Dynamic Password Generation via Hashing and Normalization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current password systems lack efficient mechanisms for generating and validating passwords in real-time, especially in scenarios requiring secure access to information, and are vulnerable to hacking due to static password storage and processing requirements.
Innovation Solution
A password generation and validation system that uses a server-based component to generate and validate passwords dynamically based on inputs such as private and public data, along with time, utilizing hashing, encoding, and normalization processes to create self-expiring passwords that can be easily spoken or typed, reducing the risk of fraudulent access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If passwords are stored statically in traditional systems, then password validation is simple, but the system becomes vulnerable to hacking and fraudulent access
Solution Approach 1:
The patent transforms static password storage into dynamic password generation. Instead of storing passwords in a database, the system generates passwords on-demand using a generation component that creates unique passwords for each authentication event. This dynamic approach eliminates the security vulnerability of stored passwords while maintaining validation capability through cryptographic comparison.
Solution Approach 2:
The patent replaces the traditional mechanical approach of storing and retrieving passwords with a cryptographic substitution approach. The system uses hash functions and cryptographic algorithms to generate and validate passwords without ever storing them in plaintext or even hashed form in a database, thereby eliminating the target for hacking attacks.
2Reliability
If passwords are generated dynamically with multiple inputs, then security is improved, but processing time and computational resources increase
Solution Approach 1:
The patent implements preliminary action by pre-computing and storing salt values and other cryptographic parameters in a lookup table before authentication events occur. During actual password generation, the system quickly retrieves these pre-computed values and combines them with user inputs, significantly reducing the computational time required during critical authentication moments while maintaining strong security through multiple input factors.
3Productivity
If traditional password systems are used, then implementation is simple, but real-time password generation and validation efficiency is poor
Solution Approach 1:
The patent segments the password management system into distinct functional components: a password generation component that creates passwords using multiple inputs (user input, timestamp, random data), a validation component that verifies passwords through cryptographic comparison, and a lookup table component that stores pre-computed cryptographic parameters. This segmentation enables parallel processing and optimization of each component independently, improving overall efficiency despite the increased architectural complexity.
Data Source
AI summary
A password generation and validation system is provided. The system comprises a server system and an at least one memory. The system also comprises a password component stored in the at least one memory that, when executed by the server system, receives a plurality of inputs, generates a first password for a computer system based on the plurality of inputs contemporaneously with receiving the plurality of inputs, receives a second password, generates at least one candidate password based on some of the plurality of inputs, and validates the second password when the second password matches the at least one candidate password.