Mobile Password Verification Hash Chain Co-Processor
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password verification methods on mobile devices lack sufficient security against brute-force attacks, as they do not effectively utilize the computational resources available on the device to increase the cost of deriving the correct password.
Innovation Solution
Implementing a hash chain that leverages specialized data processing hardware, such as multimedia and cryptographic co-processors, to perform computationally-intensive functions, thereby increasing the complexity and cost of password derivation for attackers while allowing efficient verification for legitimate users.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password verification is used on mobile devices, then the verification process is simple and fast, but the security against brute-force attacks is insufficient
Solution Approach 1:
The patent segments the password verification process into multiple iterative hash computations, where each iteration requires the co-processor to perform computationally intensive operations. This segmentation transforms a single simple verification into multiple complex steps, increasing the cost of brute-force attacks while maintaining verification functionality.
Solution Approach 2:
The patent introduces a co-processor as an intermediary component between the main processor and the password verification logic. This co-processor is specifically designed to perform computationally intensive hash chain computations, offloading the security-critical operations from the main processor and adding hardware-level complexity to thwart brute-force attacks.
2Reliability
If computationally intensive hash chain functions are used, then security against brute-force attacks is improved, but the verification time increases
Solution Approach 1:
The patent replaces the software-based hash computation mechanism with a hardware-based co-processor mechanism. This substitution leverages dedicated hardware circuits optimized for cryptographic operations, performing computationally intensive hash chain functions at hardware speeds, thereby reducing verification time while maintaining high security requirements.
Solution Approach 2:
The patent changes the operational parameters of the verification system by implementing a configurable hash chain length and utilizing the co-processor's ability to perform multiple iterations efficiently. By optimizing the chain length parameter and leveraging hardware acceleration, the system achieves enhanced security through increased computational requirements without proportionally increasing verification time.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods, systems, and computer programs for verifying a password are disclosed. For example, the password can be verified on a mobile device to control user access to the mobile device. In some implementations, a mobile device includes a user interface, a main processor, and a co-processor. The user interface receives a submitted password value from a user. The main processor calls the co-processor to provide a hash chain input value based on the submitted password value. The main processor evaluates a hash chain based on the hash chain input value provided by the co-processor. Evaluating the hash chain generates a submitted password verification value. The submitted password verification value is compared to a stored password verification value stored on the mobile device. Access to mobile device functionality may be permitted or denied based on a result of the comparison.