Credential Store Security Warning for Mixed Service Levels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face security risks when using the same password for both secure and non-secure websites, as a compromised password for a non-secure site can potentially expose secure services, and managing distinct passwords for each service is cumbersome and inconvenient.
Innovation Solution
A method is implemented on a computing device to provide warnings when storing credentials, determining the security level of a service and comparing it to existing stored credentials, prompting users to choose different passwords for secure services and indicating potential risks, while allowing users to proceed or cancel the storage request.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users use the same password for both secure and non-secure websites, then user convenience is improved, but security is worsened due to potential data compromise
Solution Approach 1:
The system provides feedback to users by detecting when a credential for a secure service matches a credential for a non-secure service, and by providing a warning notification. This feedback mechanism allows users to be aware of the security risk without forcing them to change passwords, thus maintaining convenience while improving security awareness.
Solution Approach 2:
The system performs preliminary detection before storing credentials by checking whether the credential being stored matches any existing credential for a different service with different security levels. This preliminary check prevents the storage of potentially compromising credentials while allowing users to proceed if they choose.
2Reliability
If users manage distinct passwords for each service, then security is improved, but ease of operation is worsened due to cumbersome password management
Solution Approach 1:
The system automatically performs security checks and provides warnings without requiring user intervention. It self-determines security levels of services, compares credentials automatically, and presents warnings to users, thereby maintaining high security standards while reducing the manual effort required from users.
3Reliability
If the system detects and warns about matching credentials across different security levels, then security is improved, but device complexity is worsened
Solution Approach 1:
The credential store is enhanced with multi-functionality by integrating security level detection, credential comparison, and warning notification capabilities into a single system. This universal approach handles multiple security functions without requiring separate complex systems, thereby improving security while managing complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods and devices for providing a warning associated with credentials to be stored in a credential store on a computing device are disclosed herein. In one broad aspect, the method comprises receiving a request to store, in the credential store, at least one credential for a specified service, determining whether a secure connection between the computing device and the specified service is available, associating the specified service with a level of security based on at least one of an availability of the secure connection or one or more properties of the secure connection, and providing a warning in response to determining that at least one credential stored in the credential store corresponds to the at least one credential for the specified service and is for a service that is associated with a level of security different from the level of security with which the specified service is associated.