Password Generation via Source Text Modification and Hashing

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Users struggle to remember complex, secure passwords that are both memorable and secure, often resorting to writing them down or using password managers, which pose security risks due to unauthorized access.

Innovation Solution

A method involving selecting and modifying a large source text file with predefined changes, applying cryptographic hash functions to generate a password, allowing users to remember minimal data while achieving high security levels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users create complex passwords with multiple character types and length requirements, then password security entropy is improved, but user memorability deteriorates

Engineering Contradiction:

Improvepassword securityVSAvoiduser memorability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a passphrase as an intermediary element that users can easily remember, which then serves as input to a cryptographic hash function to generate the actual secure password. The passphrase acts as a mediator between user memory capabilities and security requirements, allowing users to remember simple phrases while the system generates complex secure passwords through hashing.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If users write down complex passwords to remember them, then memorability is improved, but security deteriorates due to unauthorized access risk

Engineering Contradiction:

Improvepassword memorabilityVSAvoidunauthorized access risk

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent replaces the mechanical approach of writing down passwords with a cryptographic system. Instead of physically storing the password (which creates security risks), the system uses cryptographic hash functions to derive secure passwords from passphrases that users can safely store or remember. This substitution eliminates the need for physical password storage while maintaining security.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If password length is increased to achieve higher entropy, then password security is improved, but user ability to remember the password deteriorates

Engineering Contradiction:

Improvepassword entropyVSAvoidpassword recallability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent inverts the traditional password generation approach. Instead of requiring users to create and remember long complex passwords, the system takes a short memorable passphrase and inverts the process by using cryptographic hashing to generate the secure long password automatically. This inversion allows users to work with short passphrases while the system handles the complexity of generating secure long passwords.

Inventive Principle:

Principle #13The other way round (Inversion)

Data Source

PatentEP3312754B1Method for password generation

Publication Date: 2019.05.15 ERSEK OTTO

AI summary

A method for the reproducible generation of a password, comprising the following steps: - Selection of one or more files from a multitude of files formed from concatenated characters, known only to the password holder, - Copying the one or more selected files into a source text file, resulting in a total length of N characters, - Modifying the source text file by a number d of predefined changes at selected positions in the source text file, the changes of which are known only to the password holder, - Applying one or more cryptographic hash functions in a predefined number of iterations to the modified source text file to obtain the password as a result.