Password Identification System Using Key Indicator Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer systems with service accounts often face unauthorized access due to default passwords being well-known, and subsequent changes to these passwords are not properly stored or documented, leading to access issues for authorized technicians.
Innovation Solution
A computer-implemented method that processes a key indicator and encrypted password to generate a decrypted password, using asymmetric public and private key pairs or symmetric encryption keys, allowing authorized technicians to access service accounts without network access, and ensuring secure password management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If default passwords are used for service accounts, then ease of operation is improved, but security is worsened due to unauthorized access
Solution Approach 1:
The system performs preliminary encryption of passwords and stores encryption keys separately before any access occurs. When a service account is created, the password is immediately encrypted and the encryption key is stored in a secure key store, preventing unauthorized access from the outset while maintaining operational ease through automated key management.
Solution Approach 2:
The patent introduces an intermediary key management system that mediates between the password and the service account. Instead of directly storing or using plaintext passwords, the system uses encryption keys as intermediaries to secure password storage and retrieval, thereby preventing unauthorized access while maintaining ease of operation through automated key management.
2Object-affected harmful factors
If default passwords are changed to improve security, then security is improved, but reliability is worsened due to password loss
Solution Approach 1:
The system implements feedback mechanisms where encryption keys are automatically managed, stored securely, and made available when needed. The key store provides feedback loops that ensure keys are properly retrieved and used for password decryption, preventing password loss while maintaining security through automated key management and verification processes.
Solution Approach 2:
The patent enables self-service through automated key management systems that handle encryption, decryption, and key storage without requiring manual intervention. The system automatically retrieves encryption keys from secure storage and applies them to decrypt passwords when service accounts need access, eliminating the reliability issues associated with manual password management while maintaining security.
3Object-affected harmful factors
If encrypted passwords are stored with key indicators, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent implements a universal key management system that handles multiple functions: encryption, decryption, key storage, and key retrieval. This multi-functional approach consolidates what would otherwise require separate systems for each operation, reducing overall device complexity while maintaining security through encrypted password storage with key indicators.
Data Source
AI summary
A method, computer program product, and computing system for receiving a key indicator and an encrypted password concerning an electronic device to be accessed. The key indicator may be processed to identify a decryption key. The encrypted password may be processed with the decryption key to generate a decrypted password.