Passwordless Vault with On-Demand Password Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password vaults store actual passwords, making them vulnerable to unauthorized access, which compromises all stored data.
Innovation Solution
A passwordless vault generates passwords on demand using application-specific information and a PIN, without storing the passwords themselves, employing algorithms like XOR operations and character block generation to create unique passwords.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional password vaults store actual passwords, then users can access stored credentials, but the vault becomes vulnerable to unauthorized access compromising all stored data
Solution Approach 1:
The patent extracts the actual passwords from storage and replaces them with password rules and character blocks. Instead of storing the passwords themselves, the system stores only the rules for generating them, effectively removing the vulnerable element (actual passwords) while preserving the functionality (password retrieval).
Solution Approach 2:
The patent introduces character blocks as an intermediary between the stored data and the generated passwords. These character blocks act as a mediator that, when combined with password rules, produce the actual passwords without the passwords themselves being stored or exposed in the vault.
2Reliability
If passwords are generated on demand using algorithms and character blocks, then security is enhanced, but the system complexity increases
Solution Approach 1:
The patent segments the password generation process into distinct components: password rules (storing constraints and requirements), character blocks (storing pools of valid characters), and generation algorithms (combining rules and blocks). This segmentation allows each component to be independently managed and processed, reducing overall system complexity despite the enhanced security functionality.
3Reliability
If the vault stores only password rules and character blocks instead of actual passwords, then unauthorized access to individual passwords is prevented, but the ability to retrieve exact original passwords may be limited
Solution Approach 1:
The patent performs preliminary action by storing password rules and character blocks in advance, which are then used to generate passwords on demand. This preliminary preparation ensures that passwords can be reproduced without storing the originals, maintaining both security and functionality through pre-configured generation parameters.
Data Source
AI summary
Passwords are repeatably generated for selected applications in a passwordless vault by applying an algorithm to certain stored application-specific information and a personal identification number, or PIN, provided by a requesting user. Upon authentication, the user requests a password for a selected application and enters an appropriate PIN. The password for the selected application is generated upon request rather than retrieved from storage. In that way, passwords themselves are not available upon mere access to the passwordless vault, which contains the stored application-specific information.