Dynamic Password Encryption via Random Component Insertion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password authentication methods are vulnerable to detection and unauthorized reuse, especially in situations where passwords are entered in the presence of third parties, such as when a host user enters a password for a visiting staff member.
Innovation Solution
A method and system for encrypting passwords by generating a password component from a pre-assigned password and randomly inserting a non-password component, which includes at least one variable character, to prevent unauthorized discovery and reuse, using a computing device with a processor and memory to execute encryption and decryption processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a password is used for authentication, then access control is enabled, but the password becomes vulnerable to detection and unauthorized reuse when entered in the presence of third parties
Solution Approach 1:
The password is segmented into multiple components: a static password component and a dynamic non-password component. The encryption module divides the original password into subsets and inserts variable non-password components between them, creating a segmented structure that maintains security while enabling authentication.
Solution Approach 2:
The system introduces dynamic elements by randomly generating non-password components (such as numbers, letters, or symbols) that change with each authentication attempt. This dynamic insertion ensures that even if the static password component is observed, the complete authentication string cannot be reproduced or reused.
2Ease of operation
If the password is entered in the presence of a third party for verification, then service attendance can be verified, but the password may be discovered and reused without authorization
Solution Approach 1:
The system introduces an intermediary verification mechanism where the encryption module processes the password through a transformation that adds non-password components. This intermediary step allows verification to occur without exposing the original password, as the transformed string with inserted components cannot be reverse-engineered to reveal the original password.
3Reliability
If a complex and difficult to remember password is used, then password strength is improved, but technology advancement enables detection or cracking of the password
Solution Approach 1:
The system changes the parameters of password authentication by transforming the static password into a dynamic string with inserted non-password components. This parameter change includes modifying the structure (adding components), changing the entropy (through random insertion), and altering the temporal characteristic (each authentication uses a different configuration), thereby increasing resistance to detection and cracking.
Data Source
AI summary
Disclosed is a method which comprises receiving a user input which includes a password component and a non-password component that is defined by a user, the non-password component is arranged relative to the password component in a random manner determined by the user; verifying a presence of a pre-assigned password within the user input, wherein the pre-assigned password is associated with the user and stored in a first database; and based on the verified presence of the pre-assigned password within the received user input, identifying the non-password component. This way, even if a third party has full view of the user input entry, the visitor would be unable to discover the password and additional information individually.