Password Streaming Interface Memory Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password entry systems store passwords in memory unsecured, making them vulnerable to attackers who can access and dump memory contents, compromising user authentication security.
Innovation Solution
Implementing a password streaming method where the password user interface generates commands to send to a separate password storage component, overwriting memory with masking characters and transmitting encrypted commands, ensuring the password is never stored in plain text in the user interface's memory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the password user interface stores the password in its associated memory portion, then the password can be easily accessed and processed by the UI, but the password becomes vulnerable to attackers who can access and dump memory contents
Solution Approach 1:
The patent extracts the password storage function from the password user interface to a separate secure password storage component. The UI no longer retains the password in its memory after transmission, removing the vulnerability source while maintaining operational capability through command-based interaction with the secure storage component.
Solution Approach 2:
The patent introduces a secure password storage component as an intermediary between the user input and the authentication system. This mediator handles password storage securely while the UI interacts with it through commands, preventing direct memory access to the password by the UI or potential attackers.
2Productivity
If the password is stored in clear text in the UI memory, then the UI can quickly process and use the password for authentication, but the unsecured storage exposes the password to attackers
Solution Approach 1:
The patent segments the authentication system into two distinct parts: the password user interface that handles input and command generation, and a separate secure password storage component that handles secure storage and authenticated retrieval. This segmentation allows each component to perform its function securely without compromising the other.
Solution Approach 2:
The patent changes the state parameter of the password from clear text to encrypted form in the secure storage component. The password is transmitted in clear text only temporarily for authentication purposes, then stored in encrypted form, changing its security parameter while maintaining functionality.
Data Source
AI summary
Embodiments described herein are related to a method for password streaming. The method comprises: upon receiving, at the first device, a first entry corresponding to a password in the password user interface, the first entry adding a first character to the password: adding the first character to an editing placeholder stored in memory of the password user interface; transmitting a command to a password storage component separate from the memory of the password user interface, wherein the command represents the first entry, wherein the password storage component is configured to store the password and edit the password to include the first character based on the command; and overwriting the first character with a first masking character in the editing placeholder based on transmitting the command.