Password Evaluation System Using Dictionary Sequence Adjustment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional techniques for determining password security are inefficient due to high computing resource requirements and processing times, making frequent password security checks unfeasible, especially in systems vulnerable to unauthorized access through weak or duplicated passwords.
Innovation Solution
A system and method for evaluating passwords that uses a dictionary with sequenced entries, adjusting the sequence based on historical matches, and incorporating a pre-screening module to exclude duplicates and weak passwords, thereby reducing unnecessary iterations and computing resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional simulated dictionary attack techniques are used to evaluate password security, then password vulnerability detection is achieved, but processing time and computing resources become prohibitively high
Solution Approach 1:
The system performs preliminary actions by pre-processing the password dictionary to identify and remove duplicate entries before the actual password evaluation. This pre-processing step reduces the size of the dictionary that must be processed during security checks, thereby decreasing processing time while maintaining detection accuracy. The pre-computed dictionary is stored for rapid access during runtime evaluations.
Solution Approach 2:
The password evaluation process is segmented into distinct phases: pre-processing the dictionary to remove duplicates, storing the optimized dictionary, and then performing rapid security checks against this refined dictionary. This segmentation allows the system to separate the computationally intensive pre-processing from the time-critical security evaluations, improving overall efficiency.
2Measurement precision
If a comprehensive dictionary is used for password evaluation, then detection accuracy improves, but computing resource requirements increase
Solution Approach 1:
The system applies the discarding principle by identifying and removing duplicate password entries from the comprehensive dictionary during pre-processing. By eliminating redundant entries that would consume computing resources without adding detection value, the system maintains comprehensive coverage of unique password patterns while significantly reducing the computational burden during actual security evaluations.
Solution Approach 2:
The pre-processed dictionary with removed duplicates is copied and stored in an optimized format for rapid access during security checks. This copied, refined dictionary structure allows the system to perform multiple evaluations without repeatedly processing the same redundant data, thereby reducing computing resource consumption across multiple password security assessments.
3Reliability
If frequent password security checks are performed, then system security is enhanced, but processing time and resource requirements become unmanageable
Solution Approach 1:
The system performs preliminary processing of the password dictionary in advance, removing duplicates and optimizing the structure before actual security checks are needed. This pre-computation enables frequent password evaluations to be performed rapidly against the pre-processed dictionary, allowing the system to maintain high security monitoring frequency without sacrificing productivity or overwhelming computing resources during operational checks.
Data Source
AI summary
A technique for evaluating computer system passwords is disclosed. The technique commences with obtaining, for each user of a computer system, password information generated by performing a security procedure on a password entry. The technique sequentially performs, for each user name, the security procedure on sequenced entries of a dictionary until either a match with the password information is detected or the sequenced entries are exhausted. The technique adjusts the sequence of a sequenced entry in the dictionary based on the number of matches detected for the sequenced entry, so that analysis of subsequent computer system password lists more rapidly identify passwords that may present a security risk to the computer system.