Root-Level Password Reset Agent for Forensic Data Preservation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing devices face challenges in password recovery, especially when the password is unknown or has been maliciously changed, which can lead to inaccessible data and forensic evidence loss.
Innovation Solution
A computerized method using a password reset agent executed at a root level of the computing device, which polls for a private key associated with a public key, determines a reset password, and changes the current password to the reset password without rebooting the device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a password reset is performed by rebooting the device, then the password can be changed, but the device state and forensic data are lost
Solution Approach 1:
The password reset agent is installed and configured in advance on the device before the password is needed. The agent includes a public key that is stored locally, and it is set up to automatically detect private keys and trigger password resets without requiring device reboot or administrator intervention at the time of reset.
Solution Approach 2:
A private key stored on an external data source acts as an intermediary trigger. When the password reset agent detects this private key, it automatically initiates the password reset process. This intermediary mechanism enables password recovery without requiring direct administrator access or device reboot, thereby preserving forensic data.
2Reliability
If administrator access is required to reset the password, then security is maintained, but access is denied when administrators are unavailable
Solution Approach 1:
The password reset agent enables the device to reset its own password automatically when it detects the private key on an external data source. This self-service mechanism eliminates the need for administrator intervention while maintaining security through cryptographic verification, allowing password recovery even when administrators are unavailable.
Solution Approach 2:
The password reset agent is pre-configured with the public key and set up to automatically detect private keys and trigger password resets. This preliminary configuration allows the device to perform self-service password recovery without requiring administrator availability at the time of reset.
3Ease of operation
If the password reset agent runs continuously, then password reset is always available, but device resources are consumed
Solution Approach 1:
The password reset agent polls for the presence of private keys at periodic intervals rather than continuously monitoring. This periodic polling approach maintains password reset availability while significantly reducing device resource consumption compared to continuous monitoring.
Data Source
AI summary
The disclosure herein describes using a password reset agent to automatically change the password of a computing device. A password reset agent is executed at a root level of the computing device, wherein the password reset agent is associated with a public key. A data source is polled by the password reset agent for a private key associated with the public key. Based on finding the private key on the data source, a reset password is determined and based on determining the reset password, the password reset agent changes a current password of the computing device to the determined reset password. The password reset agent runs in the background on the computing device, enabling the agent to change the password, even when the computing device is locked or otherwise inaccessible. The described password reset agent can also be used on virtual machines.