Password Recovery System Using Long-Term Memory Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current password recovery systems do not differentiate between short-term and long-term memory of passwords, leading to inadequate user identity verification and potential security risks, especially when users forget passwords stored in long-term memory.
Innovation Solution
A system that determines whether a user has long-term memory of a password and performs enhanced user identity verification through acquaintances when necessary, using a call connection server to verify identity via automated response system calls, and adjusts authentication procedures based on long-term memory conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the user terminal provides the same password cancellation service for both short-term memory and long-term memory cases, then the processing procedure is simple and uniform, but the security risk increases because users with long-term memory are less likely to genuinely forget their password
Solution Approach 1:
The patent applies local quality by differentiating the password cancellation service into two distinct processing paths: one for short-term memory cases and another for long-term memory cases. The system determines which path to follow based on the user's memory characteristics, applying appropriate verification procedures to each case rather than using a uniform approach for all users.
Solution Approach 2:
The patent implements dynamics by making the verification procedure adaptive rather than static. The system dynamically adjusts the authentication requirements based on the determined memory type of the user. When long-term memory is detected, enhanced verification procedures are automatically applied, making the security measures flexible and responsive to individual user characteristics.
2Reliability
If enhanced user identity verification through acquaintances is performed for all password cancellations, then the security risk is reduced, but the processing complexity and time increase
Solution Approach 1:
The patent segments the user population into two distinct groups based on memory characteristics: short-term memory users and long-term memory users. This segmentation allows the system to apply different verification complexities to different segments, avoiding the need to implement complex verification procedures for all users while maintaining high security for the long-term memory segment.
Solution Approach 2:
The patent changes the verification parameter (complexity level) based on the user's memory type. For short-term memory users, a standard verification process is applied, while for long-term memory users, enhanced verification parameters are activated. This parameter change approach allows the system to maintain security while optimizing processing efficiency for different user groups.
3Reliability
If the system performs additional verification for long-term memory users, then the security against unauthorized access is improved, but the time required for password recovery increases
Solution Approach 1:
The patent applies preliminary action by pre-determining the user's memory type before the password cancellation process begins. This preliminary classification allows the system to prepare the appropriate verification procedure in advance, so that when password recovery is needed, the system can quickly initiate the correct process without unnecessary delays or iterative verification steps.
Data Source
AI summary
The present invention relates to a system and method for processing a lost password by selectively providing a reset process under the password in the long-term memory of the user. According to the present invention, the system includes a user terminal including: a long-term memory condition registration unit receiving the registration of long-term memory conditions; a long-term condition determination unit determining the long-term memory conditions are satisfied; a user identification unit, after the occurrence of a lost password, authenticating the user through a user identification verification scheme or through a enhanced user identification verification scheme whether or not the password resides in the long-term memory of the user, and a lost state resetting unit cancelling the lost password occurrence state. According to the present invention, provided are an identification verification service or an enhanced identification authentication service whether or not the password resides in the long term memory of user.