Mobile Password Manager Storage for Decentralized Account Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing account information management systems are vulnerable to data theft due to centralized server storage and master password leakage, compromising user data security.

Innovation Solution

An account information management method using a mobile password manager and an extension program on a web browser, along with an intermediate server, encrypts and manages user data locally on the mobile device, generating asymmetric keys for secure data transmission and automatic login input.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If account information is stored on a centralized password management server, then users can access account information from multiple devices, but the system becomes vulnerable to external attacks and data theft

Engineering Contradiction:

Improveaccessibility across multiple devicesVSAvoidsecurity against external attacks

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent extracts account information storage from the centralized server and places it on the user's mobile device. The mobile device stores encrypted account information locally, eliminating the need for a centralized password management server and thus removing the vulnerability to external server attacks while maintaining multi-device accessibility through secure local storage and synchronization

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces an intermediary mechanism using encrypted local storage on the mobile device. The mobile device acts as an intermediary between the user and the account information, providing secure access without requiring a centralized server. The encryption mechanism serves as the intermediary that protects data both at rest and during transmission

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If a master password is used to protect account information in a password manager, then user authentication is simplified, but the system becomes vulnerable to data theft if the master password is leaked

Engineering Contradiction:

Improveuser authentication simplicityVSAvoidsecurity against master password leakage

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent removes the centralized master password authentication mechanism and replaces it with device-level encryption. Each mobile device has its own encryption key stored securely on the device, eliminating the need for a centralized master password that could be leaked. The encryption key is never transmitted to or stored on a server, preventing vulnerability to password leakage attacks

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The mobile device performs self-authentication through device-level encryption. The device automatically manages its own encryption keys and authentication processes without requiring a centralized master password. The system serves itself by using the device's inherent security features (biometric authentication, secure enclave) to protect account information

Inventive Principle:

Principle #25Self-service

3Reliability

If account information is stored locally on the mobile device, then security against external attacks is improved, but the system complexity increases due to encryption and key management

Engineering Contradiction:

Improvesecurity against external attacksVSAvoidencryption and key management complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent changes the encryption parameters by using device-specific encryption keys instead of centralized server storage. The encryption is performed at the device level using modern cryptographic standards, transforming the security approach from centralized to decentralized. This parameter change simplifies the architecture by eliminating the need for complex centralized key management systems while maintaining strong security

Inventive Principle:

Principle #35Parameter changes

4Reliability

If decentralized storage on mobile devices is implemented, then data security is enhanced, but the ease of automatic login input across services is reduced

Engineering Contradiction:

Improvedata securityVSAvoidautomatic login input convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent makes the mobile device universal by using it as both the storage location for account information and the authentication mechanism. The same device that stores the encrypted account information also provides the decryption keys and authentication credentials needed for automatic login across multiple services, eliminating the need for separate centralized authentication systems

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS20250328613A1Account information management method using mobile device of user

Publication Date: 2025.10.23 ESTORM

AI summary

Provided is an account information management method using an extension program installed on a web browser, a mobile password manager which is an application program for account information management installed on a mobile device of a user, and an intermediate server communicating with the extension program and the mobile password manager.