Password Generation via Hashed User Responses
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face challenges in creating and remembering complex passwords for device access, requiring a method that generates secure passwords without the need for manual creation or memorization.
Innovation Solution
A computer system generates passwords based on user responses to specific questions, applying a hash function to create unique, complex passwords that can be easily recreated using an ordered index of questions and character positions, eliminating the need for manual password creation or memorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a strong, complex password is created to protect user data, then security is improved, but the user's ability to memorize the password deteriorates
Solution Approach 1:
The patent introduces an intermediary system (password generation service) that mediates between security requirements and user memory limitations. The service takes user-friendly inputs (questions and answers), processes them through cryptographic hash functions, and generates secure passwords automatically. This intermediary handles the complexity transformation, allowing users to interact with simple, memorable elements while the system manages the complex security requirements.
Solution Approach 2:
The patent replaces the mechanical process of human memory and manual password creation with an automated computational system. Instead of relying on human cognitive abilities to remember complex strings, the system uses cryptographic hash functions to deterministically generate passwords from user-provided questions and answers. This substitution eliminates the need for human memorization of complex passwords while maintaining high security through cryptographic principles.
2Reliability
If a complex password is manually created, then security is improved, but the process of password creation and management becomes more difficult
Solution Approach 1:
The system enables self-service password generation and management. Users provide their own questions and answers, and the system automatically generates secure passwords without requiring manual creation or complex user configuration. The service handles the entire password management lifecycle, including generation, storage (in the form of question-answer pairs), and recreation, making the process simple and user-friendly while maintaining high security standards.
Solution Approach 2:
The patent transforms the password from a static, manually-created string into a dynamically generated value based on user responses to questions. By changing the parameters from which the password is derived (from random character selection to hash-based generation from user inputs), the system simplifies the user's task while maintaining or improving security. The password becomes a function of user-provided data rather than a standalone complex string.
3Reliability
If user-specific information is stored for password generation, then password customization and security are improved, but data storage requirements increase
Solution Approach 1:
The patent extracts only the essential elements needed for password generation and storage: user questions and their corresponding answers. Instead of storing complete user profiles or extensive personal information, the system extracts and stores only the minimal necessary data (questions and answers) that can be used to generate secure, unique passwords. This extraction approach reduces storage requirements while maintaining password uniqueness and security.
Solution Approach 2:
The system uses inexpensive, minimal data structures for storing password information. The questions and answers are stored in a simple, lightweight format that requires minimal storage space. The approach treats the stored data as disposable in the sense that if compromised, the system can regenerate passwords using the same questions and answers, and the storage overhead is kept to a minimum by storing only essential elements rather than comprehensive user data.
Data Source
AI summary
User input is received from a user for identifying a particular account from among multiple accounts. A set of questions specific for the particular account is selected. Further user input comprising one or more responses to each question of the set of questions is received. A password is generated based on the one or more received responses.