Password Reset Disk Using Public Key Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current password restoration methods are insecure, costly, and logistically challenging due to the risk of unauthorized access and the need for customer service intervention when users forget their passwords.
Innovation Solution
A password reset disk is created using a public key/private key pair, where the private key is stored on a removable medium, allowing users to securely reset their password without contacting customer service, using the private key to decrypt and verify the encrypted password.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a static back door maintenance password is maintained for password restoration, then users can reset passwords without contacting customer service, but security is compromised due to the vulnerability of static passwords
Solution Approach 1:
The system performs preliminary actions by generating and storing an encrypted version of the maintenance password in the user's account before the user needs to reset their password. This encrypted password is stored securely and can be used later for restoration without exposing the actual maintenance password.
Solution Approach 2:
An encrypted version of the maintenance password acts as an intermediary between the actual maintenance password and the user's password reset process. This intermediary allows password restoration without requiring the actual maintenance password to be exposed or transmitted, thus maintaining security while enabling functionality.
2Reliability
If password restoration is handled through customer service communication, then security can be maintained through verification, but operational cost and time consumption increase significantly
Solution Approach 1:
The system enables self-service password restoration by allowing users to reset their own passwords using the encrypted maintenance password stored in their accounts. Users can perform the restoration independently without requiring customer service intervention, thus eliminating time loss while maintaining security through the encrypted verification process.
3Ease of operation
If the maintenance password is communicated through telephone or network, then password restoration can be performed, but unauthorized access risk increases
Solution Approach 1:
The encrypted maintenance password serves as a secure intermediary that enables password restoration without requiring communication of the actual maintenance password through vulnerable channels like telephone or network. The encrypted version can be stored and processed securely within the system, eliminating the need for sensitive information transmission while maintaining restoration accessibility.
Solution Approach 2:
Instead of using the actual maintenance password for restoration, the system creates and uses a copy - specifically an encrypted version - of the password. This copy can be stored and processed without exposing the original sensitive information, thus enabling restoration functionality while preventing unauthorized access through secure handling of the encrypted copy.
Data Source
AI summary
A password reset disk is created using a private key/public key pair. The private key is stored on a removable computer-readable medium so that it can be removed and securely stored remote from the computer system on which it was created. The public key is stored on the computer system and used to maintain an encrypted copy of the current password to be stored on the computer system. If the user forgets a password, the user may insert the password reset disk into the computer system. The private key is retrieved from the password reset disk and the encrypted password is decrypted using the private key. If the decryption is successful, the user is allowed to set a new password. The password reset disk is effective even if the user password has been changed since the creation of the password reset disk.