Mobile Password Recovery via Remote Server Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password recovery methods for mobile applications are inadequate, leading to inconvenience and potential data loss when a mobile password is lost, as users cannot recover or recreate encrypted data without reinstalling applications or re-creating data.
Innovation Solution
A system that encrypts mobile data using a mobile password and leverages a remote password to decrypt and recover the mobile password, allowing continued access to encrypted data without compromising security, by using an encryption manager and mobile password recovery manager to derive and use a mobile password recovery key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a mobile password is used to encrypt mobile data for additional security layer, then data security is improved, but password recovery capability deteriorates (users cannot recover lost passwords)
Solution Approach 1:
The system performs preliminary action by encrypting the mobile password with the remote password before the mobile password is lost. This advance preparation enables recovery capability without compromising current security, as the encrypted form is stored securely and can be decrypted only when needed for recovery purposes
Solution Approach 2:
The remote password serves as an intermediary that bridges the mobile password and the recovery mechanism. By using the remote password to encrypt the mobile password, the system creates a chain of trust that allows recovery through the remote server without directly exposing the mobile password
2Ease of operation
If mobile devices are used to access remote applications for convenience, then user accessibility is improved, but security vulnerabilities worsen (devices are prone to loss or theft)
Solution Approach 1:
The security system is segmented into multiple independent components: mobile password for local data encryption, remote password for password encryption, and the remote server for secure storage. This segmentation ensures that compromise of one component (mobile device) does not necessarily lead to compromise of the entire system, as the critical password encryption resides on the secure remote server
Solution Approach 2:
The remote server acts as an intermediary that provides security services without requiring the mobile device to have full security capabilities. By offloading password encryption and recovery functions to the remote server, the system enables mobile accessibility while maintaining centralized security control
3Reliability
If password encryption is implemented without recovery mechanism for enhanced security, then security strength is improved, but user convenience deteriorates (data becomes inaccessible upon password loss)
Solution Approach 1:
The system performs preliminary action by pre-encrypting the mobile password with the remote password before any loss occurs. This advance preparation creates a recovery pathway that maintains both security strength and user convenience, as the encrypted password can be decrypted through the remote server when needed without compromising the original security model
Solution Approach 2:
The system changes the state of the mobile password from plaintext to encrypted form using the remote password as the encryption key. This parameter change (encryption) maintains security while the ability to decrypt through the remote server restores accessibility, effectively changing the accessibility parameter without sacrificing security
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An encryption manager may encrypt mobile data associated with a mobile application executing on a mobile device, where the mobile application is configured to interact with a remote application executing on a remote server, and the mobile data is encrypted using a mobile password. A mobile password recovery manager may encrypt the mobile password, using a remote password used to access the remote application executing on the remote server, and may recover the mobile data, in case of loss of the mobile password, including decrypting the encrypted mobile password using the remote password.