Lock Screen Password Reset via Trusted Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for resetting a forgotten lock screen password on electronic devices often result in user data loss due to factory settings restoration, adversely affecting user experience and security.
Innovation Solution
A password resetting method involving a trust relationship between two electronic devices, where one device authenticates the other using a password authenticated key exchange (PAKE) protocol, allowing the user to reset the lock screen password securely without factory settings restoration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If factory settings restoration is used to reset the lock screen password, then the lock screen password can be reset and the device can be used normally, but user data is lost
Solution Approach 1:
The patent introduces a second electronic device as an intermediary to assist in resetting the lock screen password of the first electronic device. The second device receives authentication information from the user, verifies it, and provides authorization credentials that allow password resetting without data loss. This intermediary mechanism enables secure password recovery while preserving user data.
Solution Approach 2:
The patent implements preliminary authentication and authorization actions before the password reset process. The user's authentication information is verified in advance by the second electronic device, and authorization credentials are prepared beforehand. This preliminary verification ensures that only authorized users can reset passwords, and the process can proceed without factory restoration, thereby preserving user data.
2Reliability
If traditional password resetting methods are used, then the lock screen password can be reset, but security is compromised due to lack of authentication verification
Solution Approach 1:
The patent implements a feedback mechanism where the second electronic device receives authentication information from the user, verifies it against stored credentials, and provides feedback in the form of authorization credentials if verification succeeds. This feedback loop ensures that password resetting only occurs after proper authentication, preventing unauthorized access while enabling legitimate password resets.
Solution Approach 2:
The second electronic device serves as a security intermediary that mediates the password resetting process. It verifies authentication information and controls the issuance of authorization credentials, ensuring that password resets are performed only after successful authentication. This intermediary layer enhances security by separating the authentication verification function from the password resetting function.
Data Source
AI summary
A password resetting method includes a user entering first authentication content based on prompts of a first electronic device, and when the first authentication content on the first electronic device matches second authentication content on an associated second electronic device, the first electronic device may allow and prompt the user to reset a lock screen password. The second electronic device is a device that has an association relationship with the first electronic device. Therefore, when forgetting the lock screen password, the user may reset the lock screen password by authenticating the second electronic device.