Password Key Obfuscation via Dynamic Compartment Rearrangement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User passwords stored in information handling systems are vulnerable to malicious access due to being stored in memory, which can be compromised by interlopers.
Innovation Solution
An information handling system processes an initial user password by separating it into compartments, selecting a random order, generating a key based on this rearrangement, and storing a key sequence representative of this order, rather than storing the password or key directly, to enhance security and manage keys dynamically.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password keys are stored in memory of information handling systems, then access control functionality is enabled, but security vulnerability increases due to potential compromise by interlopers
Solution Approach 1:
The password key is segmented into multiple compartments, each containing a portion of the original password. These compartments are stored separately in memory rather than as a single unit, making it difficult for interlopers to compromise the entire key by accessing memory. The system reconstructs the original password by combining compartments in the correct sequence only when authentication is needed.
Solution Approach 2:
The system dynamically manages key compartments by randomly selecting and rearranging them during authentication processes. The compartments can be repositioned and reconfigured, creating a dynamic key structure that changes over time rather than remaining static. This dynamic approach ensures that even if memory is compromised, the attacker cannot obtain a usable key without knowing the current compartment arrangement.
2Ease of operation
If password is stored directly in memory, then access control is simplified, but susceptibility to malicious access increases
Solution Approach 1:
The password is divided into multiple compartments that are stored separately in memory. This segmentation prevents malicious access because an interloper would need to compromise multiple separate memory locations and correctly reconstruct the password, rather than simply reading a single stored password value.
Solution Approach 2:
The system introduces compartment sequences as an intermediary layer between the stored password portions and the authentication process. This intermediary mechanism requires the system to actively manage and rearrange compartments according to stored sequences, adding a protective layer that prevents direct access to the original password even if memory is accessed maliciously.
3Reliability
If key is obfuscated by random rearrangement, then security against compromise is improved, but key management complexity increases
Solution Approach 1:
The key management system employs dynamic random rearrangement of password compartments using pseudorandom number generation. The compartments are shuffled and repositioned according to dynamically generated sequences, creating a constantly changing key structure. This dynamic approach maintains high security while allowing automated management through software algorithms rather than manual intervention.
Solution Approach 2:
The system performs self-service key management by automatically generating random rearrangement sequences and managing compartment positions without external intervention. The pseudorandom number generator and compartment management algorithms operate autonomously, reducing the need for complex external key management infrastructure while maintaining security through automated randomization.
Data Source
AI summary
In accordance with embodiments of the present disclosure, an information handling system may include a processor and a non-transitory computer-readable medium having stored thereon a program of instructions executable by the processor. The program of instructions may be configured to, when read and executed by the processor, receive an initial password, the initial password comprising a string of characters to be entered by a user of the information handling system for accessing the information handling system, separate the initial password into a plurality of compartments, select a random order of the plurality of compartments, generate a key based on the initial password as rearranged in accordance with the random order of the plurality of compartments, and store a key sequence representative of the random order of the plurality of compartments.