Offline Password Reset With Hash-Matched Device Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in securely resetting passwords for critical devices without causing power cycling or system downtime, especially when these devices are not connected to the Internet and cannot be factory reset.
Innovation Solution
A two-stage process involving enrollment and recovery, using a PC-based application as an intermediary, authenticates the device and user, generates and compares hash values to enable secure password resets without power cycling, utilizing a password recovery system with hash value matching.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password reset methods are used, then password recovery is achieved, but power cycling or system downtime occurs which is unacceptable for critical devices
Solution Approach 1:
The password reset process is segmented into two independent stages: enrollment (where recovery information is captured and stored) and recovery (where the captured information is used to reset passwords). This segmentation allows the recovery operation to proceed without requiring a full system reset or power cycle, thus maintaining system continuity while enabling password recovery.
Solution Approach 2:
The enrollment stage performs preliminary actions by capturing and storing recovery information (such as device identifiers, password hints, or recovery codes) before any password loss occurs. This pre-prepared information enables rapid password recovery without needing to interrupt system operation, resolving the contradiction between reliable continuous operation and ease of password reset.
2Ease of operation
If factory reset is performed to recover password, then password is reset, but device configuration and data are lost
Solution Approach 1:
The invention extracts and stores essential recovery information (device identifiers, configuration data, or recovery codes) during the enrollment stage, separating this critical information from the main system operations. When password recovery is needed, only the extracted recovery information is used, avoiding the need for a factory reset that would erase device configuration and prevent information loss.
3Reliability
If offline password reset is implemented, then remote device security is improved, but authentication complexity increases
Solution Approach 1:
A password recovery system acts as an intermediary between the user and the password protected device. During enrollment, the system captures and stores recovery information. During recovery, the system verifies credentials and facilitates password reset without requiring complex direct authentication between user and device. This intermediary approach maintains security while simplifying the authentication process for offline operations.
Data Source
AI summary
A computer-implemented method and system for providing secure password reset functionality for a password protected device. Receiving, in a password reset computer server, is a request code for enabling password reset functionality for the password protected device. The request code is parsed to identify the password protected device for generating a recovery string including at least metadata and a unique identifier associated with the password protected device. A first hash value representation of the recovery string is generated for the password protected device. The first hash value is then compared to a second hash value, which second hash value is generated by another computer device and is representative of a second recovery string that includes at least the metadata and the unique identifier associated with the password protected device. Password reset functionality for the password protected device is enabled when the first and second hash values match.