Password Manager Retrieval Keys for High-Entropy Credential Entry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
High-entropy security information, such as passwords and PINs, is difficult for users to enter correctly and remember due to their complexity, leading to increased errors and inconvenience, especially for users with disabilities, and often results in the use of less secure, shorter, and less random passwords.
Innovation Solution
A system that generates high-entropy security information, which includes a generator computer producing both human-readable and machine-readable representations, allowing users to securely store and enter the information using a password manager, eliminating the need for manual typing and reducing errors through automated scanning.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If high-entropy security information is used, then security strength is improved, but ease of entry and memory is worsened
Solution Approach 1:
The patent creates a machine-readable representation (QR code, barcode, or other machine-readable indicia) of the high-entropy security information that can be scanned and automatically entered into the target computer. This copy allows the complex password to be transferred without manual typing, resolving the contradiction between security strength and ease of entry.
Solution Approach 2:
The patent replaces the mechanical manual typing process with an automated optical or machine-readable scanning system. Instead of requiring users to physically type each character of the high-entropy password, the system uses image scanning or machine-readable code recognition to automatically input the credentials, eliminating the difficulty of manual entry while maintaining security.
2Reliability
If high-entropy security information is used, then security strength is improved, but time required for entry is increased
Solution Approach 1:
The patent generates and stores a machine-readable representation of the high-entropy security information in advance. When access is needed, the pre-generated machine-readable code can be immediately scanned and automatically entered, eliminating the time-consuming process of manually typing the complex password at the moment of use.
Solution Approach 2:
By creating a machine-readable copy (such as a QR code or barcode) of the high-entropy password, the system enables rapid transfer of the credentials through scanning. This copy mechanism dramatically reduces entry time compared to manual typing while preserving the security benefits of high-entropy information.
3Ease of operation
If manual entry of high-entropy security information is required, then user control is maintained, but error rate is increased
Solution Approach 1:
The patent replaces manual mechanical typing with automated optical scanning or machine-readable code recognition. This substitution eliminates human typing errors while maintaining user control, as the system automatically reads and inputs the credentials without requiring the user to physically type each character.
Solution Approach 2:
The machine-readable representation serves as an accurate copy of the high-entropy password that can be read and transferred without human intervention in the actual data entry process. This copying mechanism ensures high accuracy by eliminating manual typing errors while the user maintains control through the scanning and automatic entry process.
4Reliability
If physical paper forms are used to store high-entropy passwords, then security is maintained, but complexity of operation is increased
Solution Approach 1:
The patent uses machine-readable representations (QR codes, barcodes, or other machine-readable indicia) as digital copies of the high-entropy passwords stored in the password manager. These machine-readable copies can be scanned and automatically entered, providing a simpler operation than physical paper forms while maintaining security through encrypted storage in the password manager.
Solution Approach 2:
The patent replaces the physical paper form system with an electronic/digital machine-readable code system. Instead of requiring users to handle, read, and manually type from physical papers, the system uses machine-readable codes that can be automatically scanned and entered, reducing operational complexity while maintaining security through the password manager's encryption.
Data Source
AI summary
A system for securely accessing a target computer using high entropy security information stored in a password manager including a user computer configured to execute instructions to perform operations including receiving password manager access information and a retrieval key, accessing the password manager using the password manager access information, receiving the high entropy security information provided by a generator computer, storing the high entropy security information in the password manager, in association with the retrieval key, supplying the retrieval key to retrieve the high entropy security information that was stored in the password manager, and providing the high entropy security information. The target computer receives the high entropy security information provided by the user computer, and provides access to the target computer when the high entropy security information is verified. The generator computer, the user computer, and the target computer are communicatively decoupled from each other.