Dynamic Password Protection Against Brute Force Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Brute force attacks on computer accounts and devices become increasingly successful due to advancements in computing power and the use of multiple devices, making traditional password protection inadequate.
Innovation Solution
A system that dynamically changes passwords during a brute force attack by tracking consecutive unsuccessful attempts, switching to a new password with more complex generation rules, and notifying users securely, thereby increasing the strength and difficulty of password protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password protection is used, then ease of operation is maintained, but security against brute force attacks deteriorates due to increased computing power
Solution Approach 1:
The patent implements dynamic password changes during login attempts. When a brute force attack is detected through multiple failed login attempts, the system automatically changes the password to a new value, making the protection mechanism adaptive rather than static. This resolves the contradiction by maintaining ease of operation for legitimate users while dynamically strengthening security against attacks.
Solution Approach 2:
The system changes password parameters (the actual password value) in response to detected attacks. By modifying the password parameter during the login process when threats are detected, the system enhances security without requiring users to manually create more complex passwords, thus maintaining ease of operation while improving reliability.
2Reliability
If password complexity is increased to resist brute force attacks, then security improves, but ease of operation deteriorates due to user difficulty in remembering passwords
Solution Approach 1:
The system performs password generation and change operations automatically without user intervention. When a brute force attack is detected, the system self-service generates new passwords and updates them, eliminating the need for users to manually create and remember increasingly complex passwords. This maintains ease of operation while achieving enhanced security through automated password complexity management.
Solution Approach 2:
The system implements feedback loops that monitor login attempts and automatically adjust password complexity in response to detected threats. The feedback mechanism detects attack patterns and triggers password changes, creating a responsive security system that adapts to threats without requiring users to anticipate or manage complexity increases, thus maintaining ease of operation while improving security.
3Productivity
If multiple devices are used for brute force attacks, then attack effectiveness improves, but detection difficulty increases
Solution Approach 1:
The system implements a universal monitoring mechanism that tracks login attempts across multiple devices and IP addresses. The detection system serves multiple functions: monitoring individual device behavior, aggregating data from multiple sources, identifying coordinated attack patterns, and triggering protective actions. This multi-functional approach enables effective detection of distributed brute force attacks despite the use of multiple attacking devices.
Solution Approach 2:
The system merges data from multiple monitoring points (different devices, IP addresses, and login attempt records) into a unified analysis framework. By combining these disparate data streams and analyzing them collectively, the system can identify coordinated attack patterns that would be invisible when examining individual devices separately, thus reducing detection difficulty for multi-device attacks.
4Reliability
If password change frequency is increased during attacks, then security improves, but loss of time increases due to notification and system updates
Solution Approach 1:
The system performs password changes proactively during the login process when attacks are detected, rather than waiting for post-attack analysis. By implementing preliminary protective action at the moment of threat detection, the system minimizes the time window for successful attacks and reduces overall security response time, thereby improving security without significant time loss.
Solution Approach 2:
The system implements rapid password changes and notifications during active attacks, rushing through the security response process to minimize exposure time. By accelerating the password change and notification sequence during critical attack moments, the system reduces the time loss associated with security updates while maintaining or improving security posture through faster response.
Data Source
AI summary
A computer-implemented process, computer program product, and system for dynamic change of a password under a brute force attack. A computer processor determines a quantity of consecutive unsuccessful attempts to access the targeted item protected by a password. Responsive to the quantity of consecutive unsuccessful attempts to access the targeted item exceeding a predefined threshold, the computer processor acquires a new password for access to the targeted item, wherein the new password is based on a more complex set of password generation rules than a current password. The computer processor changing the current password of the targeted item to the new password, and in response to changing the current password of the targeted item to the new password, the computer processor sends an encrypted message regarding the new password to a user associated with the targeted item.