Password-Protection Module Using Application Identifiers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security systems, particularly password-based systems, are vulnerable to phishing attacks due to the difficulty in distinguishing trustworthy from untrustworthy applications, leading to unauthorized disclosure of sensitive information and identity theft.
Innovation Solution
A password-protection module that detects password requests from applications, combines user passwords with application identifiers to create protected passwords, and performs mutual authentication to ensure secure interactions, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password-based authentication is used for simplicity and convenience, then ease of operation is improved, but security against phishing attacks deteriorates
Solution Approach 1:
The patent segments the password authentication process into multiple components: the original password, application-specific identifiers, and salt values. By dividing the authentication mechanism into these separate elements that are combined through hashing, the system maintains user-friendly password entry while securing the authentication process against phishing attacks.
Solution Approach 2:
The patent introduces salt values and application identifiers as intermediary elements between the user's password and the authentication verification. These intermediaries ensure that even if a password is intercepted during transmission, it cannot be directly used to authenticate with other applications, thus protecting against phishing while maintaining the simple password-based interface.
2Reliability
If password protection mechanisms are implemented to prevent phishing, then security is improved, but device complexity increases
Solution Approach 1:
The patent changes the parameters of password authentication by transforming the plain password into a protected password through cryptographic hashing. By modifying the password parameter to include application identifiers and salt values in the hashing process, the system achieves enhanced security without adding complex hardware or infrastructure, relying instead on software-based cryptographic operations.
3Reliability
If application-specific password protection is applied to secure each application, then security against unauthorized access is improved, but ease of operation deteriorates due to multiple passwords
Solution Approach 1:
The patent creates a universal protected password mechanism that can be applied across multiple applications. Instead of requiring users to remember separate passwords for each application, the system uses a single password that is protected through application-specific identifiers and salt values during the authentication process, thus maintaining ease of operation while providing application-specific security.
Data Source
AI summary
A method of protecting a password being used to establish interaction between a user and an application includes detecting a request for the password from the application by receiving a notification from the user indicating the request. The method further includes combining the password with information identifying the application, so as to produce a protected password, and authenticating to the application using the protected password. The method may also include a mutual authentication capability between user and the application.