacks, leading to compromised security and user inconvenience.
Innovation Solution
A computing device with a password generation and management system that generates unique passwords for each application based on user selection and a security identifier, without requiring comparison of the reinput identifier, ensuring secure access by generating fresh passwords upon each selection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users create separate passwords for each application, then security is improved, but user convenience deteriorates due to the burden of remembering multiple complex passwords
Solution Approach 1:
The system segments the password management function by generating unique passwords for each application individually, while the user only needs to remember a single master password. This segmentation resolves the contradiction by distributing the security burden across multiple application-specific passwords generated from one master credential.
Solution Approach 2:
The patent introduces a password generation system as an intermediary between the user and multiple applications. This intermediary automatically generates and manages unique passwords for each application based on the user's master password, eliminating the need for the user to directly manage multiple complex passwords while maintaining security.
2Ease of operation
If users use the same password for multiple applications, then ease of operation is improved, but security deteriorates due to vulnerability to hacking and brute force attacks
Solution Approach 1:
The system segments the authentication credentials by creating distinct passwords for each application while deriving them from a single master password. This allows the user to maintain operational simplicity with one memorized password while achieving security through the segmentation of actual authentication credentials across different applications.
Solution Approach 2:
The patent transforms the password parameter from a static value that must be memorized to a dynamically generated credential. The system changes the parameter state by generating unique passwords for each application based on the master password, thereby improving security without requiring the user to change their memorized credential.
3Ease of operation
If passwords are stored in a centralized device protected by a master password, then ease of operation is improved, but security deteriorates due to susceptibility to brute force attacks
Solution Approach 1:
The patent extracts the vulnerable centralized password storage function and replaces it with a password generation mechanism. Instead of storing passwords in a centralized database that could be targeted by brute force attacks, the system extracts only the master password (which the user memorizes) and generates application-specific passwords on-demand, eliminating the centralized storage vulnerability.
4Ease of operation
If users write down passwords in documents for memory, then ease of operation is improved, but security deteriorates due to risk of hacking and theft of written information
Solution Approach 1:
The patent introduces a password generation system as an intermediary that eliminates the need for users to write down passwords. The system mediates between the user's memorized master password and the requirement for multiple application passwords, generating credentials on-demand without requiring physical or digital documentation that could be compromised.
Data Source
AI summary
There is provided computing device (100) including user interface (102, 200, 300, 400, 500, 600, 700) and memory (104), storing plurality of applications executable on computing device, each of applications requiring entry of password; password generation and management system (106) for managing access to plurality of applications; the system being operable initially to generate first password for first application based on user selection and inputting of security identifier; generate second password for second application based on user selection and reiteration of security identifier; and generate unique password other applications based on their individual selection and distinct reinputting of the security identifier; and, at subsequent stage, password generation and management system, being operable to: provide respective password for access to protected functionality of particular application in response to user selecting particular application and further inputting of security identifier, without comparing security identifier whose input resulted in original generation of respective password.