Dual Hash Rolling Patch Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Information Handling Systems (IHSs) face challenges in maintaining security across varying trust boundaries or domains over communications networks, particularly with regards to password exposure and vulnerability to brute force cracking or guessing.
Innovation Solution
The implementation of a dual hashed rolling patch encryption system, which involves receiving a password, hashing it, concatenating a rolling patch of continually changing characters, re-hashing the result, and using this dual hashed rolling patch password for authentication, thereby enhancing security by making password exposure more difficult.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a password is transmitted over a network for authentication, then authentication functionality is enabled, but the password becomes vulnerable to exposure and brute force attacks
Solution Approach 1:
The patent applies dynamics by introducing a rolling patch that continuously changes the password hash over time. Instead of a static password hash, the system dynamically updates the hash by concatenating a changing rolling patch to the original password before hashing, ensuring that the authentication credential evolves continuously and cannot be reused or cracked from historical data
Solution Approach 2:
The system performs preliminary action by pre-computing and storing the rolling patch values on both client and server sides. Before authentication occurs, both parties already have the correct rolling patch for the current time period, enabling them to independently generate the same patched password hash without transmitting the actual password or the patch itself over the network
Solution Approach 3:
The rolling patch acts as an intermediary element that bridges the client and server authentication processes. Rather than transmitting the password directly, the system uses the rolling patch as a mediating component that both parties use to independently derive the same authentication credential, preventing direct exposure of the password while enabling authentication
2Object-affected harmful factors
If a rolling patch is concatenated to the password to enhance security, then password exposure risk is reduced, but the authentication system complexity increases
Solution Approach 1:
The authentication credential is segmented into two independent components: the original password and the rolling patch. This segmentation allows the system to enhance security by combining these components without requiring complete redesign of the authentication infrastructure, as each component can be managed and updated independently
Solution Approach 2:
The system changes the parameter of the password hash by introducing a time-varying rolling patch. Instead of keeping the password hash static, the system modifies the hashing input by concatenating the rolling patch, thereby changing the hash parameter continuously while maintaining the same underlying hashing algorithm and infrastructure
Data Source
AI summary
Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a password comprising a first plurality of characters, concatenate a second plurality of characters to the hashed password to form a patched password, encrypt the patched password, and send the hashed patched password to a server IHS for authentication. The second characters are configured to continually change value over time.