Password Generation System Using Irreversible Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password security methods are vulnerable to brute force and dictionary attacks, and users face challenges in managing strong, unique passwords due to their complexity and the risk of losing or forgetting encrypted master files, while current solutions often require third-party records or databases that can be compromised.
Innovation Solution
A password generation and retrieval system that uses a combination of website information, a user's secret phrase, and pin number, processed through an irreversible cryptographic hash function, eliminating the need for databases and allowing users to generate and retrieve strong, unique passwords without third-party records, using a browser extension, smartphone app, or stand-alone program.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If strong passwords with mixture of numbers, letters, and symbols are used, then password security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent introduces a trusted third party service that generates and securely manages passwords on behalf of users. This intermediary service uses secure algorithms to create strong passwords and stores them in encrypted form, allowing users to authenticate without directly handling or remembering complex password strings. The service acts as a mediator between the user and the authentication system.
2Ease of operation
If passwords are stored in encrypted master files or databases, then ease of operation is improved, but reliability deteriorates
Solution Approach 1:
The patent implements a system where password data is treated as ephemeral and non-persistent. Instead of storing passwords in reusable databases or files that can be compromised, the system generates passwords that are used immediately and then discarded. Each authentication session uses fresh cryptographic material that cannot be reused or stolen for future attacks.
3Ease of operation
If third-party password repository services are used, then ease of operation is improved, but reliability deteriorates
Solution Approach 1:
The patent extracts the password storage function from centralized third-party repositories and distributes it to individual user devices. Each user's authentication credentials are stored locally in secure elements or encrypted storage on their own device, eliminating the need for centralized password databases that become attractive targets for attackers. The service provider cannot access or compromise user passwords since they never leave the user's device.
Data Source
AI summary
The present invention seeks to meet these needs by providing a password generation and retrieval system (PGRS) that generates encrypted passwords with a computer program using an algorithm that combines a website information such as a domain name or email address, the user's own text input or phrase, and the user's own numeric value or pin number. The present invention does not involve the maintenance of a database of any kind. As such, there is no login required and no records are kept of the visitors, their input or the passwords generated. Preferably, the process is carried out using a website, browser extension, smart phone application and/or a stand-alone executable program.