Dynamic Password Generation for Digital Service Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods, particularly those relying on usernames and passwords, are vulnerable to breaches and hacking, leading to significant losses of personal and sensitive data.
Innovation Solution
A computer-implemented method and system for randomly generating and updating passwords for digital services, where a first password is used to generate multiple random second passwords, with selection and updating based on factors like time validity and user activity, ensuring secure access to digital services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single username and password are used for authentication, then the ease of operation is improved, but the security is worsened due to vulnerability to breaches and hacking
Solution Approach 1:
The patent segments the authentication process by generating multiple random passwords from a single master password. Each random password can be used independently for different services or time periods, dividing the authentication mechanism into multiple secure components rather than relying on a single password.
Solution Approach 2:
The patent implements dynamic password generation where random passwords are created on-demand from the master password. The system can update and rotate passwords dynamically based on security requirements, service changes, or detected threats, making the authentication system adaptive rather than static.
2Reliability
If passwords are updated frequently to improve security, then the reliability is improved, but the productivity is worsened due to additional authentication steps
Solution Approach 1:
The system performs automatic password generation and management without requiring user intervention. The server automatically generates random passwords, manages their distribution to various services, and handles updates, allowing the authentication system to self-manage security rotations without impacting user productivity.
Solution Approach 2:
The master password serves multiple functions: it can generate random passwords for different services, act as a backup authentication method, and enable password recovery. This multi-functionality reduces the need for separate authentication mechanisms while maintaining security.
3Reliability
If multiple random passwords are generated to improve security, then the reliability is improved, but the device complexity is worsened due to password management
Solution Approach 1:
The server acts as an intermediary between the user's master password and the multiple services requiring authentication. The server generates random passwords from the master password, manages their distribution, and handles updates, simplifying the user's interaction to just the master password while the complex management occurs on the server side.
Solution Approach 2:
The system implements feedback mechanisms where the server monitors password usage, detects potential security issues, and automatically triggers password updates when needed. This feedback loop allows the system to maintain high security while minimizing unnecessary password changes that would complicate user interaction.
Data Source
AI summary
A method, a system, and a computer program product for randomly generating and updating passwords for authentication to digital services. A first password associated with authenticating of a user is received. A plurality of random second passwords is generated based on the received first password. One or more random second passwords in the plurality of random second passwords are configured to authenticate the user for accessing at least one secure service. At least one random second password in the plurality of random second passwords is selected based on at least one factor and updated to generate an updated at least one random second password. The user is authenticated using the updated random second password for accessing the secure service.