Password Generation Using Segmented Key and Derivation Parameters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Password theft is a growing concern due to the increasing prevalence of digital data, as existing password security measures are inadequate against cyber-attacks, requiring stronger and more complex passwords to prevent unauthorized access.
Innovation Solution
A device generates application passwords using a user input string, a randomly generated key, and derivation parameters such as a hash function, hashing iteration value, and character set, which are stored remotely, increasing entropy and security by separating the password elements and requiring access to multiple storage locations for attackers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If passwords are made stronger and more complex to prevent cyber-attacks, then password security is improved, but user experience deteriorates due to increased complexity
Solution Approach 1:
The password generation system is segmented into multiple independent components: a user-chosen seed, a randomly generated key, and application-specific derivation parameters. Each component is stored separately, and their combination creates the final password. This segmentation allows the system to generate strong, unique passwords for each application while users only need to remember their simple seed, thus improving both security and user experience.
2Reliability
If passwords are made stronger and more complex, then password security is improved, but the difficulty of detecting and measuring password strength increases
Solution Approach 1:
The system changes the parameters of password generation by introducing multiple variable elements: the user seed, randomly generated key, derivation parameters (such as salt values and iteration counts), and application identifiers. By varying these parameters dynamically, the system generates passwords with different entropy levels and complexity characteristics, making traditional password strength assessment methods ineffective while maintaining high security.
3Reliability
If multiple elements are used to generate passwords, then password uniqueness and security are improved, but device complexity increases
Solution Approach 1:
The system implements self-service through automated password generation and management. The server automatically generates random keys, selects derivation parameters, combines them with user seeds, and stores all components securely. Users simply provide their seed and receive generated passwords without needing to understand or manage the complex underlying processes, thus achieving high password uniqueness while keeping the user interface simple.
4Reliability
If passwords are dynamically generated, then password security against brute-force attacks is improved, but the time required for password generation increases
Solution Approach 1:
The system performs preliminary actions by pre-generating and storing random keys and derivation parameters during account setup or idle periods. When a user needs a password, the system quickly retrieves these pre-prepared components and combines them with the user seed using fast cryptographic operations. This preliminary preparation significantly reduces the time required for actual password generation while maintaining high brute-force resistance through dynamic combination.
Data Source
AI summary
In some examples, a method includes receiving a user input string and generating an application password for a particular application from the user input string. Generating the application password may include generating a key for the particular application and specifying a derivation parameter of the application password by applying an indiscriminate selection process to select a character set from multiple character sets for generating the application password. Generating the application password may also include mapping a portion of a hash value of the key and the user input string to characters of the character set selected through the indiscriminate selection process to obtain the application password.