Multi-control Password Changing via Segmented Administrator Inputs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password change systems are vulnerable to security threats due to the potential misuse of password information by system administrators, as they often require single entities to possess complete knowledge of the new password, compromising security, especially when handling sensitive data access.
Innovation Solution
Implementing a multi-control password changing system where multiple administrators contribute to generating a multi-control password, each providing a part of the password, which is then communicated to the user, ensuring no single entity has complete knowledge of the new password, thus adhering to the principle of separation of duties.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a system administrator is given authority to change user passwords, then password management capability is improved, but security risk increases due to potential misappropriation by the administrator
Solution Approach 1:
The password is segmented into multiple parts, with each administrator receiving only a portion. The complete password is reconstructed only when all parts are combined through the secure system, ensuring no single administrator possesses the full password.
Solution Approach 2:
A secure system acts as an intermediary between administrators and the password. The system receives password parts from administrators, reconstructs the complete password, and then communicates it to the user, preventing direct administrator access to the full password.
2Productivity
If a single administrator has complete knowledge of the new password, then password changing efficiency is improved, but the principle of separation of duties is violated and security is compromised
Solution Approach 1:
The password assignment process is segmented among multiple administrators, each responsible for providing a specific part. This maintains efficiency through division of labor while enhancing security through distributed knowledge.
Solution Approach 2:
The solution moves from a single-dimension approach (one administrator knows the full password) to a multi-dimensional approach where multiple administrators each know a different dimension (part) of the password, and the system reconstructs the complete picture.
Data Source
AI summary
Multi-control password changing includes initiating a password change cycle to change a target user's password, selecting a plurality of administrators to provide password part inputs, receiving password part inputs separately and confidentially from the plurality of administrators, generating a multi-control password comprised of multiple password part inputs, changing the target user's password to the multi-control password, and transmitting either the single multi-control password or multiple password parts each separately to target user. In an exemplary embodiment, a system for multi-control password changing includes a multi-control password changing module configured to change a target user's password, a recruitment module configured to select a plurality of administrators to provide password part inputs, a regulation module configured to receive and process password part inputs from the plurality of administrators, and a change value module configured to generate a multi-control password comprised of multiple password part inputs.