Master Key Credential System for Multi-Account Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems for managing multiple-account access using usernames and passwords are prone to vulnerabilities, such as cyberattacks, and require users to remember and store numerous complex credentials, leading to inefficiencies and increased storage needs.
Innovation Solution
A system and method utilizing a master key to generate child keys and regenerative passwords for each account through a parent-child relationship function, eliminating the need to store individual passwords and reducing data storage requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If users store multiple usernames and passwords for different online accounts, then access to multiple accounts is enabled, but security vulnerabilities increase and storage space is consumed
Solution Approach 1:
The patent extracts and removes the need to store actual passwords by introducing a master key system. Instead of storing multiple passwords, the system stores only a master key and generates passwords dynamically when needed, eliminating the security vulnerability of stored passwords while maintaining multi-account access capability
Solution Approach 2:
The master key acts as an intermediary between the user and multiple account passwords. The system uses the master key to generate child keys and passwords through cryptographic functions, providing a secure mediation layer that prevents direct storage of actual passwords while enabling access to multiple accounts
2Reliability
If users remember complex passwords for each account, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent merges multiple password management functions into a single master key. Instead of requiring users to remember multiple complex passwords, the system combines all authentication credentials under one master key that can generate the necessary passwords on-demand, significantly improving ease of operation while maintaining security
Solution Approach 2:
The system provides self-service password generation through the master key mechanism. When access to an account is needed, the system automatically generates the appropriate password from the master key without requiring the user to manually remember or retrieve stored passwords, making the process both secure and convenient
3Ease of operation
If the credential management system stores all usernames and passwords, then access management is simplified, but storage space increases and security risks increase
Solution Approach 1:
The patent extracts the actual password data from the storage system and replaces it with a compact master key. Instead of storing multiple passwords which consume significant storage space, the system stores only the master key and cryptographic parameters, dramatically reducing storage requirements while maintaining full access management capability
Solution Approach 2:
The system creates dynamic copies of passwords only when needed for authentication, rather than storing them permanently. The master key generates password copies on-demand through cryptographic functions, allowing the system to manage access without persistent storage of actual password data
4Ease of operation
If passwords are stored in a storage format, then access management is enabled, but security is compromised as attackers can access stored passwords
Solution Approach 1:
The patent converts the potential harm of password storage into a benefit by using cryptographic hash functions. The system stores hashed versions of the master key and generates passwords through cryptographic processes, so that even if storage is compromised, the actual passwords cannot be retrieved, turning the storage vulnerability into a security feature
Solution Approach 2:
Cryptographic functions serve as an intermediary layer between the stored master key and the actual passwords. The system stores cryptographic parameters and uses cryptographic functions to generate passwords, creating a secure mediation layer that prevents direct access to actual passwords even if storage is breached
Data Source
AI summary
A system to manage multiple-account access using a master key is disclosed. The system includes a master key obtaining subsystem to obtain a master key encoded in a predefined format; a child key generation subsystem to generate one or more child keys corresponding to one or more accounts associated with a user from the master key using a parent-child relationship function; a password generation subsystem to generate one or more passwords regenerative in nature corresponding to the one or more child keys by using a transformation function; a credential association subsystem to associate the one or more passwords with one or more user identifiers corresponding to the one or more accounts; a credential management subsystem to access each of the one or more accounts by using each corresponding the one or more passwords and each corresponding the one or more user identifiers.