Password Conversion Unit for Cross-System User Data Synchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User information synchronization is hindered when shifting from systems managing hashed passwords to those managing unhashed passwords due to the irreversibility of hash functions, leading to increased user load and potential synchronization issues across multiple information processing apparatuses.
Innovation Solution
Implementing a system that allows for the import and export of user information while hashing unhashed passwords, enabling seamless synchronization between apparatuses using different password management methods by converting unhashed passwords to hashed ones during import and vice versa, using methods like MD5 for compatibility.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If user information is shifted from an information processing apparatus that manages hashed passwords to one that manages unhashed passwords, then the password management method can be unified, but the password cannot be returned to the state before hashing because the hash function is a one-way function, resulting in a state in which user information cannot be synchronized
Solution Approach 1:
The patent introduces a conversion unit that acts as an intermediary between apparatuses with different password management methods. This conversion unit converts unhashed passwords to hashed passwords using hash functions, enabling seamless synchronization between apparatuses without requiring users to manually shift passwords. The conversion unit resolves the one-way function limitation by performing forward conversion only, maintaining system compatibility while ensuring data synchronization.
Solution Approach 2:
The patent changes the state parameter of password data from unhashed to hashed form during the import process. When user information is imported into an apparatus that manages hashed passwords, the conversion unit automatically applies hash functions to transform unhashed passwords into hashed passwords, thereby unifying the data format and enabling synchronization across different apparatuses without requiring user intervention.
2Adaptability or versatility
If hashing is performed in every authentication to support multiple hash functions, then the number of usable hash functions increases, but the processing load increases and user database needs to be extended
Solution Approach 1:
The patent makes the password management apparatus universally compatible with multiple hash functions through the conversion unit. The conversion unit can convert unhashed passwords to various hash formats (MD4, MD5, SHA1, etc.) depending on the target apparatus requirements. This multi-functional capability allows a single apparatus to serve both as a source for unhashed passwords and as a destination for hashed passwords using different algorithms, eliminating the need to extend the user database structure.
3Ease of operation
If unhashed passwords are stored, then password management is simplified, but security is compromised compared to hashed password storage
Solution Approach 1:
The patent applies different quality standards to different parts of the system. Apparatuses that require simplicity (ease of operation) can store and manage unhashed passwords locally, while apparatuses that require security can store and manage hashed passwords. The conversion unit enables seamless transition between these two modes, allowing each apparatus to operate in its optimal mode without compromising overall system security or simplicity.
Data Source
Figure 1~2
Figure 3
Figure 4~5
AI summary
An information processing apparatus (101) comprises: storage means (Fig.6) for storing a first converted value converted by a one-way function in association with user identification information; input means (209) for receiving input of the user identification information and authentication information; holding means (Fig.8) for holding the authentication information input by the user; authentication means (302) for executing user authentication by converting, by the one-way function, the authentication information input by the user into a second converted value and checking the second converted value against the stored first converted value in association with the user identification information input by the user; and storage control means (Fig.6) for, based on success of the user authentication, causing the storage means to store the authentication information held by the holding means in place of the first converted value stored in the storage means.