One-Time Password Generation for Information Handling Resources
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for unlocking information handling resources, such as BIOS, rely on master passwords generated from unique identifiers, which are vulnerable to attacks due to constant input patterns and exposure of shared secret algorithms, leading to security compromises.
Innovation Solution
A one-time password tool that generates a random number, encrypts it using a first shared secret, and digitally signs it with a second shared secret, allowing user access only when the digital signature matches the random number, enhancing security by reducing reliance on constant input patterns and obscuring the shared secret.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a master password is generated from a unique identifier using a shared secret algorithm, then the password unlock mechanism allows authorized users to access the information handling resource, but the constant input pattern and exposure of the shared secret algorithm make the system vulnerable to security attacks
Solution Approach 1:
The patent introduces dynamic elements by using a random number generator to create varying input patterns for the shared secret algorithm. Instead of always using the same unique identifier, the system now uses combinations of unique identifiers and randomly generated numbers, making the input pattern dynamic and unpredictable while still allowing authorized access through the same cryptographic mechanism
Solution Approach 2:
The patent changes the parameters fed into the shared secret algorithm by incorporating randomly generated numbers alongside unique identifiers. This parameter change transforms the static input (only unique identifier) into a dynamic input (unique identifier + random number), thereby changing the output master password each time while maintaining the same security algorithm
2Ease of manufacture
If a static unique identifier is used as input to the password generation algorithm, then the implementation is simple and consistent, but the constant input pattern enables attackers to create rainbow tables and compromise security
Solution Approach 1:
The system maintains ease of implementation by using the same shared secret algorithm, but introduces dynamics by randomly selecting and combining multiple unique identifiers with generated random numbers before feeding them to the algorithm. This keeps the implementation simple (same algorithm) while making the input pattern dynamic and unpredictable
Solution Approach 2:
The patent performs preliminary actions by pre-generating random numbers and pre-selecting combinations of unique identifiers before they are used in the password generation process. This preliminary preparation of varied input data ensures that when the algorithm is executed, it receives diverse inputs rather than constant inputs, preventing rainbow table attacks
Data Source
AI summary
In accordance with embodiments of the present disclosure, a method may include generating a random number to be associated with an information handling resource. The method may also include generating a challenge string based at least on the random number. The method may additionally include encrypting the challenge string using a first shared secret. The method may further include receiving a one-time password generated by a vendor associated with the information handling resource, the one-time password generated by decrypting the challenge string using the first shared secret, parsing the random number from the decrypted challenge string, and digitally signing the decrypted challenge string with a digital signature using a second shared secret. The method may also include granting user access to the information handling resource in response to verifying, using the second shared secret, that the digital signature matches the random number.