Password Management System Using Master Encryption Key
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face challenges in securely managing numerous passwords across different online platforms, often resorting to insecure methods like writing them down, which compromises security.
Innovation Solution
A system that stores passwords using a Master Encryption Key derived from user-defined prompt-character string associations, allowing users to remember only one set of associations for multiple passwords, enhancing security by using complex passwords without needing to recall them.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users store passwords in unsecure manners (written in unencrypted files), then users can easily remember which password is tied to which site, but security is significantly undermined
Solution Approach 1:
The patent introduces a password management system as an intermediary between the user and multiple passwords. The system stores passwords in an encrypted database and uses a master encryption key (derived from a single memorable passphrase) to decrypt and manage multiple passwords, eliminating the need for users to store passwords in insecure plain-text files while maintaining easy access through automated retrieval
Solution Approach 2:
The patent segments the password management function into distinct components: a master encryption key derivation module that converts a single passphrase into multiple encryption keys, an encrypted password database for secure storage, and an automated retrieval system. This segmentation allows secure storage while maintaining ease of access through the coordinated operation of these separate modules
2Adaptability or versatility
If users remember numerous passwords for different sites, then users can access multiple online platforms, but the complexity and burden of memorization increases
Solution Approach 1:
The patent implements a universal password management system where a single passphrase serves multiple functions: it derives the master encryption key, enables decryption of the password database, and facilitates access to numerous different online platforms. This multi-functionality eliminates the need for users to separately remember each password while maintaining the ability to access multiple platforms
Solution Approach 2:
The patent creates a centralized copy of all passwords in an encrypted database, which the system automatically retrieves and provides to applications as needed. Users interact with a single copy (the passphrase) rather than needing to remember multiple password copies, significantly reducing cognitive load while maintaining platform access capability
3Reliability
If users use complex passwords for each application, then security is improved, but users cannot remember these complex passwords
Solution Approach 1:
The patent implements a self-service system where the password management software automatically generates, stores, and retrieves complex passwords for multiple applications. The system uses a single user-defined passphrase to derive encryption keys that protect the stored passwords, allowing users to maintain complex passwords for security while the system handles the burden of management and retrieval
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
The systems, methods and apparatuses described herein provide a computing environment for authenticating a user. An apparatus according to the present disclosure may comprise a non-volatile storage, a user interface, and a password engine. The password engine is configured to retrieve two or more predetermined prompts from the non-volatile storage, present the two or more predetermined prompts on the user interface to a user in a random order, receive a first set of input(s) in response to the two or more predetermined prompts, create an encryption keyword from the received first set of input(s) according to an original order of the two or more predetermined prompts stored in the non-volatile storage, and use the encryption keyword to authenticate the user.