Password Hashing and Selective Storage for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Managing multiple passwords across different domains and environments is inefficient and poses security risks, as existing password storage methods do not adequately differentiate between passwords that should and should not be stored, leading to potential security breaches.
Innovation Solution
A method and system that generate and compare hash values for passwords using a secure hash algorithm, allowing for the storage of hash values instead of passwords and suppressing storage of specific passwords based on pre-defined criteria, thereby enhancing password management efficiency and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If passwords are stored in plain text for easy access, then ease of operation is improved, but security is worsened due to potential breaches
Solution Approach 1:
The patent creates a copy of the password in the form of a hash value and stores this copy instead of the original password. The hash value serves as a representative that can be stored and compared, while the actual password remains secure. This allows the system to maintain security through the hash copy while enabling efficient password verification without storing the plaintext password.
Solution Approach 2:
The patent introduces a hash function as an intermediary between the password and storage. The hash function transforms the password into a hash value that can be stored and compared. This intermediary layer allows the system to work with hashed versions of passwords for storage and verification purposes, eliminating the need to store and transmit plaintext passwords directly.
2Ease of operation
If all passwords are stored uniformly, then ease of operation is improved, but security is worsened due to inability to differentiate sensitive passwords
Solution Approach 1:
The patent applies different storage characteristics to different passwords based on their sensitivity. By evaluating each password against criteria (such as domain type, complexity, or sensitivity indicators), the system determines whether to store the password, its hash value, or neither. This local differentiation allows sensitive passwords to be excluded from storage while maintaining ease of operation for non-sensitive passwords.
Solution Approach 2:
The patent segments the password storage process into distinct evaluation and storage paths. Passwords are first evaluated against security criteria, then routed to different storage mechanisms based on their characteristics. This segmentation allows the system to handle different password types differently - storing hash values for some passwords while excluding others, thereby achieving selective security without uniform treatment.
3Reliability
If hash values are stored instead of passwords, then security is improved, but complexity increases due to hashing and comparison operations
Solution Approach 1:
The patent implements self-service by having the system automatically evaluate passwords against predefined criteria and determine their own storage eligibility. The password management process becomes autonomous, with the system deciding whether to store, hash, or exclude passwords based on built-in evaluation rules. This reduces the need for manual intervention and complex user-side management while maintaining security through automated hash-based verification.
Data Source
AI summary
A computer implemented method for managing a password is disclosed. The method can include generating a first hash value corresponding to a first password. The method can also include determining whether the first hash value corresponds with a second hash value included in the set of hash values. Further, the method can include suppressing storage of the first password in the set of passwords in response to determining that the first hash value corresponds with a second hash value included in the set of hash values.