Password Generation via Mnemonic Hints and Reinforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password systems face challenges in generating passwords that are easy for users to remember yet difficult for attackers to guess, often requiring users to resort to insecure practices like writing down passwords due to memory degradation over time.
Innovation Solution
A method and apparatus that generate passwords based on user-selected textual, audio, or visual hints, such as poems, jokes, or images, with periodic reminders to reinforce memory, ensuring the password is both memorable and secure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users are required to use complex random passwords to improve security, then the password becomes harder to guess by attackers, but the password becomes difficult for users to remember
Solution Approach 1:
The patent introduces mnemonic aids (stories, music, poetry associations) as intermediary elements that bridge the gap between secure random passwords and human memory capabilities. These aids serve as mediators that help users encode and retrieve complex passwords without needing to memorize them directly.
Solution Approach 2:
The system performs preliminary actions by automatically generating passwords and pre-associating them with mnemonic aids before the user needs to remember the password. The enrollment process sets up these associations in advance, so users don't have to manually create or remember complex password structures.
2Ease of operation
If users write down or store passwords in computer files to remember them, then the password becomes easier to recall, but system security is compromised
Solution Approach 1:
The patent replaces physical or digital storage of passwords with mnemonic aids as an intermediary memory system. Instead of writing passwords down or storing them in files, users are provided with stories, music, or poetry that serve as safe intermediary representations that trigger password recall without exposing the actual password.
3Reliability
If the number of login attempts is limited to prevent password guessing, then security against attackers is improved, but legitimate users may be locked out due to forgotten passwords
Solution Approach 1:
The patent implements feedback mechanisms by providing users with mnemonic aids and associations that enable them to successfully recall passwords on their first or subsequent legitimate attempts. This feedback loop ensures that authorized users can access the system without triggering security locks, while still maintaining protection against brute-force attacks.
4Reliability
If users are required to change passwords periodically to improve security, then resistance to password guessing is enhanced, but user convenience and memory retention are reduced
Solution Approach 1:
The patent performs preliminary action by establishing strong mnemonic associations during password creation that make passwords more stickier and longer-lasting in memory. This preliminary encoding reduces the frequency with which users need to change passwords, as the mnemonic aids help maintain password recall over extended periods.
Data Source
AI summary
A method and apparatus are provided for generating passwords that may be memorized by a user, yet not easily guessed by an attacker. A user is presented with one or more textual, audio or visual hints. A password is automatically generated based on the selected hint (and possibly further input from the user). The presented hints may include poems, songs, jokes, pictures or words. The generated password and selected hint can be presented to the user during enrollment for further reinforcement and stored in a user database for subsequent reinforcement and verification. The enrollment process may schedule the sending of one or more reminder messages to the user containing the hint to reinforce the password in the user's memory.