Indirect Password Encryption for Secure File Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security systems for protecting proprietary information in networks are insufficient, as they rely on passwords that are often mismanaged and vulnerable to unauthorized capture, and changing passwords is complex and time-consuming.
Innovation Solution
A security system that generates a random authentication string, encrypts it using the user's password, and stores the encrypted string, allowing access only with the correct password, thereby avoiding direct storage of passwords and simplifying password changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If passwords are stored in the security system to facilitate authentication, then ease of operation is improved, but security is worsened due to vulnerability of unauthorized capture
Solution Approach 1:
The patent extracts the password from the stored authentication data. Instead of storing the actual password, the system stores only a hash or encrypted version of the password. When authentication is required, the system hashes the entered password and compares it with the stored hash, thus taking the actual password out of the storage system and eliminating the vulnerability of password capture while maintaining ease of authentication.
Solution Approach 2:
The patent introduces an intermediary element (hash function or encryption algorithm) between the password and its stored representation. This intermediary transforms the password into an unrecognizable form for storage, preventing unauthorized capture while allowing verification. The intermediary acts as a mediator that preserves authentication functionality without exposing the actual password.
2Object-affected harmful factors
If passwords are made longer and more complex to improve security, then security is improved, but ease of operation is worsened due to user difficulty in remembering passwords
Solution Approach 1:
The patent creates a copy of the password in transformed form (hash or encrypted version) for storage purposes. The original password remains in the user's memory in its simple, memorable form, while the system works with the copied transformed version. This copying approach allows the system to enforce strong password policies without requiring users to remember complex passwords, as the verification process works with the transformed copy rather than the original.
3Object-affected harmful factors
If passwords are periodically changed to improve security, then security is improved, but productivity is worsened due to time-consuming password updates
Solution Approach 1:
The patent implements a password change system where users can independently update their passwords through automated processes. The system provides self-service password reset and change capabilities, allowing users to change passwords without administrative intervention. This eliminates the time-consuming manual password update process while maintaining security, as the system automatically handles the password transformation and storage updates.
4Object-affected harmful factors
If encryption is applied to data in transit to improve security, then security is improved, but use of energy is worsened due to computational overhead
Solution Approach 1:
The patent applies encryption to passwords and sensitive data before they are transmitted or stored, as a preliminary protective measure. By encrypting data in advance (before transmission or storage), the system ensures security is already in place when data moves through the network, eliminating the need for continuous re-encryption during transmission. This preliminary encryption approach maintains security while reducing the energy overhead of repeated cryptographic operations during data transit.
Data Source
AI summary
An improved system and approaches for protecting passwords are disclosed. A file security system for an organization operates to protect the files of the organization and thus prevents or limits users from accessing some or all of the files (e.g., documents) associated with the organization. According to one aspect, a password entered by a user is used, provided it is authenticated, to obtain a respective authentication string (a relatively longer string of numbers or characters). The retrieved authentication string is then used to enable the user to enter the file security system and/or to access secured files therein. According to another aspect, user passwords are not stored in the file security system to avoid security breaches due to unauthorized capture of user passwords.