Password Generation via Transient Memory and Intermediary Extension
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password management systems face challenges in preventing password reuse, ensuring secure storage, and resisting phishing attacks, particularly due to reliance on third-party services and the vulnerability of master passwords.
Innovation Solution
A computer-implemented method generates unique, strong passwords for each website by using a local signature and a master password, with a remote server involved in the process to prevent domain spoofing and ensure secure password generation, while allowing synchronization across devices without permanent storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If passwords are stored locally or in the cloud, then password management is simplified, but security is compromised due to potential breaches and phishing attacks
Solution Approach 1:
The patent extracts the password from storage and keeps it only in transient memory during active use. The system generates passwords on-demand and does not persist them, eliminating the security vulnerability of stored passwords while maintaining ease of use through automated generation and filling.
Solution Approach 2:
The patent introduces a browser extension as an intermediary between the user and the password management process. This extension handles password generation, validation, and automatic filling, providing a secure layer that prevents direct exposure of passwords to phishing sites while simplifying user interaction.
2Ease of operation
If a master password is used to access stored passwords, then password management becomes easier, but the system becomes vulnerable to attacks targeting the master password
Solution Approach 1:
The system performs self-service by generating passwords locally in the browser extension using cryptographic functions and entropy sources. No master password is required, and no external server is involved, making the system immune to phishing attacks that target credential harvesting while maintaining ease of access.
Solution Approach 2:
The patent removes the master password concept entirely from the system. Instead of storing passwords protected by a master password, the system generates passwords on-demand without any secret key, eliminating the attack surface associated with master password compromise.
3Reliability
If passwords are generated securely with complexity requirements, then security is improved, but user memorability and ease of use deteriorate
Solution Approach 1:
The system generates complex, secure passwords automatically using cryptographic functions and entropy sources, then fills them into forms without requiring user memorization. The browser extension handles the entire process, providing strong security while eliminating the burden of remembering complex passwords.
Solution Approach 2:
The browser extension acts as an intermediary that generates and manages complex passwords, freeing the user from the need to remember them. The extension handles password creation, storage in transient memory, and automatic filling, maintaining security while improving usability.
4Adaptability or versatility
If third-party password management services are used, then password synchronization across devices is improved, but the risk of data breaches and unauthorized access increases
Solution Approach 1:
The patent removes passwords from centralized storage and keeps them only in transient memory within the browser extension. This extraction eliminates the risk of data breaches in third-party services while maintaining the ability to synchronize password generation capabilities across devices through local cryptographic operations.
Solution Approach 2:
The browser extension serves as a local intermediary that generates passwords independently without requiring connection to external servers. This eliminates the need for third-party synchronization services while maintaining security, as each device generates passwords locally using the same cryptographic algorithms and entropy sources.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a computer-implemented method for generating passwords and to computer program products of same. The method comprises: accessing, by a user (100), by means of a first computation device (200), for the first time, a webpage or website identified by a web domain that requires the Identification of the user (100) on the webpage or website; and generating, by means of a password generator, a password required by the webpage or website, based on the use of a result obtained from the execution of a cryptographic function using password policies related to the domain, the use of a master password (101) known only to the user (100) and the use of an Id_Hash (208).